{"report_id":"e7af3ad1-55a3-4c59-932e-f88c3903a457","version":6,"status":"done","tags":[],"date":"2026-04-03T12:08:03Z","url":{"schema":"http","addr":"busines.ads-program-agency.com","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"172.67.195.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"title":"Accounts Centre","dom":{"size":28477,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (28477), with no line terminators","md5":"7c03524680ed51e61beebe82c9b2e317","sha1":"41bdbc312d6feb20d76873dcee0283fb2b71dea9","sha256":"3b103f8bfd0a9c2e2b8eea18d16b43063974d2ebd9447d8c4a9ad139b954b2a0","sha512":"b994b555558095d8e096337fc319ebf22d8cf7e88a14f5e85b2d441fe54a865ac6434a0f9514be08629b16d87eb7aeb8ef12ad59d8b49527d3f30866d2b57637","ssdeep":"768:vy59+YUlHsn3NT43lTjmZ9vU5525nImfDWa7:6HIHsndU1mZ+3cnZt","tlshash":"02d2823a8394d9bfa033479cd6306f3f21ed839fde55c51c91b897d4c28aea5a9124c2","dom_hash":"domhash17bd3d3079d1875867ccb5aceaeb71ab","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"busines.ads-program-agency.com","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"172.67.195.233","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-08T12:08:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"busines.ads-program-agency.com","ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-20","domain_rank":0,"first_seen":"2026-04-03T12:08:04.132018Z","last_seen":"2026-04-03T12:08:04.132018Z","alert_count":95,"request_count":19,"received_data":780454,"sent_data":9186,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4bd1b696-fd2c81fbe58d203b.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbd47ecbf6b9f8e404216d5186b53aad","sha1":"a8d8327692bba31c02aeeb2d3de65dc0130979a0","sha256":"da446533ae10a92abc594d4daa52e0ec33ef6b9b6f576d1433c6a48ea8273bba","sha512":"2e676d9df2a12ef0340b2ce221611e4d4acafc2a9086984815e1638805d17dec365fdc8cf63edbdf1b7ed46cdc519d17ce4b4ec0af7c05f6e755340a0e78ef71","ssdeep":"3072:NtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:Ntfj2ld4Y40fUHQRE4","tlshash":"61f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","size":168414,"data":"","first_seen":"2025-05-02T11:19:56.694073Z","last_seen":"2026-04-03T17:34:03.917198Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/main-app-cf15b8ccefafb5d7.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c827ebe26154f4ef2b9b7c2d219a4050","sha1":"ac50ee2e21b3de8e34cb16b8e9b5dd0d7d69665e","sha256":"f8526de6dbdaeb9b283c4765ead7c9fe2139897958665136e5ccb53cf755ed8b","sha512":"52188495abe68207d20e553a67ddde153c1954bbc0cb5a24373d174a490f2c3b47f680bada9a7a2e3a9ed1b207d6d9475af8eef99ca20e4fe3c3d40e25611952","ssdeep":"","tlshash":"faf0f49a5f0cf42f1c266d74fd97ace22c1f4175302b4e607901dda12c67bacd664518","size":521,"data":"","first_seen":"2025-10-24T00:39:28.68835Z","last_seen":"2026-04-03T12:08:05.904867Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/9303-042415d7fe3fdc66.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6509dbce0556b89b1ece696f9f7b963a","sha1":"a63a4c34077320b97f06ca6a686f79d596a10cf5","sha256":"227547e916158d8174ac257799e642fc4a26935d0b31acda5719b2d3bd0ef002","sha512":"3d16b5794692801ebb8dff7c1d8248873a74f0174d492b2e747960cf2aebddf6f1a6d1d8c95c8f803ffd065ec728dee065a3f5e6998ca88b327ef2cc2f0928d2","ssdeep":"1536:kZkRavHHx1XNnEAj2hTn4dJF/OX36+7+25UlXnxraZeXELiZXEoFUNn6g/e0cZ3N:2kIHCRn4dJ1OHzerLUNn/e3Zd","tlshash":"8b04b8b676d0f8d107a780d5843b400af3295c3b146f74a0a3e6cce975645dea1b3faa","size":175462,"data":"","first_seen":"2026-03-22T00:15:42.204518Z","last_seen":"2026-04-03T12:08:05.918572Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4f58df8ef556437633bb90cc31469c4","sha1":"c1c713bb5046a54cb79a8e7537b6d7fca624fd45","sha256":"2dcb2e50c883929aebb7a64a7a22cfe2260d856a3c36a6926c082da19c552b7b","sha512":"54c8a79f5897cd198db689700c24f950ad7fe19eed815f8bfa0e47428701d8c84a1fd8f677a6f1b2a4f1443f35f2dbd19e6f456ceeebfb1c59275bb356e1a5e9","ssdeep":"","tlshash":"bfc02b041427c47b421c6f4dc02243d4e4b020bcdc492480801d181800d0c313b40cd6","size":130,"data":"","first_seen":"2025-03-25T18:26:20.414558Z","last_seen":"2026-04-03T16:34:09.628954Z","times_seen":21078,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-04-03T17:29:04.171279Z","times_seen":78999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4493-345c064d69dc5b01.