{"report_id":"e18a75cb-65cb-4943-be03-ee164045661f","version":0,"status":"done","tags":[],"date":"2026-08-10T01:27:48Z","url":{"schema":"http","addr":"lab.webdemos.xyz/","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"77.37.55.48","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"https","addr":"lab.webdemos.xyz/","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"title":"HYIPLab - Home","dom":{"size":95254,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2641)","md5":"a9ca1f579def6bf0e725ac41320b5cf0","sha1":"120fce45c23ab9b7ee54ef0c35a79b24d4be86f9","sha256":"29f000ea2f67cb20a8a3a0f7fbb3cb6c01e07da0f584d214a3c47f992a487ba0","sha512":"8730b9ea6ef7c57f0502cb523fa0c09e07c10fce8f08256d00709ca3cd6149451f177a9697bdf8931f8289d0986b47d1a5b01fba149a6101b96dec3ac461a187","ssdeep":"1536:ueeefeeedeee1eeeWbeeefeeereee1eeechyaO5Fr:6hyaOb","tlshash":"9d930d3254f220b70193f0c5a6261b2e6fd1d907ca5a4201f2fc4ba95fdbf62ed67618","dom_hash":"domhashcd7d69c8de275ada1c6ea7e8f8d7ae96","first_seen":"2026-08-10T01:27:52.417888Z","last_seen":"2026-08-10T01:27:52.417888Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"lab.webdemos.xyz/","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"77.37.55.48","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-14T01:27:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":4,"received_data":105835,"sent_data":2261,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":21609,"sent_data":652,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lab.webdemos.xyz","ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"domain_registered":"2026-06-06","domain_rank":0,"first_seen":"2026-07-28T06:15:48.161045Z","last_seen":"2026-07-28T06:15:48.161045Z","alert_count":71,"request_count":71,"received_data":3014526,"sent_data":46267,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/iziToast.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"df383d4feeb05ea8bfe86a0569ef0524","sha1":"c6fd53b0a4abc2b73f55025ecb28d2eb65db93d4","sha256":"df6d4fc52f8f3af6ef59c215a1165e4667f7daaedf4c5409db56d7c133564446","sha512":"66af68f84d34c61851ffbbc9e3d9b114d274290c351354cc5a43d3c6b59c9e97c41431178148b024720a8adf77116fd7c44df51d2239184396d3a1ba045d40b4","ssdeep":"384:9hKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:3K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"2582c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","size":18486,"data":"","first_seen":"2023-03-07T12:01:52Z","last_seen":"2026-08-12T02:46:38.727429Z","times_seen":2012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/jquery-3.7.1.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"b83db83a1d89113ee03ab730efa48c7a","sha1":"2fccdd3e43db21bbc8448ed6d6311c4a6eea1166","sha256":"99e691fae5e88eb36bafb24758b35f0f990708295f8f2abe2221891e328f776a","sha512":"10d6f09a04eb135eae12c890be0512ead801e213614505937d1e782d5a6af86550395470ea31b3aebd85695f07a8fe903eda4941e52bcb7278cce02eacb13800","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:vHNwcv9VBQpLl88SMBQ47GK7","tlshash":"1083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-10-23T00:47:02Z","last_seen":"2026-08-12T08:10:42.914953Z","times_seen":9976,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/bootstrap.bundle.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3fac155eeeff0ebf33407a901291b8d","sha1":"51a602a556aa0b62e9a1426d27eac9278dd1156b","sha256":"448229f9de918450e93c0c537463bfb248c56cd64cd00c6efafdee07185ed6c2","sha512":"4b6e251dd64731e9f6b7b9240bab2c787f0c89413a1247ae7bb1815cd913f698aea33fb8f85dd4b66481cc987dbce25d207735b4315e81fad50b4341bdedba07","ssdeep":"1536:dzSMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6k+:w4Fj8GPwRM3CiI9BtB","tlshash":"9f73c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","size":80426,"data":"","first_seen":"2023-04-16T23:45:43Z","last_seen":"2026-08-12T05:00:43.441642Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/js/slick.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","size":53179,"data":"","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-08-11T18:51:48.608515Z","times_seen":2534,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark//js/odometer.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"137173424eea612b37a46854e4884fc1","sha1":"7e1b08b8104c7a83a1b5a855f1977a6686796609","sha256":"eb94751b98ab535553fa4f0be1ca2a81ddec692bcefd6b9fb289ffc3ebf621dc","sha512":"e755834d5ee1683f4104373c4561f6af94e7b92891c80a849db1b2b8a1d89feaa9602ac2724c457aa96bd48e54a0e50b8a3c8b576be71cef4b4b832b0331f1c1","ssdeep":"192:HABzlvQK8QecCHAOcu2a+OdI5s/GMb8Xuulj:gBhv18QecCxVxz+7dlj","tlshash":"f8228580ba11a725835371e151bf0609b7bb99aea404401df67c9dd9be29c38e12bf74","size":10264,"data":"","first_seen":"2023-03-07T01:20:07Z","last_seen":"2026-08-12T10:51:00.114941Z","times_seen":918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark//js/main.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce1d71219e6d196294a499750386634b","sha1":"3588ede66624e464ae5cc30c91fe602a4edeeee0","sha256":"ff078f028e28a5cbb842e2b04ec12c0482521c0871dd3e196bbf9dab5f6822e9","sha512":"654ef74fb1691e3aee4de4f8db0ae4f1831bb3555cbaadd112ca959e20db437830497ff21390edfd1087715af1f9a4ae8076c0c59c897e254cdc16010a5927a1","ssdeep":"96:mIrt8DlsiZ833/xJo3yy7moZrLHaHdIQLGZ5NKxRYySIJZ2:xWDl8Y3yy7mUrLHaHAZ5QKyS4Q","tlshash":"4202fd8a34f62031547f307a4bafb2642a1d140f5349ce107c6d138d6f94369a7a6bdf","size":8530,"data":"","first_seen":"2026-02-01T01:45:13.837656Z","last_seen":"2026-08-10T01:27:52.464228Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/firebase/firebase-app.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"9174ba20f23c99997fba354e28464950","sha1":"1defb1a64713f1584da55b9000bc2e880947c70b","sha256":"97dfb81602345440e1bf1fba3706d5fdf2c1bd44a5289fc83d39a721d59cf4e6","sha512":"617058ee36938e97f6d88f84d8bea710250fd8cf2b441f4a24ea713ecf2730bd786797fcb875bb4c5bf16b00b514f5dcf813d84251e9ec9e30d6d3b49c2c450f","ssdeep":"384:mcxRfeAv0RCyQ/nzW4o4XzJOmLEkd2zpe6dANiY7:rRfeAvACyQ7rfBY9dANiY7","tlshash":"2d92d8cdf7d2b066439350b8443f700ba33e2918984c80a8b659f5e76db690e956ff78","size":20122,"data":"","first_seen":"2025-09-29T03:52:34.028073Z","last_seen":"2026-08-11T04:44:12.139684Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/firebase/firebase-messaging.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"9696257c8e0c0506e6d016ea0b012799","sha1":"16c23be9153cc42e221e036c545b4dd9a1d83c0a","sha256":"0fa7467adb758ef83190611fae9b353861691ed7afb99dc7f2e351a9b373aa34","sha512":"bff6ac2667fea15c90c1f940e7d1c98252664671e14a5b3fa5e70e64dfd3ede647e79fbbd6283677fe6dd1e38586e584b92d3084a4377d3be834bdff14c725c9","ssdeep":"768:JNTKPzyK1Aoh6lggdIrseEuzfkSbjRtKp10ofv0CieMY:/TK7fAohxuIrgEkw1oj3f9b","tlshash":"550361ccbac3b51a5393a1fe54bf5146b63f7c18a80e4500fa69d1da7c7a0098637a74","size":40852,"data":"","first_seen":"2025-09-29T03:52:33.991098Z","last_seen":"2026-08-11T04:44:12.166183Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/select2.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"002d7096a5353ec54b00a92c1c02fcca","sha1":"3e781ebd85a107103cf2fbd440c71222bd6a7b9e","sha256":"ef441c155322dfe5468805526352861626dac8cca78682b8697e8154912b9b4d","sha512":"c4e7b91be54bb88b19688d28fb4f2b50a253a3c929b56cf32843c647c21ba422d7afefa255d3573bdfdd6a52048a6b422ce014646c119ff603c5ccb04e249d47","ssdeep":"768:8oMZDhrrJ/Y6EvKqtB8Nnoc9DpPJRGookOlxNjuvSnJZdjVrMbusSzXAFo8Jw:+ACno0okOvht6b5KEc","tlshash":"2163b64c7a93723502af20e6346b180922376b3e500b9668b428cded5dbdd15736bf7e","size":72484,"data":"","first_seen":"2023-03-07T14:22:11Z","last_seen":"2026-08-11T04:44:12.164839Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark//js/viewport.jquery.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"05e53ca0a6981b51e852ef3cd5992b8f","sha1":"8c14c9a432f4ca510229b8bba762e1b06ec08171","sha256":"77794bfdd5e7c0f475a82dbcf9b60f1e7c09cf5fd7677d74bdcc8fedac1a296a","sha512":"1a3e33c1c24d7c2a8ade371a34dd4bdc920f266b6864a688616258557b945b252979f251e25d6315d14625d8929e5d90c6b1fc1160bb76254ac23652e787c139","ssdeep":"","tlshash":"8441878a3ce220109d33f87e4b2fa168f2a99517155ddc503c9d8391af50b389a9cff8","size":1904,"data":"","first_seen":"2025-03-05T18:20:22.35444Z","last_seen":"2026-08-10T01:27:52.4219Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark//js/viewport.jquery.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.561Z","timestamp":1786325240561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark//js/viewport.jquery.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 660\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:58 GMT\r\netag: \"770-6a671292-37227cc5944b289b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b5b04db939f37aac309fbf51638a851c-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1904,"size_decoded":1215,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"05e53ca0a6981b51e852ef3cd5992b8f","sha1":"8c14c9a432f4ca510229b8bba762e1b06ec08171","sha256":"77794bfdd5e7c0f475a82dbcf9b60f1e7c09cf5fd7677d74bdcc8fedac1a296a","sha512":"1a3e33c1c24d7c2a8ade371a34dd4bdc920f266b6864a688616258557b945b252979f251e25d6315d14625d8929e5d90c6b1fc1160bb76254ac23652e787c139","ssdeep":"","tlshash":"8441878a3ce220109d33f87e4b2fa168f2a99517155ddc503c9d8391af50b389a9cff8","first_seen":"2025-03-05T18:20:22.35444Z","last_seen":"2026-08-10T01:27:52.4219Z","times_seen":52,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/blog/thumb_68580f52263441750601554.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.602Z","timestamp":1786325240602,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/blog/thumb_68580f52263441750601554.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21512\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d6274602d9fcf3a1854c4b2754d10fba-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.042\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":21512,"size_decoded":21835,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d643a26d14208711c1a12290a3291c46","sha1":"f6f53217dff21b426241eb2184f288ef36ad0ccf","sha256":"fdddaa66dcccb1169e0850855450eb11b77998d02641ff8f088229a46c0c266a","sha512":"4da1284fefd9e31ddce9e97f8fd95e462b37dbcc2836cba598fcd0aa924610ed040a1c6fd158f656ea843070ec1b601255ff70f11048e3e2770e6329431123bc","ssdeep":"384:QtC0ECtNtvRBIDl2zkL+2Gy8ZJHRBXM+J8P0n3kLZliVXLtn:WvRvRCda2G3Jsg8PIe","tlshash":"eca2d06d04106a4edacfd8f8e6011ac701e4986a420976c3f1237739ca165cbfe56f3b","first_seen":"2026-08-10T01:27:52.423395Z","last_seen":"2026-08-10T01:27:52.423395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/blog/thumb_68580f3ae89951750601530.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.603Z","timestamp":1786325240603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/blog/thumb_68580f3ae89951750601530.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 23302\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 41193d58325f8f9f92f9acb0a3425e50-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.040\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":23302,"size_decoded":23625,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6fb9ceb56c72ffee36fef1f01225b5a7","sha1":"789f9ff59723badd977c2aa32e580b8675a4681c","sha256":"382f2679c8529b41f90ea01d01a58184ca5242db21ae18abe8438e655ff17cc4","sha512":"450e6d8308b6fd46e4ea23dbef02becb60c1a604925ef34af332c4e91c7a21fbd8c6736151634fdc5c604fb54bc37233beaf6a0b930958e49a64af936299444e","ssdeep":"384:dHDejkSd9gHLFvuIs8kNSRS+OWuSl7iFgDMJa1h3N17ndaoBRNtv54w9/pYBp:dHDYHd9grprs8grWuA7Sda15N1jd/BhH","tlshash":"d5a2d1b9666d4c2558debfb81b4569ab07261801a146db243bb5f1c0e77dedc24c3c0b","first_seen":"2026-08-10T01:27:52.426975Z","last_seen":"2026-08-10T01:27:52.426975Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/cm-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.826Z","timestamp":1786325240826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/cm-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 710\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9034249d917b8550d85d7c7d65afd431-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.021\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":710,"size_decoded":1031,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9178588cfb90df21a51940dc8bf4a245","sha1":"c99e8fbb765cf5e3f9fbb90342ca7fe7c68d84d5","sha256":"d6c83ed0b1472e5c16aae5f7da0d47162d0bcdf9e8e7c86155ebd88aa2a6b054","sha512":"2dbbb0c9a821ac3b44912c2fb43cbbbd4c10656f6df9287657be76e216befd920f60c02d3db9ba22b8e2fef91ac462a063f3205e4e608ba69a39ad3745646075","ssdeep":"","tlshash":"430123a717118f11ea366b385abe631c1519e5b901056ab621c4c82b7e89491de985c4","first_seen":"2026-08-10T01:27:52.430225Z","last_seen":"2026-08-10T01:27:52.430225Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/qt.