{"report_id":"e216889c-30d1-41c2-9129-c0e50d768a5d","version":0,"status":"done","tags":[],"date":"2026-09-20T10:24:05Z","url":{"schema":"http","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"172.67.166.173","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"title":"Zeltix AI - Plateforme de Trading | Site Officiel \u0026 Avis client","dom":{"size":191173,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1734)","md5":"7a3778f21b0abcad5b35dcfb126cc563","sha1":"f57ce0d0c37b1df2fdb413f3b1a5a797206b0acc","sha256":"71bf5ebaaefcee2a2d5cbd8e421fbb246d7d7e3bb77b5260e3811296a15eff26","sha512":"7897179288cb65cefb8e9895861b99fba441e15a05ae681976019671b09687b913070f29426459dfd62d3adc04ff97f017d9d66d832cbd6b66f743ba21132ddc","ssdeep":"1536:YTPpiOH8WMuQcb7EyA4+4ymSMqqqq9qqqq/qqqRmqqqq6qqqRgcF4NJtMd22F:YHMgWl7tMA4","tlshash":"9d14f81462b2253d505782f4fba6bb29662cd243d50fc66cb6ac46b01fc3fe4ec57688","dom_hash":"domhashae3bdb91679c2d0494510f5cb358099d","first_seen":"2026-09-20T10:24:20.740468Z","last_seen":"2026-09-20T10:24:20.740468Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"172.67.166.173","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T10:24:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zeltixplatform.com","ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-15","domain_rank":0,"first_seen":"2026-09-20T10:15:48.206474Z","last_seen":"2026-09-20T10:15:48.206475Z","alert_count":56,"request_count":14,"received_data":534365,"sent_data":6882,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"hetrsir.info","ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-27","domain_rank":0,"first_seen":"2025-10-03T11:57:16.03478Z","last_seen":"2026-09-20T10:15:49.080239Z","alert_count":3,"request_count":3,"received_data":9147,"sent_data":1652,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zeltixplatform.com/js/intlTelInput-utils.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ca8f21908a2aad7182bad4a10cce478","sha1":"89170581c7099479bc6659554c767298738c4ec5","sha256":"c3e86718e42d1424af1544109482ff4ba7443cfc1349106485a2853ab7040b69","sha512":"57bf31817e106ec9d330eb9f279e245b362919ba6bbaa4355939187062a4fa70cb79567bc8075b9958960fe82c48a4d937a05a2509645b7d81205a78ac0f1cc3","ssdeep":"3072:hHS30w8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tA:hHS3qzBwfxVM8Mq88uA","tlshash":"7e44e1ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":257451,"data":"","first_seen":"2024-01-30T04:35:53Z","last_seen":"2026-09-20T10:24:20.754423Z","times_seen":314,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/js/k.min.js","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b04cf07b5f3feff818eb63dd6f351d2","sha1":"6e9f127c3e13fedfbf40e9c459c159c1ce63c59d","sha256":"99e99b3f49fc92d97a1bddd1ac43923d99bf51bff48c316a94dcd039218daff6","sha512":"525d8eacec0212c1df9d8d6b3d34dafc8527768a093a0eff2564f56c31cc043dbe6b95666e2e5ef2cc9bc5b1359f253fe7ae72f7f778c547d2dab3daf0326356","ssdeep":"192:kXGi1dfVz97mZBcmVPjnxiycVpByuMygKp:kWmdZfmVPjnxiByZyg8","tlshash":"18e175602540dcbd98e285361cafe52d7b679e2b3449450d7c58eec22f2ce07096bb79","size":6864,"data":"","first_seen":"2023-03-08T02:35:14Z","last_seen":"2026-09-20T10:24:20.749368Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/send.js?v=3.3.13","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94672d7eadb211f0da36dc7fa88c515c","sha1":"531221f77086d3b53891ffb2453d2e02fadf38ac","sha256":"4a333d4231adb1e2113681eb8453a2dfbf737edaf919258d30132748306c145d","sha512":"31c518502b441fda6a89161419392b4d5bcc7ea893c87bfecdff2be8786d8ab2aa9b043ca1fb39a76a1aab7e893392d9d6b61620b1d8e1d112f1d7638825dcbb","ssdeep":"192:zKO0ZOYYb3YodG0axlK+b/SCMIUY7q/JafR2qyCHCmRUMhCNm/:zKva1naeCMUv0juhOm/","tlshash":"d862a4adacf321b95a77b1bd8bdf9509326560130408c9207d1c5a15efe8dbc6eb0bd8","size":14988,"data":"","first_seen":"2026-09-10T19:38:57.218779Z","last_seen":"2026-09-20T10:24:20.750275Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/YVvNxg1W?return=jsonp\u0026\u0026se_referrer=\u0026default_keyword=Zeltix%20AI%20-%20Plateforme%20de%20Trading%20%7C%20Site%20Officiel%20%26%20Avis%20client\u0026landing_url=zeltixplatform.com%2F","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50aeb74fdbdd875d7d02651a148da455","sha1":"30d90449126901095e35a88d533e271b226ca155","sha256":"bf417dd9bd70b574dc32703c895b4be703c0c59cf103376249093fcf6e25b0bc","sha512":"3c4b614c7a1dbb4018021d6dadfaee48c84b36de2e9309469fa3700ecae56e783cfe4f4a2a76a94794107ee9cc4abf14fb8098c09ba728f30250c33a76aa92c4","ssdeep":"","tlshash":"5ba0020445d21654278059e39c88d5d6576f416bc610493f14001ede6acd12187211e6","size":60,"data":"","first_seen":"2026-09-20T10:24:20.744188Z","last_seen":"2026-09-20T10:24:20.744188Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"278727ae233a04e89b812f6980da2eb8","sha1":"ffc89aac2cb6ed453f50d41e9af52f508831d662","sha256":"22117225e284b6d906cc4e11d996350fec9606420f164a14b910a85a54593718","sha512":"a2a2b655744ee32bdb23c380ced46ee510167f5206009160f37b92f7cdef9a6289a248acb56be914ef3c354f465a4754b6dc7d23a52729fd4e5cf2e1c0f7e7da","ssdeep":"","tlshash":"db61312858c7b17a2b23b5644f3fbd417d74006b5c03e8103c8cea69cf2d41a89aaecc","size":3192,"data":"","first_seen":"2026-09-10T19:38:57.250206Z","last_seen":"2026-09-20T10:24:20.759735Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc5ba4eada200fd2bca9b4548a42a90a","sha1":"8b46be4cae3686db3cf7b0793948aa461726dd03","sha256":"b7c9e0029c1322039f174629c1df6176c328b1095d5654b50b2ad92bd87bf918","sha512":"1e6627215f8324763a96a9649eaaf07e0a166f71988c4d1a714dc1a3a6406b5e59b0fa5273091473cc107cb1f1107afccde58fd8baecf46755bc833265c17bb9","ssdeep":"","tlshash":"a111ce0ca8d7a475912330bf077fe38932b2060b501bc4123e8d9640ff21abd8979eac","size":927,"data":"","first_seen":"2026-09-10T19:38:57.252224Z","last_seen":"2026-09-20T10:24:20.760501Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a41b20ecc142f91d86aa5f83f0df0bc1","sha1":"0535676e6e90b934274911a22cd5458e5c8dae7c","sha256":"45455c6e334a6052dc330676e70c2772882fd895c54c91192dcaa1847b97db65","sha512":"f5520efb53b7dd874b2b92fa7d2f2596b4ed97ff9d91e1d9f00c3c9d9e6b497aa0e9a85815ca622f62d198139778486dab898738c47224b36f4621017dadd57a","ssdeep":"384:5y04qWjXCcDLB4mi86q4miT3+t0kWQu0QF3rEgyHyhpIPd4v5y+xsW:C6tiTHyy/+xsW","tlshash":"8182944b20b31478447b71ed6baba75a316840073645dc94becccf006feab646af56ec","size":18594,"data":"","first_seen":"2026-09-20T10:15:54.907438Z","last_seen":"2026-09-20T10:24:20.761421Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91d9625ccc4832749472223550ae78ff","sha1":"caac720e0c3d3568062d6da5b80ad0ebc6c9dd3c","sha256":"20f9a3a4ca1b5ddaa82ff100dd102bf89e48bd389c02a7ff33684cc8575e02f6","sha512":"1cf7c40a1ff2452da5bb857d210bb5ba517ce968890eaac026bcb489975f3ddfc7998e1d77962e5dfe2626371fd2f526abfb000832c3ca283d1791a1242f3fec","ssdeep":"","tlshash":"60118c0817a3283b40b736975adbdb89316640236158c8303f6ce9494f26b36e5ac7f8","size":1001,"data":"","first_seen":"2026-09-10T19:38:57.255884Z","last_seen":"2026-09-20T10:24:20.76256Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/keitaro-tracker.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"daf31ec89cec2f4e2ddeaaf36e918033","sha1":"e178d51b5819936af58c8eb174c7afea70fe76e4","sha256":"1f3f087040c9a4b05b177a4abcc97916fc12af45a3c957c42dccb4fafa34139e","sha512":"125d9d3490151394342010f2c3e45f3303b02a85972fb1cf8b7c976af0f65e63be7f45f3c95e3c9866f79178a96adedb11b7a163170f915f8b26add73f3815d6","ssdeep":"192:cmpxQlI3qZ0VbPaLuEkM1DwE2Xg+MQCyNItQCw79tyH+brREpIErWbvpp7dQr95w:vQleWuL0nH4B","tlshash":"7c322d5d3cf3a0b55a23307c8bbf81183a799403200add50bd0db655afa9d6946b6fdc","size":11794,"data":"","first_seen":"2026-09-10T19:38:57.246225Z","last_seen":"2026-09-20T10:24:20.755864Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/deferred-load.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5242ff08228efcadaa301f204bd01d05","sha1":"733e6c4522b5b226b8dd223a3f145839e0e6301e","sha256":"c19363a73ff87d9a57b82a88439777c2bd520b16663194062a2d181cab8b9386","sha512":"cdb83c0b50f7f2fb48ee4180380bcb429d90e232ae6440c477cf47c428c42fc5950fd034f769d6ea150b75665d7798ab920f6ea7ea2886eb29ab639875c95594","ssdeep":"","tlshash":"bc21ad0c0dd2d475861320bb6a7bd398b6b154132015dc56389dca58ef20ffe99baed8","size":1257,"data":"","first_seen":"2026-09-10T19:38:57.240011Z","last_seen":"2026-09-20T10:24:20.75822Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/lucide-deferred.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47718b2fbcf880a3da6417b3053801b6","sha1":"b177ef96f53bd3732d6bf99c6419aea273479019","sha256":"9a66ae28bcb027ba34c6653dc31494ceba3eea91c3dce3bc7af89e64530e0e2e","sha512":"18f733a9de8f9aeafff10bfe848f54d29f4a5259fd82bc549903f35e680c327ca54cc3a1fd4c60bddd495ba80b196979cc1ad15933d9313f856aa41de26519e0","ssdeep":"192:r90jbQLxahKNSKBirKJMIX5MK15I2UfbMFaCq15R4Lo3:ra//rSXyeQbXC4L","tlshash":"e902bc3d8f8e226e8913e24dca17f0415f2c52b1b7caf81274edc572cb9642dc567aa4","size":8855,"data":"","first_seen":"2026-09-10T19:38:57.242624Z","last_seen":"2026-09-20T10:24:20.745669Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/deferred-lead.