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"def83e7b4e518b54a038060c69718556","sha1":"473165f51c2b586a44ec271d2673a66478a9383f","sha256":"320004ff6ed7f86649043cb94dabf5e99e66d630bfe5800e5463f139bcc018d5","sha512":"f76cdb3543df1f30697b2ae9199823df2a42439d9da623af0a6542e933c36e47733c44d68a8f51bdd060fced0586a05a66e2d9ae63ea5540f9f6573dd57632fe","ssdeep":"192:oEbfLkEv9x8AiLMS5O7vZm2cyYO/C0dwMcGWx:oOxVQMz/jKmwMcGWx","tlshash":"e702a8ea71e1f8a2835b1050443b100bf37e1db5541e6098e7e99ce6f9b046ca1b3f6a","size":8484,"data":"","first_seen":"2025-10-24T00:39:28.71526Z","last_seen":"2026-04-03T12:08:05.919372Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4599-5328b8dfa11ee91a.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a36c3abb77a28a87773287d08cf93ed","sha1":"851643f23ef3703a79d4bd8e43f367d244543601","sha256":"41aebe9bee7937740ccfaea790c8f997d0f3a3a3ed05cbc9628ad2eeb5ae76c1","sha512":"42e6ee17a1613154ef629d66e7c13e3cb5dee9ab579762b47fce9faa0790ecf3f795f9d9f500af67c948f0d3641b797ff06a509b691bd9908bedde8c5e3a0802","ssdeep":"384:6gBiAIAc8E/vztiPRdWfjin24/+1kWd8Voi7Xar67hcNL55EH:qkE/LtkzjnfLWEo8Xar6U5eH","tlshash":"a7c20ab63695f899134780e4d43f400bf73a1834261d9068b3ed9cfd69a8986a173f7b","size":26852,"data":"","first_seen":"2025-11-21T01:38:58.229668Z","last_seen":"2026-04-03T12:08:05.921334Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/app/page-314ab887e7a19561.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fddd64d9f8c9c7f16e76e3d1d1683088","sha1":"b20880200a77d06817d44e82e73c6bca63373253","sha256":"f4f86b6e17c88151c5d3d6585ac9b184c71fb39123713ae554fe569a2c577c74","sha512":"d0c9655ccfdd9d8e6fb73cd7c305ebe193c4b4f59d65ed315e3568e732f7df6bcfcf20ec9c264c52a0082b5f1c2f7fc2c4d2e970f8be4a3dc714bab0d498a6b4","ssdeep":"768:iYKjP6TJYurnbD9V91k1PTjiHA7HA5Zll9VL1K1PTNaGym868A49g5KSpX:iYKjP6TNrnb0KICZlORaOijSpX","tlshash":"5bc2435ae7e19aee7436079c494d910e32ee678fce5acd686474bad2c84d1c53a023c3","size":27151,"data":"","first_seen":"2026-03-22T00:15:42.188642Z","last_seen":"2026-04-03T12:08:05.920571Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6a19dc86554c0da71162ea24c23e0927","sha1":"76fc5d0f3e3c95d46f35e480da47201a6c03019c","sha256":"edb6178d6d27b19f68e42c50b5a159bde19ce6a7a4cfd97b274b319f690bc532","sha512":"a7bea2e7a2dec548f7462d3092595359ed334cecea29bd8f8f09a6e40409c614748e937db8e694dc5fec789a93bf43c6cc38b0fe10b9becb8eaf867e80b80cd1","ssdeep":"","tlshash":"4141de6eb505d88bec7eae2e423e4c3a00dcdd7f43a099e8815ece2d06158781799d41","size":2381,"data":"","first_seen":"2026-03-26T08:43:14.923117Z","last_seen":"2026-04-03T12:08:05.924081Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3da4ef4021381de0aad1a930ab32005","sha1":"028a8a9a14e84b529018ad002d37fc6fe3aed903","sha256":"d1004a3885cb4abbd39f102365ad4881a9e624a76ffab173c84a3b824d80ceed","sha512":"c6d9f7fea68d79aeb1422eb2d64818849ad04bbfc69f92294b740021bb67568e435d69366a1e35d7200dae49e4274c2478dc7b7f95351f19ca32ef3a91596b75","ssdeep":"","tlshash":"57f0af299402dc4bfd7d3da8187ead77108c406b4140def892c5de140b8383962919c2","size":590,"data":"","first_seen":"2026-03-26T08:43:14.924647Z","last_seen":"2026-04-03T12:08:05.926675Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0a64252df2f3cb404f08922dc6242bb9","sha1":"509e8e173d3a4643610d8e1333e526bb1dc57c8a","sha256":"d2a9c5a4741360ca92ce9ea0088cfcaa361d16d25df925ba4670e00c492fa731","sha512":"3bfe886c18989456f3b6ba3d1f2dfddbec6742ac4d8fd88fedf9023928881890ec2633e4fefd02d2762fa8995157fec27d052261723237276d91dc97