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.828Z","timestamp":1786325240828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/qt.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 864\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 65d14124e6184695e2d5dbd5a2882a46-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.020\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":864,"size_decoded":1185,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3373585de8ec1446069205b71a256378","sha1":"8433ca4448761b985825f68a067e9ab6acc07cad","sha256":"cb6555e1f5c3b33eb5c8d976c6c629b6b3eae03f1ec4a78a0041a542feb99990","sha512":"c6ef36a0f4855de21b1430b1abc782ef96b27b226bd0b1b3d95b22e8e94ea985d37fe2ff789b0ec2f17f758963319eb1e663d72de7f15f629fba9fa163500000","ssdeep":"","tlshash":"11118655c6114f01e83a103cabbf178be4926e9807c790eb930b14796e85e90cf64ec8","first_seen":"2026-08-10T01:27:52.433037Z","last_seen":"2026-08-10T01:27:52.433037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/select2.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.556Z","timestamp":1786325240556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/js/select2.min.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 18324\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"11b24-6a671291-ee8279a1435d763c;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 31b05e25dbbd80a4d355d0c72d985cae-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":72484,"size_decoded":18883,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64124), with CRLF line terminators","md5":"002d7096a5353ec54b00a92c1c02fcca","sha1":"3e781ebd85a107103cf2fbd440c71222bd6a7b9e","sha256":"ef441c155322dfe5468805526352861626dac8cca78682b8697e8154912b9b4d","sha512":"c4e7b91be54bb88b19688d28fb4f2b50a253a3c929b56cf32843c647c21ba422d7afefa255d3573bdfdd6a52048a6b422ce014646c119ff603c5ccb04e249d47","ssdeep":"768:8oMZDhrrJ/Y6EvKqtB8Nnoc9DpPJRGookOlxNjuvSnJZdjVrMbusSzXAFo8Jw:+ACno0okOvht6b5KEc","tlshash":"2163b64c7a93723502af20e6346b180922376b3e500b9668b428cded5dbdd15736bf7e","first_seen":"2023-03-07T14:22:11Z","last_seen":"2026-08-11T04:44:12.164839Z","times_seen":278,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/css/iziToast.min.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.563Z","timestamp":1786325240563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/css/iziToast.min.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 9907\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"a221-6a671291-81346e27740918a9;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 57bf48a40e30e8067ce505a8dad5bdc6-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":41505,"size_decoded":10448,"mime_type":"text/css","magic":"ASCII text, with very long lines (41419), with CRLF line terminators","md5":"b2f7bdc3ed47f5956551ce0333925792","sha1":"d2c6cd54cf8a6c040c28844b306543b76eeab8b8","sha256":"7fa7d6e3b4039b59b4d4721ea7e523a42a4dc0b56405829df9f8696f8550fa01","sha512":"3b4de7b57a15a9a1944c07809af436612ce40af72564470f42ed5eaa5a0f6877c9e51b8d1a24b897edddb9a89d0fcd353f9d09dbc107ca89c2574e825254d26a","ssdeep":"384:wV5zpPVWahj8Ik/4kYip7pHRiJhkgL6LlG1oLzlRCPoA50UhLoMPFPsR4lweGbzi:MPVNhlHgppGf1oWQA1","tlshash":"b21345fd15f0124454c6ab4296da6a980e3fcd9770ea1cef32cd344b8b46b9e136532b","first_seen":"2023-04-10T01:55:59Z","last_seen":"2026-08-12T01:36:44.562138Z","times_seen":1716,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/blog/thumb_68580f2a375a41750601514.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.604Z","timestamp":1786325240604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/blog/thumb_68580f2a375a41750601514.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19946\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 40139fd0a4070c2e274caba2d5e4466c-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.035\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":19946,"size_decoded":20269,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3fa1e69ab589c3ad74008331a9dc0fc7","sha1":"b046c8f5765194a89eca63eaf247cecabd22f56e","sha256":"7fc422b7a884b81a037dd2d43ac7337e0a27a60794c0fbea55d0e024527d6ea2","sha512":"e4968bfcb67313b7aa06c4d2b5eecfe1e9c8e8ddf467597cce59e583a8e6da3cd32d9722f3ab6acebbeb45aab1c7710e75914040d3220220f246a6a82fe810f3","ssdeep":"384:ErlLQU7DlvbTX3UlcvKOT9dkCnCzb6qSDbZPvTzTe8TMlrV:Me+DlsGSOTCpabZPv3MB","tlshash":"bd92d05099b21e94e2cf3e3845f6a69455e46e9f3ac42855eb30eb164bb7a15b38c001","first_seen":"2026-08-10T01:27:52.437657Z","last_seen":"2026-08-10T01:27:52.437657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/testimonial/6857ef654c3371750593381.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.592Z","timestamp":1786325240592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6857ef654c3371750593381.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2270\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5178b73cab84063679119fbcaa7bc5cd-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.024\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2270,"size_decoded":2592,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6aa2d79553a1306bf090d33e96644452","sha1":"75e56d27756f680d0a61650022b0b920a11c17a0","sha256":"472ef2ef1e6858feac556b3dc2f5ddf976dbb4943fe7f3475ccc15141970eb28","sha512":"ad8bdc2272f0379105cf25b88575532a60b812539362e7d888c02d74a4ee09d5a113379b07c8ac9a086862982af10523bcca31957e5416c4028c8a10640c7a06","ssdeep":"","tlshash":"af4117c6aa3adc04c947b5bc878ba30ef7947c09820b1011ab0c59624e64392cffa991","first_seen":"2026-08-10T01:27:52.440518Z","last_seen":"2026-08-10T01:27:52.440518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/ss.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.819Z","timestamp":1786325240819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/ss.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2350\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 1ca0542c0ebf1156a80c87c37eb977da-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.039\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2350,"size_decoded":2672,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5719741fb807f5e55a89316e7c7216e9","sha1":"df2b125eed96eccfcbdf3189cb20cb1a84a79fd5","sha256":"c145661769e32d842b1f2a534bc204ff3112c3ed89c992eb7858075ef2779f1c","sha512":"4a01040bfdbeb73c016de258de066d42980dafc30a7959c23ddbd2be3db0fc4a536f46bb9942db9e716456267d1974484523160e8bf3fe3fe521ff80019d1d67","ssdeep":"","tlshash":"e8410861a7500f23c510a0fc4afa0ba21592a04c331cc5595059f7276da8bf93ee4ce9","first_seen":"2026-08-10T01:27:52.442822Z","last_seen":"2026-08-10T01:27:52.442822Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/webfonts/fa-solid-900.woff2","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.866Z","timestamp":1786325240866,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 156496\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:27:20 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"26350-6a671291-fe543adea262201c;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ea54ea613ef3a307d058cc183b7c9744-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.015\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":157038,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-12T12:08:19.204569Z","times_seen":50123,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/fonts/la-solid-900.woff2","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.873Z","timestamp":1786325240873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/fonts/la-solid-900.woff2 HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 96752\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:27:20 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"179f0-6a671291-b336da74da94aa1d;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: aa68c1e24f20ac05310598f31208210f-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.017\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":96752,"size_decoded":97293,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 96752, version 1.0","md5":"36fc297902c9a2e857858baa6ac25f2c","sha1":"89d9531c0c70a8751dff83c1917baab1f16a2071","sha256":"10a68e01209d939afa9318ee71601b0a6e10f025d4cd6d98a492d340b73941fb","sha512":"c5711d5027762fbc8d352dfdf64094958348b873671c891e8c5cf701a569c3bad672a380db7fad76692bf79dc9235b37f76b6f42f73698c9f85d2c7a23aa62fd","ssdeep":"1536:H8wZeXMjWqtJeAAHBX6ANib7HTYJv+Nr1ScHQjn6t/k5LBNCMAG35y:H8hXMjWeeVHtA7evKr1Xwelk51N4Gw","tlshash":"1f930257f0921be097c688990e189035cd39fd71397fe9f4e603ae4cc361927e52a4b6","first_seen":"2023-04-05T18:32:05Z","last_seen":"2026-08-12T02:16:33.01077Z","times_seen":13750,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/banner/6857bf5d989a31750581085.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:21.074Z","timestamp":1786325241074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/banner/6857bf5d989a31750581085.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 80434\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a0218702d5ae7a983d25433decebf071-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.195\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":80434,"size_decoded":80757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21f4c8d419124e2a3aeff5628bd7df25","sha1":"6e4977c410e44198f0442dafeca0f4d4e212fc30","sha256":"4d36461323713f75bb94e50914a186035e8d49ac040fef5b178583cef2375b54","sha512":"a8bf83d3b518d02b691fec1818592a5e6420c093f264aaa53ca7db7fcbd9f0bbb7c9cddf20b302074bb364984fdbb1cd550a4dffa2cbd1835a065e328b7452bd","ssdeep":"1536:ldLEpGfcjV4yH2GNYdp1D56FXJYYmfXzlz5F7YzlbFw6rut:34G0jCyyfD56FXKf/xtF7ylhQ","tlshash":"6273128d3d10c5e8f4c8b3dba9460a45df3e57873587a2e5be875ab4c961840cd380db","first_seen":"2026-08-10T01:27:52.447661Z","last_seen":"2026-08-10T01:27:52.447661Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":218,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/logo_icon/logo.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:21.217Z","timestamp":1786325241217,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/logo_icon/logo.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4938\r\ncache-control: public, max-age=604800\r\nage: 1\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e2291b186593ffd25154fa2ac1cfc0eb-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4938,"size_decoded":5240,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2eb83942a19b2bc9a6a427e956da54c9","sha1":"ca2e097111e1b61c9f28eaf01b13ce93111897a4","sha256":"b0df9b4e730bd03646375d400b57e605acbb16dc07e692478293de9026a8554f","sha512":"bcb9f8f3956c1da1c4a84d9f14fffd2e9ee33dd9b1830e608d8fa65d1141de40118f167638759e865cf0a7949d0807394af84006170e91c10edb387d8e38eb50","ssdeep":"96:N7IwEn8vW1G2DZJ14Kgko3v8p83m3Ih8byVa296vhjWszuoI0H6fncXfDWD1z:N+c8G2DZgkC3hcyM24ZjV5I0HUlD1z","tlshash":"0ba17cbbe569c557dd3b1c3662727321d92a3d2c696f40928bf0601a08c7600cc66933","first_seen":"2026-07-28T06:18:25.535112Z","last_seen":"2026-08-10T01:27:52.45065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.542Z","timestamp":1786325240542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/css/main.