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd675982f54e64aecf7a479a4cab3841","sha1":"29adb12d9736abe8183cb875e82f99515f227568","sha256":"43cbae002c6824f86a83bc17cf4554c679863745c38aac1bc3084d2cc2c2f5af","sha512":"b460dc5851b73369290a9999b3b93a65aa71db28c4994894c6843f898b0c3230319adabb4093ae960e3d01cd492acb07d0d89ff0b82b183b7d930b6b04fdf1d9","ssdeep":"","tlshash":"a111331d4d41d825853123bbaab7c16dffb919532121d19239adc008ff70aee5a20ee8","size":1033,"data":"","first_seen":"2026-09-10T19:38:57.232982Z","last_seen":"2026-09-20T10:24:20.746991Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/intlTelInput.min.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6eb09b87575184fbf793b6c76b0b3b5a","sha1":"8449eed53e8d70da2dc33f361fdb93275062233a","sha256":"31a653d3eef4fee8a0f663943e6da108d433da1103312e7ecca6fabea7dc7048","sha512":"b50af2b637df4d7184d2178cae587fadff4bf1d3fde94e54ee5ad90c31a8dc397143e3763910374388b5facee882bc5db06ca15f18b8049c2fbc9804a4730a5d","ssdeep":"768:LCg3rXNC+I4SAGFdGcUNm//OjJqLRIyH16v4rEIr32Cq+R:Bk3GcL//LL1TEIrGCZ","tlshash":"58e208edb3516633acad91b164bb12476ebf34005684989c787dcdc81eecec960b6b34","size":32951,"data":"","first_seen":"2024-02-27T18:01:35Z","last_seen":"2026-09-20T10:24:20.753788Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zeltixplatform.com/","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T10:23:35.230Z","timestamp":1789899815230,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.3.17\r\nvary: Accept-Encoding\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rY0B5ioRQum1HP1knk3qC%2Frl8s0I0bvXICc8MaGg%2BfS%2BojBwTjjSA8iQnM2PrjzpOzeZaUy6npB830FdaOuc2hU1PD2PQo04xIQBWTcsTbrY6tJGnM3xrBdVf6rMpVx8lsA1OzM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e01d956ee256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.3.17","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143955,"size_decoded":31462,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1734), with CRLF, LF line terminators","md5":"6a091b32e014a1cf5130473d5474022d","sha1":"0f136efae830d3092dd32cd874fb995194348e9a","sha256":"2558d6acfb87c6bb660e9e88d1ba3cf7001f7c610d7406dfb97da8cabebbf37c","sha512":"fff155a4b54834c1f0ee766e9250a1c15e1041b72faf5d8fd98e1ec8eaf64a5bebdce40e457da904fc1ff304ffa5334e0fec02a8b52da2b10b9ccaa61fb4153c","ssdeep":"768:NiyBiv2uN3PpiZTQvcx4uZNBLxWLviDc5+VxwNEufIq7uqUQutgLKjjJQv+tgLKP:NWPpiZ6WwGDcceEkdU41m9FraJtQnCK","tlshash":"f8e3e61561f3117e505392f4bba6bb1aa968c207d50bca6cb6dc46a01fc3fe19d873c8","first_seen":"2026-09-20T10:15:54.882625Z","last_seen":"2026-09-20T10:24:20.742212Z","times_seen":2,"resource_available":true,"data":null}},"time_used":531,"timings":{"blocked":-1,"dns":10,"connect":23,"send":0,"wait":456,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/YVvNxg1W?return=jsonp\u0026\u0026se_referrer=\u0026default_keyword=Zeltix%20AI%20-%20Plateforme%20de%20Trading%20%7C%20Site%20Officiel%20%26%20Avis%20client\u0026landing_url=zeltixplatform.com%2F","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:36.379Z","timestamp":1789899816379,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetrsir.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 21:14:14 GMT","end":"Thu, 29 Oct 2026 22:13:00 GMT"},"fingerprint":{"sha1":"79:A8:AF:BB:36:A8:4A:55:3F:B5:00:6D:D9:BE:E9:A7:5D:8C:54:F2","sha256":"6C:37:CE:DF:98:AD:6F:6D:89:EC:17:59:1D:DA:F7:88:C6:3D:33:40:B3:2E:18:C6:76:E2:DA:CD:32:06:30:ED"}}},"request":{"raw":"GET /YVvNxg1W?return=jsonp\u0026\u0026se_referrer=\u0026default_keyword=Zeltix%20AI%20-%20Plateforme%20de%20Trading%20%7C%20Site%20Officiel%20%26%20Avis%20client\u0026landing_url=zeltixplatform.com%2F HTTP/1.1\r\nHost: hetrsir.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:38 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sun, 20 Sep 2026 10:23:37 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9iK8ofmO9Dj3FCcPIio4rVR3vIdjXIQZgPXDfZbDLy7zu%2F5aUQd06bi12h0HZ80S4rr7dLUID3UOjq8BIjxRcvHUgSNzD%2FWGBaYZdCC9WI7YYq1Dp7R7peyPSSgj%2FcI%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e01d9c683bc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":815,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"50aeb74fdbdd875d7d02651a148da455","sha1":"30d90449126901095e35a88d533e271b226ca155","sha256":"bf417dd9bd70b574dc32703c895b4be703c0c59cf103376249093fcf6e25b0bc","sha512":"3c4b614c7a1dbb4018021d6dadfaee48c84b36de2e9309469fa3700ecae56e783cfe4f4a2a76a94794107ee9cc4abf14fb8098c09ba728f30250c33a76aa92c4","ssdeep":"","tlshash":"5ba0020445d21654278059e39c88d5d6576f416bc610493f14001ede6acd12187211e6","first_seen":"2026-09-20T10:24:20.744188Z","last_seen":"2026-09-20T10:24:20.744188Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1805,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/lucide-deferred.