786be9e0","ssdeep":"","tlshash":"5dd05b39a108dda6ac297546193dbe3b109d509f0054ad6516c4cd14498663b7702dd1","size":251,"data":"","first_seen":"2025-07-03T08:35:01.955086Z","last_seen":"2026-04-03T12:08:05.928791Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"771212f98189b29d6862b2b96265f83f","sha1":"d772da81b499b7decbb7be9bac0cf7fe09f86b85","sha256":"dd02e81b54126f34537d020c8bbfb0a3c0ff6f9819887ca6861e5fa0a8c7bc24","sha512":"123e3e5f0f364c939b5bcb4ea5ce14aee6f313f68c30dcc9885e9206d91250e3c8f8fae53ad9f745f09f9d49e9b17ee6d6411c9a9e79b8ce1e9458f4f8e3543e","ssdeep":"","tlshash":"4b800470c4400c15c031407714341107017d414d001007005350575450311455505ddd","size":34,"data":"","first_seen":"2023-09-21T12:11:27Z","last_seen":"2026-04-03T16:14:28.463273Z","times_seen":1441,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/webpack-e51daf8838ae20e8.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fea003fe241d94b30368ed914bc5fb9b","sha1":"67557ee2fcee6de5a106f434796ff26ca4ddc8a0","sha256":"759336762d943ca654007186801a881a46e5e743dbbc5e9e2df7abac125e5e30","sha512":"1537dadfb59156677281647463c639f08a5d192cc52bd3e43ac741121bcc077dc68ffa4d32de6796c440badeeca31081c31e9960d2eb8862331ba7037eaf14f6","ssdeep":"","tlshash":"bb81b6b93624e6b456f104c5983fd142fa19313a151afca0e70bdcb9a468ee14562ff3","size":3873,"data":"","first_seen":"2026-03-26T08:43:14.919389Z","last_seen":"2026-04-03T12:08:05.909161Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/3568-9615f39838ef8f44.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a19e746455ee4787e71d2271000ad3","sha1":"f09cadf29c087e08f351fdcb7ed6212b5230f46e","sha256":"600221d75d4eaada3d62313c14ca45dfa4a0c023e1e3e3f19c78fbeff70b5b5e","sha512":"57a75661902837e3a8c7886a366077d0e6ebbee418e02f11b1cf4e796d0f2418a16b3972ee1088fd00a37decfd5212ea11408709b657597cd2e34a68a2edbf5a","ssdeep":"384:RnvRUJ22u+Z1MM89OuWSSXcu44JenLwClG5BIqgH+:RnWFnMM8guWSccu4gpgH+","tlshash":"bd42b6c8764371144b9bcf9692ff0715f27c1a98282e4829f3a5285f3254a4867f3f39","size":13067,"data":"","first_seen":"2025-06-19T03:12:38.852497Z","last_seen":"2026-04-03T12:08:05.911115Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"adc9cf6e6605cca6cd3e0d29a6ed5bba","sha1":"b5a386ff9ddf6f817599b8c8eba42c03fc8c0cb6","sha256":"4f3ce1e1936cfd5ced808c4359e8f95747002f72681977a4939939676a170752","sha512":"d19191b3a6285fcd434e5af2957b4a54e45e0e91981f2b3f11d669c2195fe4abe4babb8b812a9372c8139f83ab97100baf51f0f55c78ead8dc77d413c9b0d3e4","ssdeep":"","tlshash":"f4c02290ec02cc1cc36a0f22183a0c2921ccc164070541869895c9280981a3005b4d89","size":186,"data":"","first_seen":"2025-04-16T12:15:04.516734Z","last_seen":"2026-04-03T12:08:05.930396Z","times_seen":310,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46ed9530641ee15ba0573b7c58d17ad6","sha1":"e81b9ed236cf22cf8e44673509a5228758478bea","sha256":"5edcf50eb48c8487544c88f00f476737a686dd8c9325fc6c3a7a975051bdbb02","sha512":"8b4a78ed61b43d18a9ac541afe2c1b660d65cb98f44bc2c0bca0e41fad8c2391cdba18fe247a26e3e8c5864cb53c6c9afd36c0c80246a18cc1d91de3bfd21104","ssdeep":"","tlshash":"d8e0f1015c01dc03c93abcf11cbcbc7420ccc62b8280096256c5ce3d1a562b9afe1ea3","size":424,"data":"","first_seen":"2026-03-22T00:15:42.217137Z","last_seen":"2026-04-03T12:08:05.931597Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/app/not-found-831d98065e671f61.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a20e3268620673ee4f8feaaff423b92","sha1":"fe8e1614ea16d660377b6b91ca8ddf0dfa880bcf","sha256":"c85f85fe0e1a6b942dd2b883a796d6d090c7ef2a731a6bcafe0c152a9b2ca525","sha512":"453e571b718243b72dff70b2cffe2ad899f0513f8eb2d8557aa4234a3daf041907a77dbbd89f20bb78fa18b2b5322841ccf88a3fece8782e98ab594f25448723","ssdeep":"96:0VkotA4uJOiLNLWLmbNO0EVBp13q1EYT5+QBkPASQDlA6:0rhDNCUFbp1a1PToASQJA6","tlshash":"24a1848cd7d0befcb42a4addaaaa540c316f366cd65bcc74a9bcf515240a4d837067c1","size":4637,"data":"","first_seen":"2025-10-24T00:39:28.683764Z","last_seen":"2026-04-03T12:08:05.906319Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/app/layout-48a65b749af9c9f6.