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 22716\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:59:09 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"33945-6a671291-d071a982fb6c3bc6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 7d5001567a2ccbc9e4b6af9493dec966-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":211269,"size_decoded":23259,"mime_type":"text/css","magic":"ASCII text","md5":"1f72644c5b4295f06e279fe2f3988a7d","sha1":"08efd08a96b50d92797d7313102abf98a6b6ca6a","sha256":"4504da529b12b74dbb20906f47dd9d5105dfc4bb917feed9866e030e39b5cc45","sha512":"ed7988042103223ae234c1e00c584d3f372e40140874395f9e7d3802fc9cf324828e4011b9c78e93e1564703537847e90f7b2c80b267151aeeff6c778dcf212a","ssdeep":"1536:twj+0HAwPdb+M0M8MGWDIe8CQ/He6Tt/DLnPf8AKJVgoOMyQfOB5L1nuQv0kGc92:k+GAwPdb+M0M8MGW9U5MNOjIc4joMLkI","tlshash":"972473a349b314687c1bb8181bee532c337c5053960eeee87acd72589f857f45162f8a","first_seen":"2026-02-01T01:45:13.808613Z","last_seen":"2026-08-10T01:27:52.45443Z","times_seen":16,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/iziToast.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.566Z","timestamp":1786325240566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/js/iziToast.min.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 4766\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"4836-6a671291-f09c035522bc212f;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b1932f5ff2e991ca40f06c502d91ebdb-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":18486,"size_decoded":5323,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18398), with CRLF line terminators","md5":"df383d4feeb05ea8bfe86a0569ef0524","sha1":"c6fd53b0a4abc2b73f55025ecb28d2eb65db93d4","sha256":"df6d4fc52f8f3af6ef59c215a1165e4667f7daaedf4c5409db56d7c133564446","sha512":"66af68f84d34c61851ffbbc9e3d9b114d274290c351354cc5a43d3c6b59c9e97c41431178148b024720a8adf77116fd7c44df51d2239184396d3a1ba045d40b4","ssdeep":"384:9hKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgO3MrnHzxJBkHI4505P:3K5PzlcN8DXArhpQzRHO3M7TxfGIYUP","tlshash":"2582c894722032374aa329a960ff534a3772156ca9c641a4243fcdad5b34f8939f77f8","first_seen":"2023-03-07T12:01:52Z","last_seen":"2026-08-12T02:46:38.727429Z","times_seen":2012,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/referral/6857dd9ae20bf1750588826.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.586Z","timestamp":1786325240586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/referral/6857dd9ae20bf1750588826.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1052\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 822a38d37d3dbc6a087d40672a00aaea-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.022\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1052,"size_decoded":1374,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48a576b10768325c7e50f7712ecf9e21","sha1":"c080bc02a8467b38024ec0754ef2e4a869dedfd6","sha256":"d2a7d76575ff9c155af22554e8146ee1fc85074644cb56766ff5bd7575c2537c","sha512":"1b3ffe5002634cf6cf89921fdaa906dba0b7962b26fd0277d2a37ae6541cdb47cd35959101be309fc7e85f9b2183c3a19032169604e360c02f9bddef897b036d","ssdeep":"","tlshash":"c311c80f45050870d0b35438cc2e6be0879119789f28e3436e2ac1323e52d19e7f8ce6","first_seen":"2026-08-10T01:27:52.456906Z","last_seen":"2026-08-10T01:27:52.456906Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/bs-2.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.814Z","timestamp":1786325240814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/bs-2.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 750\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8d197abee98156f07347121f238f9778-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.020\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":750,"size_decoded":1071,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b6c9291f8daf525bbd6d6c21c8d330c6","sha1":"98cdc06deff96a45260d1cd5e5980f80b40c900a","sha256":"5f91c95dd9f2e6dd12e7db85c43e191105ef2834e5436ea3b433fc7d32a2629c","sha512":"89ffc201210fdcdec4d6c36f0dff0f3d2276bcc73bf6630ddb217bc718e4f8ad562d3c2acdd692f4ddf955d681a4af9a9817aa43e949cc3d58e7091771ba16b9","ssdeep":"","tlshash":"2801942b9b604d09e75b9a7cae4c17f9a763c00e1206692e892190383dc20108df0c8b","first_seen":"2026-08-10T01:27:52.459583Z","last_seen":"2026-08-10T01:27:52.459583Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeJI91R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.865Z","timestamp":1786325240865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeJI91R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lab.webdemos.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9900\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 00:51:52 GMT\r\nexpires: Thu, 05 Aug 2027 00:51:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 434128\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9900,"size_decoded":10712,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9900, version 1.0","md5":"56706b63a0f0391ea247202feebe2a68","sha1":"d09f6c283158a5c34a1a0fb3f1f2149989f05956","sha256":"ce5095dc1cb200aaa939e38067a0677018d10e9f26ec38cdcf1557ac524fc775","sha512":"b15d8da95c966ea4751ce32272f0dbb88c730994096cb7e1a2a5386942529e63c38ac0eba17dc4321efaf637b9b1a4b1bf9c75988e7b0ac0040b3a5bfa793774","ssdeep":"192:3jKminRc+/sXhY52YXvSTChIrFNmg8aa9FrQUJuE4MhlmY1A4NRX:3jFinGRhY52Yz4F7a9FdiY2kB","tlshash":"eb12b03042bd76a1f6bfedf611a732371007a05102a669379faf132d5e7aba01c4165b","first_seen":"2025-04-26T08:41:49.507205Z","last_seen":"2026-08-12T10:27:56.965661Z","times_seen":2429,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":19,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/firebase/firebase-messaging.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.569Z","timestamp":1786325240569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/js/firebase/firebase-messaging.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 10484\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"9f94-6a671291-8d8a2e045cab9a90;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6c5b13760d0fcdb861fbcd32866afbfe-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":40852,"size_decoded":11042,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (40802), with CRLF line terminators","md5":"9696257c8e0c0506e6d016ea0b012799","sha1":"16c23be9153cc42e221e036c545b4dd9a1d83c0a","sha256":"0fa7467adb758ef83190611fae9b353861691ed7afb99dc7f2e351a9b373aa34","sha512":"bff6ac2667fea15c90c1f940e7d1c98252664671e14a5b3fa5e70e64dfd3ede647e79fbbd6283677fe6dd1e38586e584b92d3084a4377d3be834bdff14c725c9","ssdeep":"768:JNTKPzyK1Aoh6lggdIrseEuzfkSbjRtKp10ofv0CieMY:/TK7fAohxuIrgEkw1oj3f9b","tlshash":"550361ccbac3b51a5393a1fe54bf5146b63f7c18a80e4500fa69d1da7c7a0098637a74","first_seen":"2025-09-29T03:52:33.991098Z","last_seen":"2026-08-11T04:44:12.166183Z","times_seen":59,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/css/custom.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.543Z","timestamp":1786325240543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/css/custom.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 2707\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:59:09 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"311d-6a671291-c352b228eee18b22;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 28c38f7ce96f6890373e0ddd6f84ffc8-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12573,"size_decoded":3248,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4d39e6554eaff6572964e00c4c802539","sha1":"8f30a1ebeb00976e6c571ac6480715f276cfe435","sha256":"6bb71c3f2faa0c453ab10f69c5a303263a14e4965ee521ee0421928e12d7ebf4","sha512":"9622fad50822c0a661b7c52064d1da2d3dade731b005e8ccd865e91433c354b1ee32a6fb24d41f2dfbbece0dc889a5ce132577d2b0bdf27b5c72191f71daf0e4","ssdeep":"192:sHBVJk7OZCj3UAw99J5O3Hf+Y1Iet17QwWld47JOEbKfM:shVJE2g1cwWlOUU","tlshash":"7e4222b9f94900153237eb247bf19a99bb245162cb0507babedc316c57c47ac4a23ecd","first_seen":"2026-02-01T01:45:13.794963Z","last_seen":"2026-08-10T01:27:52.463492Z","times_seen":14,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark//js/main.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.562Z","timestamp":1786325240562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark//js/main.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 1710\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:58 GMT\r\netag: \"2152-6a671292-7c42f067d73d2366;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 74ca11d5a4ac14b6fa6fedf7fbc67ed4-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":8530,"size_decoded":2267,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"ce1d71219e6d196294a499750386634b","sha1":"3588ede66624e464ae5cc30c91fe602a4edeeee0","sha256":"ff078f028e28a5cbb842e2b04ec12c0482521c0871dd3e196bbf9dab5f6822e9","sha512":"654ef74fb1691e3aee4de4f8db0ae4f1831bb3555cbaadd112ca959e20db437830497ff21390edfd1087715af1f9a4ae8076c0c59c897e254cdc16010a5927a1","ssdeep":"96:mIrt8DlsiZ833/xJo3yy7moZrLHaHdIQLGZ5NKxRYySIJZ2:xWDl8Y3yy7mUrLHaHAZ5QKyS4Q","tlshash":"4202fd8a34f62031547f307a4bafb2642a1d140f5349ce107c6d138d6f94369a7a6bdf","first_seen":"2026-02-01T01:45:13.837656Z","last_seen":"2026-08-10T01:27:52.464228Z","times_seen":16,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/banner/68610002b9b351751187458.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.578Z","timestamp":1786325240578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/banner/68610002b9b351751187458.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1202\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 103edab651545f8dac772a10b37ae7a5-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.040\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1202,"size_decoded":1524,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"230ffdd10a13b2a7e3738ee3ba79f776","sha1":"97c9bea0ce9c01eab57a46f782108a0674dd35f1","sha256":"a34e8c94c4d29b3357941b343bbc7bbcf326b82e53d0ba3f0946d7d2eeb24a40","sha512":"5f03c386d05c9913e37ec58bb79c1403b4f18cfc7e1434642198ae39ae6d5431e432cd057f95d093c6ec0cf28be505eca3e8ddbb7bbdd5320c8a1c282a041f2f","ssdeep":"","tlshash":"2f21a30728a08810e97ec8fc98a26b0f897bec920098aa5a633c852b1c435d75d4c58d","first_seen":"2026-08-10T01:27:52.464904Z","last_seen":"2026-08-10T01:27:52.464904Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/faq/68580a68e63bc1750600296.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.601Z","timestamp":1786325240601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/faq/68580a68e63bc1750600296.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30212\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e32328923a1cff33a97d1ec782c87bc3-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.049\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":30212,"size_decoded":30535,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"441fd6eaf6751e04b8a5c5f2a360ac4c","sha1":"27a3770689852b03a13030ab362add302ec21fe4","sha256":"ef9ddd86c3e4c8ff48206af20c7b4e8feec863bd71343197cd7f03479d9915bc","sha512":"1466c4f9cd723fe908f34c04a702a5d138da14edca66b521a367c22c93ec0ebd1d4b9b0345d242932e5c17082091398211575e60abd5608086a349665d0f1c18","ssdeep":"768:JF3qUmtB+jZPcNTbBIW+pkWWF8BC1tfjZRDkP7wV:JVqDMOVNIWHKZP7E","tlshash":"75d2f10efa41dd0c5fddc3bc76cd8bb587208a766e3265c26e2880540e32ed89865df5","first_seen":"2026-08-10T01:27:52.466556Z","last_seen":"2026-08-10T01:27:52.466556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/bs-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.813Z","timestamp":1786325240813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/bs-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1898\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cddbb420a9702f9dc303feb7c7d12c75-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.026\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1898,"size_decoded":2220,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d28a26f8dc076b860facf6ce246fab3","sha1":"b7a3f6f2e6f6d56d754a7d3a47947dd2b1b0e8cf","sha256":"37e2f29657d4722cb8536cf735795274b9d0856faf09965a81778f28beaad384","sha512":"50b13106db7ea6a15596faf15cb4c91710b641260597b1419f4a2f2cdcae6b18de0f4051077c7a93ad418535ed82a578bf842a14b1d53d6cd6dd4ea68a2f2667","ssdeep":"","tlshash":"0741f7a36a3643e4d090ad7865e173acabb17db78107739f41a81da054bbc01868ea88","first_seen":"2026-08-10T01:27:52.468167Z","last_seen":"2026-08-10T01:27:52.468167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/css/line-awesome.min.