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:40.960Z","timestamp":1789899820960,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /js/lucide-deferred.js HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nCookie: s=19h2eob15rr8p; subid=19h2eob15rr8p; undefined=null; token=null\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 16 Jun 2026 13:15:54 GMT\r\netag: W/\"6a314c8a-2297\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Lw3velCjra0s3lLc6o4awWni53uR7W4%2BK24jKXaEIP7IUM46zmu0gBkL0yeuuFIAi4oTePdq%2FeyRt%2FeEFY1JKtxvEZkDTuTdAWF3kGJZx3esj8IgQhLJx%2FzweLIKFiAgP%2ByfaY%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01db90b7d56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8855,"size_decoded":4141,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (604)","md5":"47718b2fbcf880a3da6417b3053801b6","sha1":"b177ef96f53bd3732d6bf99c6419aea273479019","sha256":"9a66ae28bcb027ba34c6653dc31494ceba3eea91c3dce3bc7af89e64530e0e2e","sha512":"18f733a9de8f9aeafff10bfe848f54d29f4a5259fd82bc549903f35e680c327ca54cc3a1fd4c60bddd495ba80b196979cc1ad15933d9313f856aa41de26519e0","ssdeep":"192:r90jbQLxahKNSKBirKJMIX5MK15I2UfbMFaCq15R4Lo3:ra//rSXyeQbXC4L","tlshash":"e902bc3d8f8e226e8913e24dca17f0415f2c52b1b7caf81274edc572cb9642dc567aa4","first_seen":"2026-09-10T19:38:57.242624Z","last_seen":"2026-09-20T10:24:20.745669Z","times_seen":5,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/deferred-lead.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:35.921Z","timestamp":1789899815921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /js/deferred-lead.js HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 14:34:00 GMT\r\netag: W/\"6a6a0f58-409\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZvwYaUqMKhAxOa%2BrMbY7jkdy%2FHPJdU4c%2FFfPMHL10CS%2FdH25L34Gi6RtQ4U3%2FmNipS%2FgRlTGUPfBLg9yFRSji3w9FyU7QF6yyMHHWtKEvqs34mmH9UfTItzGaG9%2FgKzZGrlMu8%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01d998f6f56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1033,"size_decoded":1237,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"bd675982f54e64aecf7a479a4cab3841","sha1":"29adb12d9736abe8183cb875e82f99515f227568","sha256":"43cbae002c6824f86a83bc17cf4554c679863745c38aac1bc3084d2cc2c2f5af","sha512":"b460dc5851b73369290a9999b3b93a65aa71db28c4994894c6843f898b0c3230319adabb4093ae960e3d01cd492acb07d0d89ff0b82b183b7d930b6b04fdf1d9","ssdeep":"","tlshash":"a111331d4d41d825853123bbaab7c16dffb919532121d19239adc008ff70aee5a20ee8","first_seen":"2026-09-10T19:38:57.232982Z","last_seen":"2026-09-20T10:24:20.746991Z","times_seen":5,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/img/logo-header.webp","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:35.924Z","timestamp":1789899815924,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /img/logo-header.webp HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Jun 2026 13:23:16 GMT\r\netag: \"6a314e44-3ea\"\r\naccept-ranges: bytes\r\nage: 515\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7gx%2F5qph9k1OCUvI%2FcYeVqa9q7vjsz%2F%2B%2BH8CnFEMjZG3rryK5k8c9qErev0RaB3evwTjNCYj0jgs6C7N8IjPtgHugAxMUK2kGdnS%2B%2B6Cpo3c5DDJzkCODzaxNEW6mN9g4xs3E3o%3D\"}]}\r\ncf-ray: a3e01d998f7156a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1002,"size_decoded":1714,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 80x80, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d5e43cd9573ea99d907b099ee41da58","sha1":"f754dc4ad5219e245d5bd8d75422cbbf74fcac33","sha256":"398db2f41482402e9d67b077256a662ef2c2cfe971163fa66f974e0e3d1c903c","sha512":"35d0bd248b8f9f80566fb62de2493413e0a0b03c2525694439d4c02eace7cf2eed39a7454cab52eeb38095556c208780e2145c40ddf66f64bd17e83e3909aa36","ssdeep":"","tlshash":"1e11c85c5ded349785c8135c087bba7ea9c66608089f3077d6eb7ec83472c435354324","first_seen":"2026-09-20T10:15:54.884085Z","last_seen":"2026-09-20T10:24:20.748407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/js/k.min.js","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:36.218Z","timestamp":1789899816218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetrsir.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 21:14:14 GMT","end":"Thu, 29 Oct 2026 22:13:00 GMT"},"fingerprint":{"sha1":"79:A8:AF:BB:36:A8:4A:55:3F:B5:00:6D:D9:BE:E9:A7:5D:8C:54:F2","sha256":"6C:37:CE:DF:98:AD:6F:6D:89:EC:17:59:1D:DA:F7:88:C6:3D:33:40:B3:2E:18:C6:76:E2:DA:CD:32:06:30:ED"}}},"request":{"raw":"GET /js/k.min.js HTTP/1.1\r\nHost: hetrsir.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:36 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 19 May 2025 02:02:37 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGu9qclUnDi7CGXfrUhVZK8fq%2FgE3lUev7iLIF0GURSnZtfOb4zWmx51obxYxephPG%2BLSBhZDHS0%2BGPyhgbHtjWP1pm9a25xcXv8h2lSya0xAU3vRCI%2BXaG98gZOnEE%3D\"}]}\r\npriority: u=3,i=?0\r\netag: W/\"682a913d-1ad0\"\r\nexpires: Wed, 30 Sep 2026 10:15:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nage: 514\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01d9bd823c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6864,"size_decoded":3003,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1030)","md5":"1b04cf07b5f3feff818eb63dd6f351d2","sha1":"6e9f127c3e13fedfbf40e9c459c159c1ce63c59d","sha256":"99e99b3f49fc92d97a1bddd1ac43923d99bf51bff48c316a94dcd039218daff6","sha512":"525d8eacec0212c1df9d8d6b3d34dafc8527768a093a0eff2564f56c31cc043dbe6b95666e2e5ef2cc9bc5b1359f253fe7ae72f7f778c547d2dab3daf0326356","ssdeep":"192:kXGi1dfVz97mZBcmVPjnxiycVpByuMygKp:kWmdZfmVPjnxiByZyg8","tlshash":"18e175602540dcbd98e285361cafe52d7b679e2b3449450d7c58eec22f2ce07096bb79","first_seen":"2023-03-08T02:35:14Z","last_seen":"2026-09-20T10:24:20.749368Z","times_seen":305,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":60,"connect":11,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/send.js?v=3.3.13","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:36.323Z","timestamp":1789899816323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /js/send.js?v=3.3.13 HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 14:34:00 GMT\r\netag: W/\"6a6a0f58-3a8c\"\r\ncontent-encoding: gzip\r\nage: 514\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jgv0EsGSMluOSqID8%2BsrY3D1y2OTc4bx05cZL%2BObuUXyTw2WcBuLJ91D8Y2T6Kg1LSf3jH0GScQfZBYd75drSeXprlBrmPClhWoEVC8rEVZiML5BO7gM8CUbfqUHQnuMEdvnLrE%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01d9c0fb756a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14988,"size_decoded":4951,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"94672d7eadb211f0da36dc7fa88c515c","sha1":"531221f77086d3b53891ffb2453d2e02fadf38ac","sha256":"4a333d4231adb1e2113681eb8453a2dfbf737edaf919258d30132748306c145d","sha512":"31c518502b441fda6a89161419392b4d5bcc7ea893c87bfecdff2be8786d8ab2aa9b043ca1fb39a76a1aab7e893392d9d6b61620b1d8e1d112f1d7638825dcbb","ssdeep":"192:zKO0ZOYYb3YodG0axlK+b/SCMIUY7q/JafR2qyCHCmRUMhCNm/:zKva1naeCMUv0juhOm/","tlshash":"d862a4adacf321b95a77b1bd8bdf9509326560130408c9207d1c5a15efe8dbc6eb0bd8","first_seen":"2026-09-10T19:38:57.218779Z","last_seen":"2026-09-20T10:24:20.750275Z","times_seen":5,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/img/apple-touch-icon.png","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:36.372Z","timestamp":1789899816372,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /img/apple-touch-icon.png HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:36 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 16 Jun 2026 13:23:16 GMT\r\netag: W/\"6a314e44-4333\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UIYlPQqV9y4ZihBC4wxUXpU%2F0TtxBmrWUldykLPQkbtzxfn0PVIojLIrxF%2BtKAU9u2%2B69uvnCsNk7Zzi2yfsdL%2Fo0JxConjyUaXabPewP023YxyQqIzT9OJjDFOg8jAFjBypNxE%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01d9c5fc456a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17203,"size_decoded":17945,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d851b64c94a24d863eeab33755ecd677","sha1":"ee5f864a5c1128400233bb6dbd87dc82cdc8817f","sha256":"e35335dcce39882a83b100144b08359f3f87e5db439ee9fb6571799e6e295994","sha512":"75f44a7014c8b60d70b81a5c79c8797d3f7be589d2e2730c0150e7eee2f2bfbe6496a180f72940e5e9ff27c97054023377aa63e429ebbb98ed81d5fb0430dff1","ssdeep":"384:zd6/IYtEuvOM0xmMyl5VdJ1BxM2SCm6OKJjsLpATWtOQRFbSQ2gP0uA:zgIKiHgbJpaiOKJjsLpAacQRFbnP0uA","tlshash":"eb72d1eb1799aa30ce7bb217791809e17bea898b6341533ef0454724213d778b334a63","first_seen":"2026-09-20T10:15:54.88659Z","last_seen":"2026-09-20T10:24:20.751158Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/img/favicon-16x16.png","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:36.373Z","timestamp":1789899816373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /img/favicon-16x16.png HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Jun 2026 13:23:16 GMT\r\netag: \"6a314e44-224\"\r\naccept-ranges: bytes\r\nage: 515\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qEKA8vV6I8Oi5ui4oq7e2HLUnuAq%2BGuJtPCAkWlEGrgPROb0RKnZi0xhDQxQ9PojSW8qW0nBck6XmXHFzxKvu4pIifpZxoWKoZIdFf%2FRuZqKadjPHtrQD5GAXi4NzHlyYBRidWY%3D\"}]}\r\ncf-ray: a3e01d9c5fc556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":1251,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"4fdcce690f011085a9eceee41aa316d4","sha1":"dc4586552ff4dc34f6123eaa17144c3ffcb92e38","sha256":"d8c07d3e19ffcce94b4388098324fb98774858d572ac4b48a8ad665c07ff8a6a","sha512":"bee19a872cc084d9abd331344e4d98a4e0e626d0008367fcc2f1deaac197d8f8ed8c0124c996c61da348c77d6f69d98d5548c0e3289e4d570cecc2a8f072c985","ssdeep":"","tlshash":"bdf07cc7d3c457f14544447cc942108a9553274dec76154d951660f94cce3dc1cd5c33","first_seen":"2026-09-20T10:15:54.892161Z","last_seen":"2026-09-20T10:24:20.752093Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/img/flags/4x3/fr.svg","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:35.928Z","timestamp":1789899815928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /img/flags/4x3/fr.svg HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:35 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 16 Jun 2026 13:15:54 GMT\r\npriority: u=4,i\r\netag: W/\"6a314c8a-e7\"\r\nage: 515\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJVp5qqGyS6pd5MX%2BS7ERtQNi4F4RXvapheuVA2pdTZPWhcx95Xqc82OWqghE3lkZrvj8Ac%2BenaSl5TtT7cWhtOhd06ZnsiN4khKRkmUVLouFk8Yjp9JSl1m%2BIscadTpTBB1oDU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e01d999f7356a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231,"size_decoded":849,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf4cae9b80cd98ef576670139bdb167d","sha1":"a761902c65cfdca4058ce0c9d5f8eac667cd6118","sha256":"8cdacc8d79bcf210cdca2777a2c0de1f9e5862526877bd3026c9d59ecdcd4578","sha512":"bb6b5de936dfdb7f7aea85e15d22ef5a15bbf020dd055d9d0423cd59972ab6aef642db2c522435b14cf92535432fa9ea1f7c31ee4eb5f01543dcda89d4292d83","ssdeep":"","tlshash":"5cd0a7a9d32da410c74447200a7c75c254a5f0c9a48411cbe890049522190f69cc39a5","first_seen":"2023-12-06T12:02:13Z","last_seen":"2026-09-20T10:24:20.753068Z","times_seen":2578,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/intlTelInput.min.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:35.990Z","timestamp":1789899815990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /js/intlTelInput.min.js HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 16 Jun 2026 13:15:54 GMT\r\netag: W/\"6a314c8a-80b7\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y2v1U%2BYyNSKJXxrwvKntVHIDvdeyk%2BWxpOj0VHqMmmNlkwPjYLvkjLaDQCV2TOBRuxFOswT8PmSv121Hkgisii2WlBHixeUD1tn79GCDT2OC%2BVCCpGy24Qxcyg0aRulRRJiIAeM%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01d99ff7e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32951,"size_decoded":13437,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27816)","md5":"6eb09b87575184fbf793b6c76b0b3b5a","sha1":"8449eed53e8d70da2dc33f361fdb93275062233a","sha256":"31a653d3eef4fee8a0f663943e6da108d433da1103312e7ecca6fabea7dc7048","sha512":"b50af2b637df4d7184d2178cae587fadff4bf1d3fde94e54ee5ad90c31a8dc397143e3763910374388b5facee882bc5db06ca15f18b8049c2fbc9804a4730a5d","ssdeep":"768:LCg3rXNC+I4SAGFdGcUNm//OjJqLRIyH16v4rEIr32Cq+R:Bk3GcL//LL1TEIrGCZ","tlshash":"58e208edb3516633acad91b164bb12476ebf34005684989c787dcdc81eecec960b6b34","first_seen":"2024-02-27T18:01:35Z","last_seen":"2026-09-20T10:24:20.753788Z","times_seen":113,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/intlTelInput-utils.