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5d96899273d808be964d39f01170e3f","sha1":"bb3b34a0fa8155c25e568870d49aff1c2d5bdc01","sha256":"c2a95afcb1754b781a1a0977b45fe23e0a86b4a5d9e9b67da069e63807e37642","sha512":"92a10ff4355a537dff384b72518370a8effb74713d280b1a389eef75abe444d9f74e6a9d7deba63bdb363c194fe4deebe1690327c27505307a3bd01d2b9254e0","ssdeep":"","tlshash":"77f0549b170c709f6c224e21fe5d5cf2344b013a647f4c607711dd612c93b69d361740","size":475,"data":"","first_seen":"2025-10-24T00:39:28.705895Z","last_seen":"2026-04-03T12:08:05.895136Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4234-66341e53a1faa740.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0a35e3d4b08f1c032bee06cdc15eb85","sha1":"eec8007182d86d5d462f2e5217746d60cb8cabc6","sha256":"47123279d0289b0c34f0a8792739c02aeaa25350fa486907b7ed93c89a45c156","sha512":"850df7222f2b2cef3e0f8a4ba780189a4d59f562ace7992e1e30ff1f8b0a5addac5762eba73db6d38611d5888819a81a264a8bc5aa5653acd5176a9a7c7d6265","ssdeep":"768:1O9W7WA6svdHAhyC5FAlaQd0yqEWAsuLWAeAUAc1Q9e01/1PTks9kAkV8Yg9o9Ou:1dqhyC5Skwk8/4txwvcnntd","tlshash":"f043b759d9410efcf03b46946bdef61c346f6beede2a8974b1f46c2629025c43643b82","size":59039,"data":"","first_seen":"2026-03-26T08:43:14.91192Z","last_seen":"2026-04-03T12:08:05.91377Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"busines.ads-program-agency.com/2023_Facebook_icon.svg","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /2023_Facebook_icon.svg HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 20883\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"2023_Facebook_icon.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Apr 2026 12:07:43 GMT\r\netag: W/\"2db6e2b3c840f3bab7b4d64d1e46cfb3\"\r\nlast-modified: Fri, 03 Apr 2026 06:19:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /2023_Facebook_icon.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ql842-1775218062806-d7c094b3c795\r\npriority: u=6,i=?0\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hobhRfIHHm6TKEG8fZHENKYyngP%2Fm9%2BaduwAbJ00x3YKdKuoDsr42OzkPS49F4xIUn0JkGoBa%2B9%2Ff5aY3HZ%2FdJF2IcVoANSrLUORVnezXVklvph%2BuBtQFCOvazLLeFXsHtuzuY4leuZv6UsC6WrPezo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f45dae140daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2db6e2b3c840f3bab7b4d64d1e46cfb3","sha1":"9ae0a9ea1ea00e4a9188ee8931431de510cae03b","sha256":"ba34bb0a9e43fdad665ea2b84d0363046177147e763ec3765641501779356876","sha512":"d0fbdbc2c72ab543b610191cfad85344401df4c90d8d032dfaecfb113aa803ef6fcd780a171d5a5e3b2498b362831f600b4c04f41f78ba33eb76378337789a46","ssdeep":"","tlshash":"c1415544d3bd0265c58e836a7bf511481b2db0e326540c49bfbc09a13fc9b85a54a3cf","first_seen":"2024-08-19T16:00:28.223306Z","last_seen":"2026-04-03T12:08:05.884085Z","times_seen":114,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/app/layout-48a65b749af9c9f6.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-48a65b749af9c9f6.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 20883\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"layout-48a65b749af9c9f6.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Apr 2026 06:19:38 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/layout-48a65b749af9c9f6.