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.535Z","timestamp":1786325240535,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/css/line-awesome.min.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 15100\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:24:24 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"15e82-6a671291-9aa8908e1029e0f3;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 32341d89a5f96641272ad4e77334eb19-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":89730,"size_decoded":15643,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"3ee291cb1d671da28325cbf3c0cfd80c","sha1":"e17a96acd4209fd62cd8a557f9f34239e4e36432","sha256":"f8d2b3fec465d6efe63660fa72a04f7dbe7364e47f4061d2627c187f36c046bf","sha512":"134238ec157a197b7e2987473512ab93d6189a277ddefe51417a10aca8cf74390901de8456aaba278a7cac5a5359f7bad8dcc1b940e66d87d6c325d3c53b0851","ssdeep":"768:1b+0d/C5eXnu2nnY8G3104xUse1LN9abc4VNRvTdgBngf79IcjJv5IopdUN:1b+754u2nOW4xUse1exx7HD9hUN","tlshash":"be938abbd52d69c4b321c847bf4133b92886f56daaa20d50f28f544cacc269612e4f7d","first_seen":"2023-04-18T19:56:15Z","last_seen":"2026-08-11T08:00:57.285983Z","times_seen":1085,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/jquery-3.7.1.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.552Z","timestamp":1786325240552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/js/jquery-3.7.1.min.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 29519\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:24:23 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"155ed-6a671291-c3a603bc987aa111;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e669f74148cd94cbac60dbbf7b699af3-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":87533,"size_decoded":30078,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65446), with CRLF line terminators","md5":"b83db83a1d89113ee03ab730efa48c7a","sha1":"2fccdd3e43db21bbc8448ed6d6311c4a6eea1166","sha256":"99e691fae5e88eb36bafb24758b35f0f990708295f8f2abe2221891e328f776a","sha512":"10d6f09a04eb135eae12c890be0512ead801e213614505937d1e782d5a6af86550395470ea31b3aebd85695f07a8fe903eda4941e52bcb7278cce02eacb13800","ssdeep":"1536:3RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK7:vHNwcv9VBQpLl88SMBQ47GK7","tlshash":"1083f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-10-23T00:47:02Z","last_seen":"2026-08-12T08:10:42.914953Z","times_seen":9976,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/firebase/firebase-app.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.568Z","timestamp":1786325240568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/js/firebase/firebase-app.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 6376\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"4e9a-6a671291-7ba8d6ac0073f38;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e05557579b76ebc310e69b9b8d2d584a-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":20122,"size_decoded":6932,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (20078), with CRLF line terminators","md5":"9174ba20f23c99997fba354e28464950","sha1":"1defb1a64713f1584da55b9000bc2e880947c70b","sha256":"97dfb81602345440e1bf1fba3706d5fdf2c1bd44a5289fc83d39a721d59cf4e6","sha512":"617058ee36938e97f6d88f84d8bea710250fd8cf2b441f4a24ea713ecf2730bd786797fcb875bb4c5bf16b00b514f5dcf813d84251e9ec9e30d6d3b49c2c450f","ssdeep":"384:mcxRfeAv0RCyQ/nzW4o4XzJOmLEkd2zpe6dANiY7:rRfeAvACyQ7rfBY9dANiY7","tlshash":"2d92d8cdf7d2b066439350b8443f700ba33e2918984c80a8b659f5e76db690e956ff78","first_seen":"2025-09-29T03:52:34.028073Z","last_seen":"2026-08-11T04:44:12.139684Z","times_seen":59,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/dw-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.599Z","timestamp":1786325240599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/dw-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 219366\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f698e4ebb0b1fc4590b3acd0904c9d88-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.295\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":219366,"size_decoded":219690,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4427186dbdbe025a476833eb3edf4a9","sha1":"41eb07688cbc0ed7ceafad55d49022af0d7a0cd9","sha256":"ff29001a92caf76288c91698395e68e362043f61e1116fecd08a970016fb4304","sha512":"1db9ebc50c8135d772a350f904abce87c09a1b9258ade4746c6b6ac24d91b40d7780c8872baf60954587d7ef24e928ec309e4157bf762aa0ab404b44a2b1f0b1","ssdeep":"3072:SZVc+Fw98N+4wMUIEyflewEHowL2ng6BVDOVOAJh3fXFfy7WvG6OKZMPUwlVWG:SZFj+pI3go63F67Wu6OTHlVWG","tlshash":"cb24129138392d03f91ef7b1c182937be268da6164749ef991369be11b270215fb0f27","first_seen":"2026-08-10T01:27:52.471237Z","last_seen":"2026-08-10T01:27:52.471237Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/shape-2.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.832Z","timestamp":1786325240832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/shape-2.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1738\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2f1a6ff8fc252f4c90676411e7e74f73-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.024\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1738,"size_decoded":2060,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fee232bfe47139ad522cf636b6b862e1","sha1":"2d7ec66adc5c2f85d26ff2073bbbab410ccb93cf","sha256":"342f7650214abcf591c5ac38b7aec3502af642470ee46d7df0367f87850b2f46","sha512":"af0f0fa155842610c572b4ef517a9dfda60764ba0cca4061e8308ec6e06b4876513b50c185d3be8b001531fd684a34467150ac76594d09f099cb1c54805bc7e5","ssdeep":"","tlshash":"11313c5bf74542a2cd63c13b0dd0f335175122783113ea5f620a9a352da30140fbe9b5","first_seen":"2026-08-10T01:27:52.473105Z","last_seen":"2026-08-10T01:27:52.473105Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeQI51R5_F.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.870Z","timestamp":1786325240870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIflMapbsEk7TDLdtEz1BwkeQI51R5_F.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lab.webdemos.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9968\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Aug 2026 14:26:16 GMT\r\nexpires: Mon, 09 Aug 2027 14:26:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 39664\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9968,"size_decoded":10779,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9968, version 1.0","md5":"27489a49946962e82703dd093454687e","sha1":"cd2df6837df3d88d34556a59a343df6737841e17","sha256":"a5888696e9eb1b4bbbecc8eb3922b8369f49d4bddb72263e033cbd17f399be76","sha512":"03f275513139cd8c50bd580207c7df2901189a6819831d32428d946b508a40c5f32f800617f33ed455d72b0120e0833ccfb6f5ca3085369f5b406c5f3b0e6502","ssdeep":"192:KQaReCGr+Te5/TrI8NwdzZbtsfjKBGZtGJgtskLTRdRHhi2iBqMA4LKoP3G2Z:DzCi8iTEgu5SbiGGaB7chJLKoP3r","tlshash":"5622bf71e8480b7cc54f3fb8ba9a4c8fb35fd413ad4b4c5030896eb05597e1b5a4a682","first_seen":"2025-04-26T08:41:49.515892Z","last_seen":"2026-08-12T10:27:56.971536Z","times_seen":1963,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/webfonts/fa-brands-400.woff2","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.873Z","timestamp":1786325240873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 117372\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:27:20 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"1ca7c-6a671291-348dd09baf3b7305;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 746b6966408e6ab162e04af675f26611-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.015\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":117372,"size_decoded":117914,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 117372, version 773.768","md5":"b6356c957274676e6571c1ff5e11c9a8","sha1":"4022f95e001d734ca8f082b8e7627abd205609ec","sha256":"3a8924cd5203a28628716aedb5cef0943da4c3b44e3ffcee90ab06387b41c490","sha512":"83de79c74480fafc62cdac4012ff2a129d8701772ee16216c3d9488826ac21a9c2f8a416fe3208a61bfea7e12c24ac1cc2d26f6d22bd2b0ba39a22d630238b59","ssdeep":"3072:U3JKgVzg5ybfXYe5W59JPQaPWKSsx/DBMnVnqedkAFqPQTzIBIOK2vDMF:IVM5A5GJPQaH/NMtBkAvcnYF","tlshash":"c4b312f88b7ac9a5e304e67b55e4613555a0aec8b180f35453be7c2c221e10dc67afe3","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-12T12:08:18.984496Z","times_seen":30126,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/thumbs/ban-5.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.581Z","timestamp":1786325240581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/thumbs/ban-5.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2142\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e368203c44f186ec6ffbf86c67f20b74-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.020\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2142,"size_decoded":2464,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd12a8922a60d565f682e3c8e2569c68","sha1":"1a7f10310c1e0ae331a04756b8cf3f3a089a6dca","sha256":"cbe9be5d95b1266c566415d576402b082421809fca1a5503127d0a309f65e21b","sha512":"8b7fb8ce74290233b3cee5ff3f160841860a8c93e4cfc6ef7d8a5406c208136b5b6e21e8d7a20ca6d7fd617a28a446643f9e958ff13709472fe5f9a73bac30b6","ssdeep":"","tlshash":"394109c8da53ee75c5732ab98a992b3e1b10c918aa1bea2401204654634358d27bcc84","first_seen":"2026-08-10T01:27:52.476091Z","last_seen":"2026-08-10T01:27:52.476091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/testimonial/6857ef39ce3bd1750593337.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.591Z","timestamp":1786325240591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6857ef39ce3bd1750593337.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2270\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: af10077f2dbc84f9a2699312f1f6cf4f-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.025\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2270,"size_decoded":2592,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6aa2d79553a1306bf090d33e96644452","sha1":"75e56d27756f680d0a61650022b0b920a11c17a0","sha256":"472ef2ef1e6858feac556b3dc2f5ddf976dbb4943fe7f3475ccc15141970eb28","sha512":"ad8bdc2272f0379105cf25b88575532a60b812539362e7d888c02d74a4ee09d5a113379b07c8ac9a086862982af10523bcca31957e5416c4028c8a10640c7a06","ssdeep":"","tlshash":"af4117c6aa3adc04c947b5bc878ba30ef7947c09820b1011ab0c59624e64392cffa991","first_seen":"2026-08-10T01:27:52.440518Z","last_seen":"2026-08-10T01:27:52.440518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/testimonial/6857ef79ee8471750593401.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.593Z","timestamp":1786325240593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6857ef79ee8471750593401.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2270\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d961810892c6c92b74f06940956a7e54-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.023\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2270,"size_decoded":2592,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6aa2d79553a1306bf090d33e96644452","sha1":"75e56d27756f680d0a61650022b0b920a11c17a0","sha256":"472ef2ef1e6858feac556b3dc2f5ddf976dbb4943fe7f3475ccc15141970eb28","sha512":"ad8bdc2272f0379105cf25b88575532a60b812539362e7d888c02d74a4ee09d5a113379b07c8ac9a086862982af10523bcca31957e5416c4028c8a10640c7a06","ssdeep":"","tlshash":"af4117c6aa3adc04c947b5bc878ba30ef7947c09820b1011ab0c59624e64392cffa991","first_seen":"2026-08-10T01:27:52.440518Z","last_seen":"2026-08-10T01:27:52.440518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.864Z","timestamp":1786325240864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lab.webdemos.