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:36.231Z","timestamp":1789899816231,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /js/intlTelInput-utils.js HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 16 Jun 2026 13:15:54 GMT\r\netag: W/\"6a314c8a-3edab\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gmuoXK1JNi5gPHX9Ht%2BAT0JClgBzegLGjQC3oftezVK0Kdl%2FsJkYtFNmhuUJ3yU%2BjDDvVsquhELyRZwBmXobRSZb0ojK5jzM%2F6gnQ83Yb4DyMaqeXY%2BivlXuAgYJqI%2Fb65oav%2BQ%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01d9b7fa556a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257451,"size_decoded":77608,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"9ca8f21908a2aad7182bad4a10cce478","sha1":"89170581c7099479bc6659554c767298738c4ec5","sha256":"c3e86718e42d1424af1544109482ff4ba7443cfc1349106485a2853ab7040b69","sha512":"57bf31817e106ec9d330eb9f279e245b362919ba6bbaa4355939187062a4fa70cb79567bc8075b9958960fe82c48a4d937a05a2509645b7d81205a78ac0f1cc3","ssdeep":"3072:hHS30w8yAJjFs3OwPss3MwPgmAu9I2xVM8Mq8WXnWcBpUsA56kmLNTg/QKWVk/tA:hHS3qzBwfxVM8Mq88uA","tlshash":"7e44e1ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2024-01-30T04:35:53Z","last_seen":"2026-09-20T10:24:20.754423Z","times_seen":314,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hetrsir.info/YVvNxg1W?_update_tokens=1\u0026sub_id=19h2eob15rr8p\u0026sub_id_1=form\u0026sub_id_15=https%3A%2F%2Fzeltixplatform.com%2F\u0026sub_id_16=Zeltix%20AI","fqdn":"hetrsir.info","domain":"hetrsir.info","tld":"info"},"ip":{"addr":"104.21.70.229","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:38.191Z","timestamp":1789899818191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hetrsir.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 21:14:14 GMT","end":"Thu, 29 Oct 2026 22:13:00 GMT"},"fingerprint":{"sha1":"79:A8:AF:BB:36:A8:4A:55:3F:B5:00:6D:D9:BE:E9:A7:5D:8C:54:F2","sha256":"6C:37:CE:DF:98:AD:6F:6D:89:EC:17:59:1D:DA:F7:88:C6:3D:33:40:B3:2E:18:C6:76:E2:DA:CD:32:06:30:ED"}}},"request":{"raw":"GET /YVvNxg1W?_update_tokens=1\u0026sub_id=19h2eob15rr8p\u0026sub_id_1=form\u0026sub_id_15=https%3A%2F%2Fzeltixplatform.com%2F\u0026sub_id_16=Zeltix%20AI HTTP/1.1\r\nHost: hetrsir.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:38 GMT\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Sun, 20 Sep 2026 10:23:38 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ExoKV8Rj9D3N3DKIBOOu1kW395H8PnKPtJSmtivGyfjoPTPZ%2BwzKaiOf6jMWtRLzloxP3jlBbSIZqp6jzjkDfoD02%2FkIXASmoCHLXwDskdLWO3YgI4bs3%2BuA8geOM1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3e01da7bae9c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":688,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":463,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":463,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"hetrsir.info","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/keitaro-tracker.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:35.918Z","timestamp":1789899815918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /js/keitaro-tracker.js HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:35 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 29 Jul 2026 14:34:00 GMT\r\netag: W/\"6a6a0f58-2e12\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCgD9Gk%2FjhdsOv20Z1BFeKpwOjTsbFIsAeZlc92H9KGg4%2Fxx%2F%2BDQKsoati0Qf7ei4tOPdiyUu%2F9iWfDAiiM0YVkhBuiMYv40NBqrnoRQpEL55aKlzptzOom5%2FyfcqCeUsTv02Yo%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01d998f6e56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11794,"size_decoded":4235,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"daf31ec89cec2f4e2ddeaaf36e918033","sha1":"e178d51b5819936af58c8eb174c7afea70fe76e4","sha256":"1f3f087040c9a4b05b177a4abcc97916fc12af45a3c957c42dccb4fafa34139e","sha512":"125d9d3490151394342010f2c3e45f3303b02a85972fb1cf8b7c976af0f65e63be7f45f3c95e3c9866f79178a96adedb11b7a163170f915f8b26add73f3815d6","ssdeep":"192:cmpxQlI3qZ0VbPaLuEkM1DwE2Xg+MQCyNItQCw79tyH+brREpIErWbvpp7dQr95w:vQleWuL0nH4B","tlshash":"7c322d5d3cf3a0b55a23307c8bbf81183a799403200add50bd0db655afa9d6946b6fdc","first_seen":"2026-09-10T19:38:57.246225Z","last_seen":"2026-09-20T10:24:20.755864Z","times_seen":5,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/img/zeltix-ai.webp","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:35.926Z","timestamp":1789899815926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /img/zeltix-ai.webp HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 16 Jun 2026 13:23:16 GMT\r\netag: \"6a314e44-1a8e\"\r\naccept-ranges: bytes\r\nage: 515\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2%2FqTIIrSZV9IDzcXfQIwoUP7qPtMJtJk3HYaL%2B6tTo5XC5Nr2JfR347Gop8nfNLg9TwXiVEhB4XroCs%2FxFYINZWFEQFwSxxzBgE0SgOsALCIxBd%2B%2BEv%2F8foCgszV6RKprpT%2BO1k%3D\"}]}\r\ncf-ray: a3e01d998f7256a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6798\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6798,"size_decoded":7511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 512x512, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d2a35a1c30c0c5e025ae9e2d2d3c9a8b","sha1":"e030852bb1b182c5cd2e0419178235c62eddda0b","sha256":"65a5b50e643458aa92fad0ecebecd258ef93060a9a29d5693fe92c512f3a10fe","sha512":"fdb79b8997ba93730d838ee647d74a8b7962371cfb33d5a6162c5e2abb83a6fa0ca179f36d46c1a83be5fe4ae9cf5fa283628dc7bcdaac04ae95b478cc697cb4","ssdeep":"192:lD22mlzPFYZ491EpRqc2j69aiiixqBZNv2msM:lDclT2q8Mcy6wiTxqB2msM","tlshash":"c9e19eb5c7554dda752fe0b2cec6a69e3e3313089122cc5a603f888007be3e57491c4e","first_seen":"2026-09-20T10:15:54.896816Z","last_seen":"2026-09-20T10:24:20.757283Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/js/deferred-load.js","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:40.901Z","timestamp":1789899820901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /js/deferred-load.js HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nCookie: s=19h2eob15rr8p; subid=19h2eob15rr8p; undefined=null; token=null\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 16 Jun 2026 13:15:54 GMT\r\netag: W/\"6a314c8a-4e9\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fdkoPXG7qWnWFE8%2B8DTzbPR5nOgFdjEU8LwNXqMWARmBRIGc41kjuPc%2BjvrkodGu1Pim1hW6TUZixlvstJGN9kC0fC45LAvsftJo4fAvNlSbwzKWbQa70kn2gXi5vCyO0qHvC8%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01db8ab6a56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1257,"size_decoded":1309,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5242ff08228efcadaa301f204bd01d05","sha1":"733e6c4522b5b226b8dd223a3f145839e0e6301e","sha256":"c19363a73ff87d9a57b82a88439777c2bd520b16663194062a2d181cab8b9386","sha512":"cdb83c0b50f7f2fb48ee4180380bcb429d90e232ae6440c477cf47c428c42fc5950fd034f769d6ea150b75665d7798ab920f6ea7ea2886eb29ab639875c95594","ssdeep":"","tlshash":"bc21ad0c0dd2d475861320bb6a7bd398b6b154132015dc56389dca58ef20ffe99baed8","first_seen":"2026-09-10T19:38:57.240011Z","last_seen":"2026-09-20T10:24:20.75822Z","times_seen":5,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeltixplatform.com/css/tw.min.css","fqdn":"zeltixplatform.com","domain":"zeltixplatform.com","tld":"com"},"ip":{"addr":"104.21.11.168","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeltixplatform.com/","date":"2026-09-20T10:23:40.958Z","timestamp":1789899820958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeltixplatform.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 13:58:04 GMT","end":"Wed, 11 Nov 2026 14:56:43 GMT"},"fingerprint":{"sha1":"CC:94:09:E8:70:5C:11:72:CB:6D:FF:03:6C:3B:9E:77:A3:F7:51:92","sha256":"14:A1:18:44:78:7F:78:58:97:DC:03:49:FF:57:2E:3A:9D:C7:23:88:3A:D4:92:E1:EE:A7:E2:B5:AA:9F:A9:46"}}},"request":{"raw":"GET /css/tw.min.css HTTP/1.1\r\nHost: zeltixplatform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeltixplatform.com/\r\nCookie: s=19h2eob15rr8p; subid=19h2eob15rr8p; undefined=null; token=null\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:23:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 16 Jun 2026 13:15:54 GMT\r\netag: W/\"6a314c8a-6669\"\r\ncontent-encoding: gzip\r\nage: 515\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=31536000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JJ7x1vq4wYsEddXey2PJQbEG3g7zx9Lp0hmho%2BOh1S%2FBUbV6Km2fvfdrkDENwhemnQczMIDJYyQmYkkjs2SQLGphOhddE6QQByTq%2BkkMg28lhCTf96uwWr0MVPyv95TkJXjuiQ%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e01db90b7c56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26217,"size_decoded":7361,"mime_type":"text/css","magic":"ASCII text, with very long lines (26217), with no line terminators","md5":"00fb1af74892aa1f2b54b0b5653c2806","sha1":"5158194e77a5c2d388c02ca559d220290649b070","sha256":"ed466b58a528053b0184420072bf1d3f888d77f6b00e57160c4cb0c6342a4310","sha512":"f3ecf4ab1e44fcfb9295fe544a716bdd4b0473e27c5690486147071dcf9bb738790e7130c0332ec60e3fb861022d6cb51cbf6485ab4b2d5fb8449b6be9bfb47b","ssdeep":"384:GHL7Gba+WdP36Gja5LkIN2fQmUgFE/0/tZN8/N:GHGba/36CfQ6ZNEN","tlshash":"5cc2975e6b61013fbc1790e5d6e8ba9cf41af0c2de3a53faae8211016fe23f61c56504","first_seen":"2026-09-10T19:38:57.215834Z","last_seen":"2026-09-20T10:24:20.75898Z","times_seen":5,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeltixplatform.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}