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gv8p5-1775218062334-fd1e05f8911f\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"b5d96899273d808be964d39f01170e3f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o5kskLkhF59teGxsRt8RIPh%2BF6ZDg3oGZ5LOvuUMRZl%2B7CeWuS5wFKBuzwK9ewjzcBQb81Df5TNCQLpBmP%2FuXIfiE6%2Fb635gOPE2HfRymSHH1BQy46g64Wj%2FPoEsDTJJKb9H0MDbY1WVWEA%2FvTFxw%2BY%3D\"}]}\r\ncf-ray: 9e67f4593d890daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":475,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (475), with no line terminators","md5":"b5d96899273d808be964d39f01170e3f","sha1":"bb3b34a0fa8155c25e568870d49aff1c2d5bdc01","sha256":"c2a95afcb1754b781a1a0977b45fe23e0a86b4a5d9e9b67da069e63807e37642","sha512":"92a10ff4355a537dff384b72518370a8effb74713d280b1a389eef75abe444d9f74e6a9d7deba63bdb363c194fe4deebe1690327c27505307a3bd01d2b9254e0","ssdeep":"","tlshash":"77f0549b170c709f6c224e21fe5d5cf2344b013a647f4c607711dd612c93b69d361740","first_seen":"2025-10-24T00:39:28.705895Z","last_seen":"2026-04-03T12:08:05.895136Z","times_seen":17,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/css/a1e2024f82f7cac6.css","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/css/a1e2024f82f7cac6.css HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"a1e2024f82f7cac6.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"293a941c882eab0c90d43f62c0ffb8ed\"\r\nlast-modified: Fri, 03 Apr 2026 12:07:42 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/css/a1e2024f82f7cac6.css\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gsxm6-1775218062340-bc68c1c1af96\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ab8a1iot7whrh3NtJPOaNWN3adlOm%2B%2FnLr5MAdETAQ3l1RjPyB3W0Am%2F8k6T4iYEMsSoOVoY%2BWEwdGr%2Fno%2F30hCXyo74IkyIlSPtSmoQ2JXo9pnjjLdD17tXKOG9sbciJgaHD6iewRQShzBEoVhNmu4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4592d800daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":81003,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63471)","md5":"293a941c882eab0c90d43f62c0ffb8ed","sha1":"b330c10bde4c96047d453119fd7c4c338c80a1ea","sha256":"3c217690555d8e8c2f9f01ab26bf5c63096b86840483ffa1fe7aa1ffde7a7741","sha512":"4886bd98f218650f5b65222dce55d8b5bbadc9c40ac09dd359d799af393d945be822ee1adea60592f62330f42449cfb4728e88dcf74fbceb0f00c8c8c105f03d","ssdeep":"1536:xhresSbl+OMT53rnh6R9nwMx+aDr8FMdyJKw:rresSbl+OMT53rnh6R9wu+aDr8FMdyJz","tlshash":"8e832ff4a2f1d97bfc17b1e9939cf41da514f196dd3602c9fe01a10963e6bf208a5a10","first_seen":"2026-03-22T00:15:42.20163Z","last_seen":"2026-04-03T12:08:05.896454Z","times_seen":11,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/banner-v3.png","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /banner-v3.png HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20884\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"banner-v3.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: \"8e313fca8a58b4c21a9b764da5b07dd2\"\r\nlast-modified: Fri, 03 Apr 2026 06:19:38 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /banner-v3.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wtfzm-1775218062318-0c571a066bf4\r\ncontent-length: 87056\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nyP5tG%2B5DSjLuppKXE3yG%2FjV4Az4yWF5YKXQ3coXiXRqk1Z1m3We8XhpiVdM1L6stFgHVDx3oe%2FDCCFqL1L2wLOxdZ51xAoHZ8ujBYfo%2BNNY0p9ookkF8CX56IhsVYz89C2%2FFGTGupG3vywxp4RXBCs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e67f4592d7d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 640 x 280, 8-bit/color RGBA, non-interlaced","md5":"8e313fca8a58b4c21a9b764da5b07dd2","sha1":"394fa7507f97cb04abd97051f220fc96da6d722b","sha256":"c4d565f0933de43d900fd95189a097cece367607a1e71bd9e01fcfe4c6f7cba9","sha512":"e43e701de575092a010edd69e9bbc986ce5e2b40903c05d079950ac8ed7c5c4a3a8048c040322ab23fbf697b7da33a9edc880a846a11fdaf2f74b6925f6448a2","ssdeep":"1536:MhJbpR1YM7Zp4SOBkZaVkuv3hILba1R/2uqeyJ647HCujwjYhUxdqaZA3Yp:sBbv7Z0BMuv3Ma103eyf9jw80oT3Yp","tlshash":"928302c8fbb28e26385d766d9d0fab151ce283be25625a1d09cc8a1c5bdff025796034","first_seen":"2025-09-19T11:22:39.686449Z","last_seen":"2026-04-03T12:08:05.89923Z","times_seen":24,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/icon-women.png","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /icon-women.png HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 363073\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"icon-women.