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 09 Aug 2026 10:34:06 GMT\r\nexpires: Mon, 09 Aug 2027 10:34:06 GMT\r\ncache-control: public, max-age=31536000\r\nage: 53594\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":72964,"size_decoded":73776,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-12T12:08:25.613329Z","times_seen":31829,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":27,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/css/select2.min.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.537Z","timestamp":1786325240537,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/css/select2.min.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 1827\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:45 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"3dd0-6a671291-e4f9b9e9c97c054b;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 03c9c6681d3e1e3d1baadbb8557f4fa4-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":15824,"size_decoded":2368,"mime_type":"text/css","magic":"ASCII text, with very long lines (15822), with CRLF line terminators","md5":"bef1fe60450333eec9e61b9ea72c41c2","sha1":"d1b7c6cc7e0f518959c1e5835ff4434d7496245e","sha256":"55d6f0fcf299a3a45dc7d9198433ae056e152ae104f0363183366f26d07b39ab","sha512":"12c05267816c88ae162e98aafb205a6fb28a2e9f82c5111e106ad49509c84bdaab9b3c7c5762be5241877b8af1959ef6445c97194acd392e94b819d399d8b14c","ssdeep":"192:1EaNSbuenTfc3aq6JYhKQ9CPxWqAUJKk3BcH9t3E:1EueTfXnYwQ9sWqbxRcdpE","tlshash":"9862c935bacc2235b0bf8e7f6cf1b4946729ed5fc4111b9ab8e9e194c8e04540a4b60f","first_seen":"2023-09-22T19:17:16Z","last_seen":"2026-08-11T04:44:12.150352Z","times_seen":392,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/js/slick.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.557Z","timestamp":1786325240557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/js/slick.min.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 10686\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:59:10 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:58 GMT\r\netag: \"cfbb-6a671292-6bf4c647cf5fbc64;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 43284f2321f0b01fe81edfc3f1135e28-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":53179,"size_decoded":11244,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (53179), with no line terminators","md5":"481ac3f8935c805172d406c12da68e0a","sha1":"fab75193a5fe33503eb2e62d047a01e238baaa64","sha256":"032699f5abc60e8e1b3c28bfa7a9a046addb1777420acb4c599871b5d64f0888","sha512":"a103f8c26db4c1d5b02c3608da138c7f6298bf6ba20ec77232020effc3a1e4f7d8653311f2498226a6233336e0476bd5504e0fd3829ed02ae823ddd0adefbab9","ssdeep":"768:vkqQW+Z4IRuCJ312FGeQuPKFnLfZ4ZwZD/58c04qeJhII4sRA/rhJhdxHcoZlC7n:6F97uPKFI/rhJ+vQgV","tlshash":"a0338406a210177698eb25e13017c54db3fbe77a9a11c1d4b8d583da20ee8058fdfbe9","first_seen":"2023-03-07T01:43:45Z","last_seen":"2026-08-11T18:51:48.608515Z","times_seen":2534,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/logo_icon/logo.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.575Z","timestamp":1786325240575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/logo_icon/logo.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4938\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3c8c1c715256637fa78aa5a89299bee4-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.025\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":4938,"size_decoded":5260,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2eb83942a19b2bc9a6a427e956da54c9","sha1":"ca2e097111e1b61c9f28eaf01b13ce93111897a4","sha256":"b0df9b4e730bd03646375d400b57e605acbb16dc07e692478293de9026a8554f","sha512":"bcb9f8f3956c1da1c4a84d9f14fffd2e9ee33dd9b1830e608d8fa65d1141de40118f167638759e865cf0a7949d0807394af84006170e91c10edb387d8e38eb50","ssdeep":"96:N7IwEn8vW1G2DZJ14Kgko3v8p83m3Ih8byVa296vhjWszuoI0H6fncXfDWD1z:N+c8G2DZgkC3hcyM24ZjV5I0HUlD1z","tlshash":"0ba17cbbe569c557dd3b1c3662727321d92a3d2c696f40928bf0601a08c7600cc66933","first_seen":"2026-07-28T06:18:25.535112Z","last_seen":"2026-08-10T01:27:52.45065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/why_choose/6857ec75210561750592629.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.589Z","timestamp":1786325240589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/why_choose/6857ec75210561750592629.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 69654\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 74b31db3e835efb2ceb78f0e00fc57d9-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.092\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":69654,"size_decoded":69977,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b0e416f39c151809795773b6612292c1","sha1":"bdd07877fbde3fa669eaf625e2b8bea82bafbf7d","sha256":"75f3f8bb42ad762d8b44e7ec35051b407c61c98e9b08abde69d9f3012d4a7e85","sha512":"ec586b0eff57b34773d16ec1eaaee6559fd14aadd77fada8205ac0c54d70077b7ced23a47ee629cf0ed00c3ff3186ae108fb51548c47f6d89b97871dd5a95a51","ssdeep":"1536:SR1OB56sn6dmMh8R57dN5uHdE2kWqLjpCvnOI8WLb550PQU:SR1de68MwHN5IqLjp2nOI8CKR","tlshash":"f563027b9ed6650f922a0f176570a72618648c1c20e0bc3d37da7dd079fadb7cc86868","first_seen":"2026-08-10T01:27:52.481093Z","last_seen":"2026-08-10T01:27:52.481093Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/footer/6857a3a7f049d1750573991.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.833Z","timestamp":1786325240833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/footer/6857a3a7f049d1750573991.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 230302\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b1a510d1654b1942a4d6f083213c06f7-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.194\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":230302,"size_decoded":230626,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cad08c18ae069cf74413737bf0d8960","sha1":"24924d82d9646e7ea9d04bd785c7966f59f90579","sha256":"894fd82752e0f1ab0c87261d430508590b8a17937f58f7ffd1bf9e30dfadd3db","sha512":"22b50d3b904f5286e662b9aa5b191447a311a99e8bf72e69032bbb6f796a920b76610adc7207dc1b0706ff7d23b95288022ece26273285e013b2049ec217b985","ssdeep":"3072:m81ts9ICgW43wFuedkDJmtTRTvMa++O7b9IpyX5vxiOD+uccvzret21BvUNYU7Se:gJgWeUdkkBvMa++OKpyNCutvZBS7SV0h","tlshash":"4724232a06f3246047d6c745a63af3442fc351a007d2a981bd75d2df27b2e259fb1ba3","first_seen":"2026-08-10T01:27:52.483163Z","last_seen":"2026-08-10T01:27:52.483163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/webfonts/fa-regular-400.woff2","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.875Z","timestamp":1786325240875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/global/css/all.min.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25452\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:27:20 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"636c-6a671291-df6085bf428d2ab9;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5fc498932305b9caa0f2f98955fa6fd3-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.026\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":25452,"size_decoded":25992,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25452, version 773.768","md5":"023a4a925fa3fce0f66b769ef6bbb264","sha1":"2ed706340547d19c10a409ee02fb08f3d52ff670","sha256":"2bccecf0bc7e96cd5ce4003abeb3ae9ee4a3d19158c4e6edfd2df32d2f0d5721","sha512":"40f3ef2bfde073d33a2d3cbc280fb40ea50dc2b0c3619c8d9717d665351ae219caa5f17ae67cc87e777ff73c1275c1f3778b26e95f19459594d2f42ab95aecc1","ssdeep":"384:Uf5wuZ+wxJe5X/l55lwWB8jCYpdKMH4aL0a6nYEd4Mjxx6e6RERnoJ8ZwC3UmFs:0wFwxM5/1G3UIya6n9dft6RERnomFs","tlshash":"04b2e008d6d6bd12d57196f83bf74ca04bc0464b0a976b2545a2bde30ed00eec86bb79","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-08-12T12:08:19.051917Z","times_seen":9669,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/css/slick.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.534Z","timestamp":1786325240534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/css/slick.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 485\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:45 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"6ef-6a671291-f4b07b45a35d369e;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5693744e97db321e151e6d7199399186-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1775,"size_decoded":1024,"mime_type":"text/css","magic":"ASCII text","md5":"18ef3d49eaeef37d9fa15c2516857f21","sha1":"bac3e06294b8940b53343b6b6108c6701fad6397","sha256":"58023f0aaa39c2e92e4c00e18b1225d85ea70edc0ce1d413c4e8ca7c1411ba14","sha512":"cfec1ba8cebc0c74968053cca7ca9085799589248fb02ec402345db584ea87a09b50d7ae3f48247b2d0013e315194c3a1c1bdc6ac4b38e33c05365cb085a33ff","ssdeep":"","tlshash":"1e31294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-19T15:20:34Z","last_seen":"2026-08-10T23:34:52.263718Z","times_seen":1552,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/css/iziToast_custom.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.565Z","timestamp":1786325240565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/css/iziToast_custom.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 455\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:24:24 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"6b2-6a671291-56f723838da2af63;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d7091a790744f75a2b0bf79ba655870d-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1714,"size_decoded":994,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"f71c42860644f8a6c8b110aff9147a66","sha1":"52e11bdf801cca29f91276cbc1a6179e20936719","sha256":"f81b430b2d760e5e5aea57b83e38fabf79540691c698f2800d58e275ec8a805e","sha512":"bd30eeadaddf6f0ae435ead1c65a710b3d880f5318dcf064c475e285a956856d1587d1f6b7de93314b771309a80fc9d2fa08db5a4e1378522d5235ad61345c0e","ssdeep":"","tlshash":"303124c891f62182eef7b9a48f731901e9b78c17b6cc11a4b5dc22458bf031118a1fbc","first_seen":"2025-04-29T11:56:59.350891Z","last_seen":"2026-08-11T04:44:12.190392Z","times_seen":251,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/thumbs/ban-4.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.580Z","timestamp":1786325240580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/thumbs/ban-4.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2534\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 165f7e158dfc2f1b3d99c9cea2b884df-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.024\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2534,"size_decoded":2856,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a9566e1831f7ae05123da992cc3d4ba8","sha1":"5bc67fa8b9e12addb658df582af4c30b53731153","sha256":"5fbe035624b64d8411000ff8a6380a4fe24fc0c0bf006bb33ca2c7df9cda6319","sha512":"eeeeb18811f269391413af61fe1bea52f72c4cf8faf2142701b8ef1c6a907f967684dfd1859d348b3044925e16a2d470aab36118d25d805935b8011d538a5ed9","ssdeep":"","tlshash":"af514cd595114c00d0371e3a4e6c7302614fb9a07aafb25288059a6d1f1e0c9ff3e0c9","first_seen":"2026-08-10T01:27:52.488186Z","last_seen":"2026-08-10T01:27:52.488186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/banner/6857bf5e614321750581086.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.583Z","timestamp":1786325240583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/banner/6857bf5e614321750581086.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 57336\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 31f48257047f16c510a8b2a0d4424252-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.075\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":57336,"size_decoded":57659,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44ee5c8a37c587948af49678ca0db89c","sha1":"20ae325717ad7f47c9eb28801c8588362da2d8df","sha256":"622bd14a94716f8ab4da3580cdd0287b280ff415d38a2ca663ca6b240c0bcf47","sha512":"b26a044ff4ae70f012b92648ad782c92b4fab35cdfbab8d7a6b7026beef65e0020de9716ca33d225cfad870d576e9394d944822d2d91497d5d7e51a6313dbedd","ssdeep":"1536:JfgvXtUE6jv3eD6lVl6hh91No1eeorTGW3Gn+GGxI:JCXtUE6K6lVl6hda15iCWWuI","tlshash":"a843f16db346eb47f828ec344ad49f833a59d69384086de0808976f6393572be17ec0d","first_seen":"2026-08-10T01:27:52.490197Z","last_seen":"2026-08-10T01:27:52.490197Z","times_seen":1,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/ts-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.827Z","timestamp":1786325240827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/ts-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1112\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: d1312f3fe729b359bd4ec5f5a2266757-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.032\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1112,"size_decoded":1434,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"25b6f12b6aebed48c9aa2d775619d43d","sha1":"d7277dd5860c10c4a53ac1e2ebbb40373d23b16d","sha256":"d545fcc93eb699a0116563576059a3d5daab1506174825f2767b4b2d885f52ca","sha512":"9733634a0c8af878e5f70b3d3b2744e4e0c15236679db283cb80a22215eb742d03fea90766f263b9add93f85d1476087a282494275edac84d89542f174223c96","ssdeep":"","tlshash":"5321d00fa4711840c32e5b38556297f7612fc34f4130599ec26656335c8901e4fac68d","first_seen":"2026-08-10T01:27:52.492191Z","last_seen":"2026-08-10T01:27:52.492191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/dp-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.828Z","timestamp":1786325240828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/dp-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 780\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 39d8fff6393c7b536774dfb8062679cb-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.025\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":1101,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a3c785201c910f127ae56c85d83f5f4c","sha1":"5707f582a975ee28fcd3cd2e4bc7af1d030b13e7","sha256":"1e77492237da6fc7aa9c1cfa50afb77b99b70db3e5795762f60dbb9becf00742","sha512":"894298bb46c71a49cef3482d8502b6bea508b154f395454ac878058d1b8d9b66c21f3d31921688483411c9f76d75dbd7a738b79fea897a306233f9e85dbc17b6","ssdeep":"","tlshash":"950194e21a700b16fe13aabc6fb3378174127a8e2542841d27ae4f1a0d8ec949d3b0c0","first_seen":"2026-08-10T01:27:52.493736Z","last_seen":"2026-08-10T01:27:52.493736Z","times_seen":1,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/css/color.php?color=cba352","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.545Z","timestamp":1786325240545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/css/color.php?color=cba352 HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-length: 74\r\nx-powered-by: PHP/8.3.31\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:45 GMT\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 25e138cd696d8006e82076c212a22380-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":70,"size_decoded":564,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with CRLF line terminators","md5":"2ed8a31af81521dd6d4ad8ec2697a77f","sha1":"c2370fcdf48b74885e3a4379b1388b8eca284a00","sha256":"29afe14b891dba8a7cabfe9e4c83f6cc1f2acd4702ef61e04dd776ddd66039ea","sha512":"5a39c2e9308e73ccc286a8d0e1d4f060d631fda913ac56f77b41b4c52cd07a8239cce82cc262f4fd5444878ca06570d72398f09a7a29c149a72e520317a5d445","ssdeep":"","tlshash":"61a0010240043e2b02398212a2d4120be06402565aa07c99b8c000261b628277453c00","first_seen":"2023-07-24T14:01:25Z","last_seen":"2026-08-10T02:37:45.048826Z","times_seen":153,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/language/660b94fa876ac1712035066.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.577Z","timestamp":1786325240577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/language/660b94fa876ac1712035066.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1618\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 34d4ba2b411e30738024d3ddcce76879-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.021\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1618,"size_decoded":1940,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eaf1091b00770abba5913bdefae6d62d","sha1":"eb64a9efb5e608e98fce3b5892a8d990c5aed397","sha256":"ced4b8b0e9ca85313cbf0a67de561a4b741dda14bbfad08b4ebd4be07945fa2e","sha512":"d154f402d5ecf2d8489b35f742ddc125d549ead09b3deb44c8432eafc5e4553f806421b9f3250fe7147ec63726d8e9fa9b980f4809ae684ae045b7e9e0262654","ssdeep":"","tlshash":"cb3107ff6d020ee1f7674a7c88cb6b4ec0c082d020a9809ed45f55448cb6a04df870dc","first_seen":"2025-09-28T18:14:07.979033Z","last_seen":"2026-08-10T01:27:52.496058Z","times_seen":10,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/banner/6857c7cf59a1f1750583247.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.579Z","timestamp":1786325240579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/banner/6857c7cf59a1f1750583247.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1444\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 9f0003b45d6117fb6646c238cc93db5c-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.038\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1444,"size_decoded":1766,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"92f0c4f4cf5c45efba641b7e105e14f5","sha1":"03e303198ec5f5616b51378075c62fc26e364a65","sha256":"b6360a0ca6cf7a96f38d4684128376c4952e13af6fc6e7b621d630d52c07c76f","sha512":"472560a39fd7bd24ee1e1e7c1592d1e5a90a12500f95fdd7d76c0f90595ac2a8aa7c42e254ad1aa0987410a9be704b8a24fac0eb5ad20be6a12f872179a6bc47","ssdeep":"","tlshash":"2e31e67a07544e92e051263cd09b33848e46c0b96869ac59aa85882f9c5a062cdce66c","first_seen":"2026-08-10T01:27:52.497021Z","last_seen":"2026-08-10T01:27:52.497021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/about/6857e19d8e5481750589853.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.587Z","timestamp":1786325240587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/about/6857e19d8e5481750589853.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20102\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 5fcca95efa14ac71a7b67f1c09e4b26b-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.041\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":20102,"size_decoded":20425,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6b52ae7279b529e8ebaca2aa8769726b","sha1":"9443be234b58b66a1c3aab3e825fbec4272e1869","sha256":"1125221a7ce16d9b8b86516ed21e2a1112b4b76c07d5fef3244a5ea9ab3bed2a","sha512":"69b6320b82e87c6e1d9036b03ecab0cf88ad6001863345abc2855ee37575f6fd70e28fe80729a3c3b9aa97f450a618bead7b82290aa7b068554e5bcf98248ded","ssdeep":"384:bFslauCPjAKRdmsDD357HRKUgZ7j6UysFbNuuS+KnzTrnMLj2t/32e84:bWlCjA8d/D13gRj6UL7uRfrnMQOg","tlshash":"9192d15a9ebcdcdde70461324ad37a784a34f470e706dbf391a95e094848d39fd148a8","first_seen":"2026-08-10T01:27:52.498567Z","last_seen":"2026-08-10T01:27:52.498567Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.684Z","timestamp":1786325240684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Chakra+Petch:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 10 Aug 2026 01:27:20 GMT\r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20925,"size_decoded":1826,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"fff4fe34c590e2b6028c18a50272b4db","sha1":"b2580332d95c62c2dea78d1d045cef0098ec2105","sha256":"1096eaa0786602cc0911d3b23a2212d7b7a8fc4ef1dc576d5b1650ff28898c04","sha512":"ac4fc2c20260fbacc3bf7bcc4ed0bebf08bfd686af5dc8c41c418642bdddb5c68bfcd6ac6e9baa400aa52024b8d69670f7df292421404df7db4a43796eff19c4","ssdeep":"384:QkevQpPePwczseHYxqeZ+XdeOFZnf6NqtfcHjg8ciI9:u","tlshash":"8092ffe114ab9104ea431dc123ef7e37ae4e62a5b451c579affd18c9acdac232314b1d","first_seen":"2025-11-12T22:36:21.331631Z","last_seen":"2026-08-10T01:27:52.5002Z","times_seen":18,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":34,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/shape-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.824Z","timestamp":1786325240824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/shape-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2244\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: f15e450830ca768ebfc33b72b0a5fc2e-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.021\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2244,"size_decoded":2566,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8e2fc9bbf8ec299bb606f5406349d91","sha1":"52e796f2fd3671ff33853f1d37b98e6655cf2edc","sha256":"595645ddb735cb9231c70e3d8b1f5c1783799b40c67f58898231a967e3041073","sha512":"2c5766ca596df87b1171dd8f47ad4dbd29cde2e47f2e1b09cefe73b7e04df81bba953afcce917182c39ee755dfa663a2c87340de60a5e9199549373467a74147","ssdeep":"","tlshash":"48415a68cb03aa11fcc1303acca8ef0523a9c7181344cc9ef2c118c889272ab2d371ec","first_seen":"2026-08-10T01:27:52.502498Z","last_seen":"2026-08-10T01:27:52.502498Z","times_seen":1,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/footer-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.834Z","timestamp":1786325240834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/footer-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3752\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 304093f0d2cc87dcc19ff1fae704bed9-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.092\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3752,"size_decoded":4074,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e3d89e1ad2742a0fe22787957ca49e0","sha1":"74d1bb96e54201decddfe501ba414d2b5c879cb5","sha256":"6a0787970f9e018abbec07d82041a57eeff183d73fad35293e6b25e7f9434a09","sha512":"2a00c2b6b20e852086a03f394866ab058d4c3c6d9c7d1f8f1e333b99c27a428d90ca9cebf8892b3318c316bbe7eca43fc86fd6a5cfc6f7e06d94bd7f26bdceaa","ssdeep":"","tlshash":"b17187428311538ffd0e9c347fd8ff2320a1085dd06de9aa933f6b89d6b60259b6461a","first_seen":"2026-08-10T01:27:52.504083Z","last_seen":"2026-08-10T01:27:52.504083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/work_process/6857f488b3aa01750594696.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.596Z","timestamp":1786325240596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/work_process/6857f488b3aa01750594696.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 42542\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4d6c57bf49f50decae885fd4ad78c713-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.050\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":42542,"size_decoded":42865,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8f05ae8973785e50bc305553257dea0","sha1":"2b261a351e85538d8d50e8709b6a9d3ba5236149","sha256":"2b64ee534d73bd2bea96eb231f426cd2d7d1236563e356dce78f23a8d33cdf04","sha512":"9fc730e4123fdd82662b1e9988dd0354a8891fbc8b077e9f7b9236a105902d498054935cbeb16e98e1c54d72cd569e3a87da20eb99b483587cbd38af81745460","ssdeep":"768:tyT26gfXFMLZCRvGdNmYklICQvkiig4olM0CeX5jKOrfyMMnPsW3w7Xg/atYENDB:tyTluMLkRvGHmYklqkhKtX0OrfrMkWgh","tlshash":"1b13f22df454c16fce653c8d6e297f2fa5aac49103c07f749a4e0a842e90aa7d635262","first_seen":"2026-08-10T01:27:52.505659Z","last_seen":"2026-08-10T01:27:52.505659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/cn-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.823Z","timestamp":1786325240823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/cn-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1068\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3160f85ca9261930729098b6b6247881-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.029\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1068,"size_decoded":1390,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4ed74002920c1109637ab9187f881516","sha1":"e23b57afe559cc1527114c6946c81ebf5eceffa2","sha256":"ea804b24f6220c4cdd08588926e577be43e86833985922cafb6b29fab4fb768e","sha512":"01466dd3711a5b9ae7cb744eec6f2bd365b1227aeee4aa208a2cd0feedbc1e537250199bc5ffb3e72d3634a030397b323cdb21fb8320f2690486caec6405ef99","ssdeep":"","tlshash":"4311d82692404d4fe4173ebd11fd1b106103fa6556b2941a138949e7ccf38a42a7a8ed","first_seen":"2026-08-10T01:27:52.507557Z","last_seen":"2026-08-10T01:27:52.507557Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/fq-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.829Z","timestamp":1786325240829,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/fq-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6030\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cabc745f7dd2558077c05b06b6ce1672-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.026\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":6030,"size_decoded":6352,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"63394a4cbcba50e29149ac37dfe3600d","sha1":"38954ef0f69ecbb21d5e0ddfb97474d6739ddf0a","sha256":"55d57f96fe030d781842456d10af9c92b4b0c4d7b71b642fc4ebdd4cbd4f23f0","sha512":"21270edc7c9e2e7988357bdac8460bdbf0e2974bef44806004fdf0d7b6d83076defdc92bc9a6404027ba28da14720a8a1dc0a723fddc59176bfb1253b4ea6dff","ssdeep":"96:XtbYsmgNBGCCgdo0eyntWfACqi650Y9rnh+k6dd8k6nblNqOAZHugrFZx6ULeKy:XOXMItgq6tWfXSzO/8k6rqOAZ/6UCKy","tlshash":"cfc19eaf8362a418f0744c74829eb76c526cae7e03b89fb1fb5340006855355f49e875","first_seen":"2026-08-10T01:27:52.509525Z","last_seen":"2026-08-10T01:27:52.509525Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/blog-1.