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: \"5c16d06d4b48457e8b6e838b4ed29696\"\r\nlast-modified: Mon, 30 Mar 2026 07:16:28 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /icon-women.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hgvqr-1775218062373-48204a9f89b2\r\ncontent-length: 16099\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XXxI9Onqv%2BWemPQuho4Dr7D5GWx15VUFqUM7kDDX6D1zzVXWAqDHUehf4JaMORykBFkuKSFMIhB6v0jjQ%2FJjXxQhDEq%2FaHfuIOrXVMwPEAk0uD3V5a46mgo29CHeE345rIs5YHcsLCKov2YH4bNC9U0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e67f4592d7e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16099,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit/color RGBA, non-interlaced","md5":"5c16d06d4b48457e8b6e838b4ed29696","sha1":"b8d400caf154787827f80edd7be2598718aa1d27","sha256":"008beba70db4cc9ef1d7dc34635cef19620822da0722fd4670d36a1dfee543da","sha512":"a99cc696d4733d030d8f3184b31dd4367b3c1b46b6352ad479f0f28973fe4f36b99951dc570bc4cb75ca64e9ef25973c8639b4ca3e3ac720a80ef44426fb23b0","ssdeep":"384:xMOLcQo2hkjx7FYNBsy2TQ01kKVaWHzg9IXBioeIm6C2t:eIFhUxhMj0ESc+x8n6jt","tlshash":"6a72d0b784c4c8eb9a5dbf0b8cb9151c5331496e334618ab1d7a7731d7f9ab83c62086","first_seen":"2024-06-29T10:46:39Z","last_seen":"2026-04-03T12:08:05.90197Z","times_seen":1742,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/icon-docs.png","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /icon-docs.png HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20884\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"icon-docs.png\"\r\ncontent-type: image/png\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: \"d553b17fa779d5bf82a1ee3d89c0a840\"\r\nlast-modified: Fri, 03 Apr 2026 06:19:38 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /icon-docs.png\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::k4zsx-1775218062355-262bc8a7c8a0\r\ncontent-length: 6318\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GSSujnUobxYnWHMQbalccF122bW2k3ZiZYyq3VN%2F1XVykQ1m%2Bprkvi%2BRxqc3YEZ0SEV11dAr881%2F0AjbUvLJRmuPqVfLUPI19Gfd%2FucSV0rw50fHwleKwnObml0Dt7HbheLmEK0lnULt4ZGp7%2BRUzkY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e67f4592d7f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"d553b17fa779d5bf82a1ee3d89c0a840","sha1":"3ba5bfc7904f4659550ca29c2edecaa7afcbe8fa","sha256":"7969126db3b2ce7e191e2d35fffc92a74421911e51a0c9d57916984882bf1e2f","sha512":"c91d95c4f3a5194b257cb186fbf46d040496960211c89cf2cf8059550a4c96968cb2f6b8d68e9d010654d07128e9591cb3dac47ae8ae71ea05d2beebb3f0aad3","ssdeep":"96:6SJopVWGp/d/q0f6YwP3ibVeW79FUlHXKF3yQI0EEfC3JoYSXYRmx5H:6SKpc0Bq0f4PSpVtLI09fWoYSYcx5H","tlshash":"cdd1aecd23f89d51e3a4b405c83614b41eeb3ca805b285848871d22fbbc1dbbde13b0a","first_seen":"2024-07-21T22:23:16Z","last_seen":"2026-04-03T12:08:05.903107Z","times_seen":1570,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4bd1b696-fd2c81fbe58d203b.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-fd2c81fbe58d203b.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 800240\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"4bd1b696-fd2c81fbe58d203b.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"dbd47ecbf6b9f8e404216d5186b53aad\"\r\nlast-modified: Wed, 25 Mar 2026 05:50:21 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/4bd1b696-fd2c81fbe58d203b.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::pxzmv-1775218062375-c7631b9a89bd\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MyrNOHLSvsXDtUWd9UczQP4UxdPn1snECZHQJQhQzPeoM5O%2Fyk7Kck1CTn4XmP1ze9kCu8coLq7oeimzy5NXOh4JuGLJCrBHHqU1HiE%2BlBCYaNTh5tKS6Qfca80m%2B%2BnLFSkUqTSlcNb9LE8EKg0oX1E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4592d820daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":168414,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"dbd47ecbf6b9f8e404216d5186b53aad","sha1":"a8d8327692bba31c02aeeb2d3de65dc0130979a0","sha256":"da446533ae10a92abc594d4daa52e0ec33ef6b9b6f576d1433c6a48ea8273bba","sha512":"2e676d9df2a12ef0340b2ce221611e4d4acafc2a9086984815e1638805d17dec365fdc8cf63edbdf1b7ed46cdc519d17ce4b4ec0af7c05f6e755340a0e78ef71","ssdeep":"3072:NtfjLiM+NFCC4YQbCCAaI/02UHCgwLRE4:Ntfj2ld4Y40fUHQRE4","tlshash":"61f3f7e83d99e2116eb342a7109f2803737c262b240d4c60a615fd9db5b845bb17bfde","first_seen":"2025-05-02T11:19:56.694073Z","last_seen":"2026-04-03T17:34:03.917198Z","times_seen":410,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/main-app-cf15b8ccefafb5d7.