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.830Z","timestamp":1786325240830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/blog-1.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 828\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 545bb515fb385e606b9cf51304b0ccee-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.029\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":828,"size_decoded":1149,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"54457d708916f64f23adc1715537005f","sha1":"b18249dda16ce9d0d7b0b07ad78259857f872ca7","sha256":"18587040dc7bdb4af5ca8287823227dd23b2f0004d2c4f7b3f83914c98908ab2","sha512":"0e5272a75b45745d83a57394b9cf675b7173fbee0f57425578e4cb8037f2745c5fe0e1fd366808ace4d2bff4c046247819efeddf717607a9f446bd7bb093f231","ssdeep":"","tlshash":"5b01d62f77c04d20cc6720359adf7b40e6cef294275059e9db6112148e1e8e6efad54c","first_seen":"2026-08-10T01:27:52.511588Z","last_seen":"2026-08-10T01:27:52.511588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/js/bootstrap.bundle.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.554Z","timestamp":1786325240554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 22257\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:46 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"13a2a-6a671291-7b74a0f767ff3aaf;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e5b6dd0d9c4f908f86d66a256b310b95-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":80426,"size_decoded":22816,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65294), with CRLF line terminators","md5":"d3fac155eeeff0ebf33407a901291b8d","sha1":"51a602a556aa0b62e9a1426d27eac9278dd1156b","sha256":"448229f9de918450e93c0c537463bfb248c56cd64cd00c6efafdee07185ed6c2","sha512":"4b6e251dd64731e9f6b7b9240bab2c787f0c89413a1247ae7bb1815cd913f698aea33fb8f85dd4b66481cc987dbce25d207735b4315e81fad50b4341bdedba07","ssdeep":"1536:dzSMTGR2t4n+3ifBHJR9WbUHk3j8YY+PwRM3CGJI9BqQM6k+:w4Fj8GPwRM3CiI9BtB","tlshash":"9f73c6593254b4770ade45b68037420bf2265d98b24b802cb5bcadde2a7dc863277f7c","first_seen":"2023-04-16T23:45:43Z","last_seen":"2026-08-12T05:00:43.441642Z","times_seen":708,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/referral/6857dd9aa29ee1750588826.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.584Z","timestamp":1786325240584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/referral/6857dd9aa29ee1750588826.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1016\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 0d25b03ad143ea7c03af60c33a5f8b1f-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.023\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":1016,"size_decoded":1338,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2133d0aefa0abe7d494cbb8299d81116","sha1":"b7f1e35be5098c479481e4cee9a4b7b0f8f54d2c","sha256":"4b74259ad6af481ef1b4198d9fd4b7b7b81a8c95fe3cb840724224693582c159","sha512":"b2878b6ecd59c545c660c1f97b9d02ec2908012b59b132952da86d2db12cb444c2af382b466f3082fb30458ab4d4dfec4b1d4a0455cb82e09188b996e761b757","ssdeep":"","tlshash":"6211658aa6670dc2d2da6878c9d13345f64262c2211dc29a95190b720cc28949921eb3","first_seen":"2026-08-10T01:27:52.514266Z","last_seen":"2026-08-10T01:27:52.514266Z","times_seen":1,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/faq/68580a68cb1ac1750600296.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.600Z","timestamp":1786325240600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/faq/68580a68cb1ac1750600296.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56850\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 894f3541c6567324fae33d2675f0be3b-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.077\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":56850,"size_decoded":57173,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1b6d54380e4db1eb19a639c4820b43d","sha1":"1203ceb6ad1ce654eaf76376c6180568a7e0a850","sha256":"5e6259eff3417155e9f5261efb0bb6b271ba427617b797589248503f2ae1419f","sha512":"da3c1c394a6c867b870570eadf4587a0b56854405603ebf261c7df33530aa6b7445542a20094475c5e2bdc080aa58e99aee75d360c88c35110e782246b5baca6","ssdeep":"1536:rIGLviwVisigdXMx2Vkbpr2XE6uQn2VjcNzG:lvi+PigdG2VUpr2E6uQn2EC","tlshash":"9c430232bc8cb85a8a7984f1fa547f347623b2a67c59de46f0509bf0b8037588da1583","first_seen":"2026-08-10T01:27:52.516395Z","last_seen":"2026-08-10T01:27:52.516395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/investor-2.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.831Z","timestamp":1786325240831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/investor-2.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 442\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 953ba6a36922f88a8f968da6bfd85b4a-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.022\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":442,"size_decoded":763,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f29af71f3e9cfeef62b640558d5f7abb","sha1":"e8746d6680993424ab0b45f0d34e97b08903942a","sha256":"5c3a7a532590fff0ecaad6ad7093af9648571508f0133b04948ad614ab04639d","sha512":"c3198763bd1215e9a1bc136df0bbdcc8208370ea16cfc6a218118187e4095d07bbbe52733ca122e13caada6ede1d0e961db9dfcbb4d754e24d50bdbac57270f3","ssdeep":"","tlshash":"10f0f11729911ec2c820183c0e9a3375c81698dc131dff3793041b372db5442cfe89c0","first_seen":"2026-08-10T01:27:52.51877Z","last_seen":"2026-08-10T01:27:52.51877Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/logo_icon/favicon.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:21.218Z","timestamp":1786325241218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/logo_icon/favicon.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 7671\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:27:21 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"1df7-6a671291-4cb47ef8fd8f4316;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2d001c7710577d40ebfc834b05cef65e-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.013\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":7671,"size_decoded":8209,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"c2fe1c97f216df4fb7985ba02ecf9fd5","sha1":"f8f8883067ce3cc416d878de154f36ee67e4826b","sha256":"6c51750e641b33c16d85299948f9532a49d6098a76be1dffc53d02ccd47ea6f5","sha512":"c24050ddac06ae48b2c8536d3ede92c6efa1626df7f68b3acf9417f791966b30649d2202c26a8ca6f910602b556df368232ba3c3df194bc91f2a2445f71da61f","ssdeep":"192:8F5mjpdW364QCi5cG1IyXqX33nELPzWA0Q6H6BUO2ij:8F5sqzQCi5c6Xqn3nQ0QJBX","tlshash":"e0f19fdd86ab90d011025337e49aa6dc7c31539e26faa1dc6430df7cdc0fbad151256e","first_seen":"2023-05-10T00:16:00Z","last_seen":"2026-08-10T02:26:57.89364Z","times_seen":76,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/work_process/6857fdb08a2781750597040.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.597Z","timestamp":1786325240597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/work_process/6857fdb08a2781750597040.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22062\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c9eca11792e1caf5e66ca6e6d4ac8d7f-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.045\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":22062,"size_decoded":22385,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"28ca6f2a2d0a82219bac35ffbaaa9d37","sha1":"f366f584e1cb6f4890771b939111b2fa093847ff","sha256":"a203ab7f5bbcea5ed40de130fa7277497f8c9b89a2d2c4727b02965bc7e641ba","sha512":"29ab57170fe06131bcb974b781faae7c9be9869d7a1cb9518cf5667c231d3255fffb78d41d0f28cafc5fe35758b71e2d28e8f4314f5e9ec7e5ed60cc78d33ea6","ssdeep":"384:EAxUQgdMpLeIOovDWLO5UqfnBqrHEqw1h9JTinm5VXwE3NjxC7WILEFbd4K9:EAxWapQoqa+cnFqwr9JOm55tZx9B/","tlshash":"a8a2d006fe41b07883904a7b573a319c22f6a84be44ae0575832d7a6fded27d3681cb4","first_seen":"2026-08-10T01:27:52.521512Z","last_seen":"2026-08-10T01:27:52.521512Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/chakrapetch/v13/cIf6MapbsEk7TDLdtEz1BwkWn6pg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.869Z","timestamp":1786325240869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/chakrapetch/v13/cIf6MapbsEk7TDLdtEz1BwkWn6pg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://lab.webdemos.xyz\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 9756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 05 Aug 2026 13:13:11 GMT\r\nexpires: Thu, 05 Aug 2027 13:13:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 389649\r\nlast-modified: Tue, 16 Sep 2025 13:25:59 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":9756,"size_decoded":10568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 9756, version 1.0","md5":"f34dba119079e4c75db2ce3eb7f8c727","sha1":"2d40e0a7b1162c1a3bbb5dd80453a1353d86ae04","sha256":"7d75be85dd1627e27ec151e9a3701e661bc4f8c2a93611bdd92f3a05d6bbd942","sha512":"87a7969cb3ce765da319f9ca5005e98a4b9ceae99d1f2897d0a57b565782fa413e821caf833db88b3d84c1e915be6feb6e2d42507045e419496bb2d52e576e45","ssdeep":"192:i+t1ET85FWci/v73ahD3xCor6HSj4IjLvc1+r3lVKJATSBba:HE8DM/v7u1Hr6H8Xkor3lVtOg","tlshash":"5812afccca5f179dcb94daf8d5b18f34512714879e0d0ba4195b9f508a90b804bad719","first_seen":"2025-04-26T08:41:49.513983Z","last_seen":"2026-08-12T02:34:33.713103Z","times_seen":2329,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/fonts/la-brands-400.woff2","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.871Z","timestamp":1786325240871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/fonts/la-brands-400.woff2 HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/global/css/line-awesome.min.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 84772\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:27:20 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"14b24-6a671291-f1f0f89ef924cccd;;;\"\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: cb73808c871f6dd37649b972a579ce50-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.014\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":84772,"size_decoded":85313,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84772, version 1.0","md5":"54b0b4e7de85711c3796882b2b19eb00","sha1":"89f4f0d9ee3a2bde5fa250bbe6dc4a4804e1a863","sha256":"ff70c9bc4650cf5e6b12d1feaa7af29ebf0681993fc0c5ffe3658cea0dbd5403","sha512":"38490f72deaf75fd7a82a23919fe479b5a5a0d0d7279aab96e153dfe413c1ee89f2095111dcccdc58470c17622f6bb44ea4d63a8da6208c973bfea7035a37a21","ssdeep":"1536:5W447cpQ00eKOVGTZUbT3g4SAXjZoUANGBem/V1R6WsMpEEeOWeB:5zSiVGZUwEXjOvGws/WweOhB","tlshash":"e7830284fb35e9e4718ecb30d58432a9d5e9a0f8b91a0456f1c7c07bce2d6fcb196492","first_seen":"2023-04-10T16:26:38Z","last_seen":"2026-08-12T05:50:15.763679Z","times_seen":3312,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/css/odometer.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.540Z","timestamp":1786325240540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/css/odometer.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 439\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:45 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"d47-6a671291-febfd802b74b90c7;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c8575ca784c7167cdc27a5e5a531c543-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":3399,"size_decoded":978,"mime_type":"text/css","magic":"ASCII text","md5":"da3eea25555c30bad94aff41135d6b55","sha1":"96340f0e7c5656f57512d45f7732184b97737798","sha256":"178f66466e6cc39c2c87f701999d8a72d14e29b0492037acae1e67b43b24fb7c","sha512":"e94412dfe3a7039f21e15ffa50e5a1bf0b5ed8915f4dd04f3c725799c75c402e306737916b50db4d2348e19d594ca1198c3c73615b56f9d31e4101f336de1a71","ssdeep":"","tlshash":"0e61e6281fa11724633a300ab6c92764fffcb8525223e49db349a44bce53d79c289b57","first_seen":"2023-05-06T12:20:40Z","last_seen":"2026-08-10T01:27:52.525039Z","times_seen":407,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/testimonial/6857ef8c6c7701750593420.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.594Z","timestamp":1786325240594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/testimonial/6857ef8c6c7701750593420.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2270\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 43fbf37f7b308af9b165a4eb0e989c25-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.021\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2270,"size_decoded":2592,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6aa2d79553a1306bf090d33e96644452","sha1":"75e56d27756f680d0a61650022b0b920a11c17a0","sha256":"472ef2ef1e6858feac556b3dc2f5ddf976dbb4943fe7f3475ccc15141970eb28","sha512":"ad8bdc2272f0379105cf25b88575532a60b812539362e7d888c02d74a4ee09d5a113379b07c8ac9a086862982af10523bcca31957e5416c4028c8a10640c7a06","ssdeep":"","tlshash":"af4117c6aa3adc04c947b5bc878ba30ef7947c09820b1011ab0c59624e64392cffa991","first_seen":"2026-08-10T01:27:52.440518Z","last_seen":"2026-08-10T01:27:52.440518Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/work_process/6857f53f0ae971750594879.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.595Z","timestamp":1786325240595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/work_process/6857f53f0ae971750594879.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 354354\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6ed8c8abe3110e2ab6d9ba2a4fc3690a-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.340\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":354354,"size_decoded":354678,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"127ec945d7a6e364755dd5e6a7f9a3ce","sha1":"86448d2d282e8692f3d1ca2026f092ff70215279","sha256":"058a90eca4d08eba68f08479b843ed4d6a96be9e2f18ea8606b6f5c1e119299a","sha512":"37a83d681b038c40f82947b4afcc30c455a185903061d5490e18718de81639565997a68e7fe639b1e20487bda4ebae51fdf3a1f8a651d0fb804f2de2e46d6a78","ssdeep":"6144:R3fUYz+IorKmRq0qeuq/WG4zNORoYFTxxTeEGJF9o8LtYm0vjzPMqhLEB:R3fBzpmwqN8NORz7TeESF3bKzPHY","tlshash":"10742371a634106fc178e5160f16b6c46849eab186e0b8b4ff75c607b1a8d163fd7e23","first_seen":"2026-08-10T01:27:52.52571Z","last_seen":"2026-08-10T01:27:52.52571Z","times_seen":1,"resource_available":false,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":110,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark/images/shapes/rf-2.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.820Z","timestamp":1786325240820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark/images/shapes/rf-2.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/assets/templates/hyip_dark/css/main.css\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2238\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 246da2d9cecdfa6feba7551b80e89e9e-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.033\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":2238,"size_decoded":2560,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6800d8b581392d2de35e851b56b5e328","sha1":"028ee9b0d18673cb9f3ed09bf0bc85403df3b439","sha256":"65642cbae47b3847a431bbd89c0f9c927bfe232a2117294449e2aaa47ded85d3","sha512":"1afbff0535737c964d37b52d40b5243ec995bef1924bfc13b53e519f1b1116dc9984e5945a3926a26e5897adb67c4c3102a83cdf2f40d8be3dff27a311d915b4","ssdeep":"","tlshash":"ac4109eeb6f05394f083263caa92bbb68d432173e845257db3288750ef611c1d667cc0","first_seen":"2026-08-10T01:27:52.52709Z","last_seen":"2026-08-10T01:27:52.52709Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-10T01:27:16.532Z","timestamp":1786325236532,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.31\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; expires=Mon, 10 Aug 2026 03:27:20 GMT; Max-Age=7200; path=/; secure; samesite=lax\nhyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs; expires=Mon, 10 Aug 2026 03:27:20 GMT; Max-Age=7200; path=/; secure; httponly; samesite=lax\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: e37abc5e2a23807031fe59a193b58d3e-dus-edge2\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.095\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}],"data":{"size":78820,"size_decoded":16864,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (2641), with CRLF, LF line terminators","md5":"51a8f4156112265289e104b820e75782","sha1":"761611bf55d404b4d2bc07997b5fe7423e4b10d0","sha256":"e20d219aaf83a06aac6cd0ef7a70bd3993922f8a4c939a954e8700bc014eb1f3","sha512":"7c9a715ee630203a5f68092f93055636c3043e8dc65bd83a9a6158a8b064987dacbd2ec32864263f9d77d6bb8bb7c104d75d2a53c818f1fed75aac2a295a2a4b","ssdeep":"384:4OR5RGFl4Qf3dqXoXXzqrKzKlyrKZSwhqK0KUKl85lDk8kZBfpsw8s2L0FOu:JQdqXoiMPDJ1slQ3OBxeL0FV","tlshash":"5b732e3664e620b701b3e0d9a6261b6effa18407ca1a8205f2ec5bdb1ff3f11d957614","first_seen":"2026-08-10T01:27:52.52833Z","last_seen":"2026-08-10T01:27:52.52833Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3795,"timings":{"blocked":-1,"dns":118,"connect":22,"send":0,"wait":117,"receive":0,"ssl":3538},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/css/bootstrap.min.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.531Z","timestamp":1786325240531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/css/bootstrap.min.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 23869\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:24:23 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"2f95a-6a671291-19c06668e84f7c0e;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 155b259bf14fa150362a4c880cda8e6d-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":194906,"size_decoded":24412,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65301), with CRLF line terminators","md5":"dc2a3883b9beb1d7ee8d3dd0460f335d","sha1":"3a07cb42128798658eaa78ef9900d94951159d0a","sha256":"aec86a9f655cc6b81a5e65ed69979d698ff3bd317eb5301ef0fb277c2fedd0e4","sha512":"f70e320ab2f94c04dafa1822c56699bb3ceba21bb05e16a35e1feb58c802ac30cec5c53badac2b2146deb5acbc10c7f80787d6a780dc7eb3febbeb72ab25dbd8","ssdeep":"1536:YtGg9JfWgeQK5wlP72qgOfI3N9LsqkVkpz600I4l8:YtGg9JfWD9kVkpz600I4l8","tlshash":"9c1482d6f190307d98a7c2499591fefd866fa585d7120aaaf0137b6807ca7c30963ecc","first_seen":"2024-03-24T05:51:39Z","last_seen":"2026-08-11T04:44:12.137227Z","times_seen":300,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/global/css/all.min.css","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.532Z","timestamp":1786325240532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/global/css/all.min.css HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: text/css\r\ncontent-length: 21710\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 17 Aug 2026 01:22:45 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:57 GMT\r\netag: \"190f9-6a671291-ee6ca68639b968f6;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 275\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 69f38f091463097d5552c0cf6e9a3f3e-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":102649,"size_decoded":22253,"mime_type":"text/css","magic":"ASCII text, with very long lines (52269), with CRLF line terminators","md5":"d04b0cf35abb0e22eecca58c52984615","sha1":"9a0821025ba59e2602ae3a03467842a5d80f77cd","sha256":"ce6f72d6b4c728f562906a8e51e2456a9011acb20b4c90e0eb79b580cce8f229","sha512":"0bb42546a13d12035276562d4d2e01b8569649ab9dcf6e67caedae652af9df3f90fda288b4f646f057efbb399d6e02d4e33a5ffad3dbe920482ffd975010838a","ssdeep":"1536:yjMCMPMCMjMCM4MCMwMCM3sVM7709gbPMfjSFOTyPG9SpgSLCJ:N709gMGFiyPG9SiSLCJ","tlshash":"7ca3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-05-29T20:38:41Z","last_seen":"2026-08-11T13:43:24.016734Z","times_seen":1732,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/templates/hyip_dark//js/odometer.min.js","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.559Z","timestamp":1786325240559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/templates/hyip_dark//js/odometer.min.js HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 3430\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 14 Aug 2026 09:59:10 GMT\r\nlast-modified: Mon, 27 Jul 2026 08:10:58 GMT\r\netag: \"2818-6a671292-1ca5f6c60596787a;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nage: 274\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: bf970db98dc1b3562285115d0060d10e-dus-edge1\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":10264,"size_decoded":3987,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10241)","md5":"137173424eea612b37a46854e4884fc1","sha1":"7e1b08b8104c7a83a1b5a855f1977a6686796609","sha256":"eb94751b98ab535553fa4f0be1ca2a81ddec692bcefd6b9fb289ffc3ebf621dc","sha512":"e755834d5ee1683f4104373c4561f6af94e7b92891c80a849db1b2b8a1d89feaa9602ac2724c457aa96bd48e54a0e50b8a3c8b576be71cef4b4b832b0331f1c1","ssdeep":"192:HABzlvQK8QecCHAOcu2a+OdI5s/GMb8Xuulj:gBhv18QecCxVxz+7dlj","tlshash":"f8228580ba11a725835371e151bf0609b7bb99aea404401df67c9dd9be29c38e12bf74","first_seen":"2023-03-07T01:20:07Z","last_seen":"2026-08-12T10:51:00.114941Z","times_seen":918,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lab.webdemos.xyz/assets/images/frontend/banner/6857bf5e39aff1750581086.png","fqdn":"lab.webdemos.xyz","domain":"webdemos.xyz","tld":"xyz"},"ip":{"addr":"84.32.84.173","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://lab.webdemos.xyz/","date":"2026-08-10T01:27:20.582Z","timestamp":1786325240582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lab.webdemos.xyz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Jul 2026 07:03:37 GMT","end":"Sun, 25 Oct 2026 07:03:36 GMT"},"fingerprint":{"sha1":"84:F0:FA:F0:EB:72:C9:D7:32:98:4F:92:E4:7B:4A:E0:A0:36:62:8B","sha256":"D2:E4:F2:37:19:6B:7A:8A:2D:25:7E:BB:98:E2:DB:B8:2F:A8:50:2C:69:EB:3C:48:D1:21:A5:12:F9:8C:34:16"}}},"request":{"raw":"GET /assets/images/frontend/banner/6857bf5e39aff1750581086.png HTTP/1.1\r\nHost: lab.webdemos.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://lab.webdemos.xyz/\r\nCookie: XSRF-TOKEN=TGw8INXgQJcSFpvTaMnF3MLcjIXLXgUcyCTuicj1; hyiplab_session=XpriAoMxU0c17Lk6PocEhpjGV3CIO7suacnowvIs\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 10 Aug 2026 01:27:20 GMT\r\ncontent-type: image/webp\r\ncontent-length: 43952\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: b2f5e03d7801f5ec0bb95bb61d4b6c8a-dus-edge1\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.070\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":43952,"size_decoded":44275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d6581b5b37470dedf21013fd31e7b0a8","sha1":"e25df69c52d8bb6857b536c5ead193ef2e7cc8f1","sha256":"a504189f09d96e85b63c84cc4ad30f3252dee0ac845ec30f138cf7eea41dc181","sha512":"0ca5f5f1ad4b0492308ba717f0f30a4db7f0885a55e503c56d73b8a9c758a345901064ec6c08da694a5c7afa1204a3e35b377402be07b496b3cfc8b9eabc8ee2","ssdeep":"768:20/GJQU/DA/mVadVNoPm43PAQBCPUxc6rpwxJhhpl4IBRwiS3sLOxBi8d+:2mU7A/6adeD3PAQxG/p7RW3Pib","tlshash":"1113f155b57667f355f2003c7b0e33886431efae1e9c12fc92a53ea0b15ba6e0a19174","first_seen":"2026-08-10T01:27:52.532121Z","last_seen":"2026-08-10T01:27:52.532121Z","times_seen":1,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-10","alert":"Sinkholed","trigger":"lab.webdemos.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}