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/main-app-cf15b8ccefafb5d7.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 910537\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"main-app-cf15b8ccefafb5d7.js\"\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Mon, 23 Mar 2026 23:12:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/main-app-cf15b8ccefafb5d7.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::c9fb6-1775218062311-bbce084cbd1b\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"c827ebe26154f4ef2b9b7c2d219a4050\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lhxt%2BHViHxz4trvvtE0QVDDoiCGA3WAcOyGwBL%2BGAvlqOA34BSO3wMFZmahMk%2B40safzhmDDWVYX%2FSTfAZQ%2FdZ7LYAVEw9aumaQNwXNd9X6O3dLFSnmtj5KaUFCztFsKu9p4gmeA0gBJHrIBev%2B%2F3rs%3D\"}]}\r\ncf-ray: 9e67f4592d850daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":521,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (521), with no line terminators","md5":"c827ebe26154f4ef2b9b7c2d219a4050","sha1":"ac50ee2e21b3de8e34cb16b8e9b5dd0d7d69665e","sha256":"f8526de6dbdaeb9b283c4765ead7c9fe2139897958665136e5ccb53cf755ed8b","sha512":"52188495abe68207d20e553a67ddde153c1954bbc0cb5a24373d174a490f2c3b47f680bada9a7a2e3a9ed1b207d6d9475af8eef99ca20e4fe3c3d40e25611952","ssdeep":"","tlshash":"faf0f49a5f0cf42f1c266d74fd97ace22c1f4175302b4e607901dda12c67bacd664518","first_seen":"2025-10-24T00:39:28.68835Z","last_seen":"2026-04-03T12:08:05.904867Z","times_seen":17,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/app/not-found-831d98065e671f61.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/app/not-found-831d98065e671f61.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 20883\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"not-found-831d98065e671f61.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"7a20e3268620673ee4f8feaaff423b92\"\r\nlast-modified: Fri, 03 Apr 2026 06:19:38 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/not-found-831d98065e671f61.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gkmhf-1775218062325-7bd866333648\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FLIcKfaivM5Ap5qxDvqNxnOSrHMnuhkaH9WDdR85B3daxILsm2Wh4W3PEhcDJdlEf%2BUWXjuChSLkcohxpMkBmKF4aQubyPgSsgr9TEkXtjw9SX0rYxW0RxehlrAYUjua6NvgWR0W2UTOx5jVJV01bPo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4592d870daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4637,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4637), with no line terminators","md5":"7a20e3268620673ee4f8feaaff423b92","sha1":"fe8e1614ea16d660377b6b91ca8ddf0dfa880bcf","sha256":"c85f85fe0e1a6b942dd2b883a796d6d090c7ef2a731a6bcafe0c152a9b2ca525","sha512":"453e571b718243b72dff70b2cffe2ad899f0513f8eb2d8557aa4234a3daf041907a77dbbd89f20bb78fa18b2b5322841ccf88a3fece8782e98ab594f25448723","ssdeep":"96:0VkotA4uJOiLNLWLmbNO0EVBp13q1EYT5+QBkPASQDlA6:0rhDNCUFbp1a1PToASQJA6","tlshash":"24a1848cd7d0befcb42a4addaaaa540c316f366cd65bcc74a9bcf515240a4d837067c1","first_seen":"2025-10-24T00:39:28.683764Z","last_seen":"2026-04-03T12:08:05.906319Z","times_seen":17,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/webpack-e51daf8838ae20e8.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/webpack-e51daf8838ae20e8.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 910537\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"webpack-e51daf8838ae20e8.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"fea003fe241d94b30368ed914bc5fb9b\"\r\nlast-modified: Mon, 23 Mar 2026 23:12:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/webpack-e51daf8838ae20e8.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::kxh7h-1775218062356-585cd299b9da\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqAtRUhJY4MqiXJtTvI8mk3a%2B4wofI2PwMxcN35QrIzqZDVAx41WHv5DIsVzSBdkPrKj9kPIXYSzlr2LndG5hkn9Rc6kVqbgf1C2Dv5EpXo%2BG7kZhxTBZ10Nm3Tn%2FKfBejhPaRAJX2sdoKpC%2Fq7bOGU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4592d810daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3434)","md5":"fea003fe241d94b30368ed914bc5fb9b","sha1":"67557ee2fcee6de5a106f434796ff26ca4ddc8a0","sha256":"759336762d943ca654007186801a881a46e5e743dbbc5e9e2df7abac125e5e30","sha512":"1537dadfb59156677281647463c639f08a5d192cc52bd3e43ac741121bcc077dc68ffa4d32de6796c440badeeca31081c31e9960d2eb8862331ba7037eaf14f6","ssdeep":"","tlshash":"bb81b6b93624e6b456f104c5983fd142fa19313a151afca0e70bdcb9a468ee14562ff3","first_seen":"2026-03-26T08:43:14.919389Z","last_seen":"2026-04-03T12:08:05.909161Z","times_seen":5,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/3568-9615f39838ef8f44.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/3568-9615f39838ef8f44.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"3568-9615f39838ef8f44.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"05a19e746455ee4787e71d2271000ad3\"\r\nlast-modified: Fri, 03 Apr 2026 12:07:42 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/3568-9615f39838ef8f44.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wn6qs-1775218062373-594e2571fc7b\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gYfeOjS%2FwF4oqOMrJvI7TbwtSVwfAZzS1kE%2BvClnVYwXb94k%2B1AXb7ePfhgTFJ%2Bix%2F30i%2B%2BJn%2FAqouU4kv6%2B4%2F%2BOoQ%2FvpwFt49ngDIfnlhVdhplyi2AbXCrjoQuVBfefPRFbGzEGUWETlfKSPdr9SJ4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4593d880daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":13067,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13067), with no line terminators","md5":"05a19e746455ee4787e71d2271000ad3","sha1":"f09cadf29c087e08f351fdcb7ed6212b5230f46e","sha256":"600221d75d4eaada3d62313c14ca45dfa4a0c023e1e3e3f19c78fbeff70b5b5e","sha512":"57a75661902837e3a8c7886a366077d0e6ebbee418e02f11b1cf4e796d0f2418a16b3972ee1088fd00a37decfd5212ea11408709b657597cd2e34a68a2edbf5a","ssdeep":"384:RnvRUJ22u+Z1MM89OuWSSXcu44JenLwClG5BIqgH+:RnWFnMM8guWSccu4gpgH+","tlshash":"bd42b6c8764371144b9bcf9692ff0715f27c1a98282e4829f3a5285f3254a4867f3f39","first_seen":"2025-06-19T03:12:38.852497Z","last_seen":"2026-04-03T12:08:05.911115Z","times_seen":18,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4234-66341e53a1faa740.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/4234-66341e53a1faa740.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 938429\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"4234-66341e53a1faa740.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"d0a35e3d4b08f1c032bee06cdc15eb85\"\r\nlast-modified: Mon, 23 Mar 2026 15:27:12 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/4234-66341e53a1faa740.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::zm5pd-1775218062358-59db2e0e09e7\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lO9Post%2BbbgVg%2BirmjWX%2FgPHI5Qae4pOENppT%2BnCj7j3%2BH9zcxmZIKncv%2BjAYCnIwGtLAXAbvwcBm2clURIOoEamxvdx0LQYcbSsssqAZYcKe0BOl1VT6lqvhry5jVSAuu8pO5vbv7u9%2BRfQF5%2FQL4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4593d8b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59039,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59024), with no line terminators","md5":"d0a35e3d4b08f1c032bee06cdc15eb85","sha1":"eec8007182d86d5d462f2e5217746d60cb8cabc6","sha256":"47123279d0289b0c34f0a8792739c02aeaa25350fa486907b7ed93c89a45c156","sha512":"850df7222f2b2cef3e0f8a4ba780189a4d59f562ace7992e1e30ff1f8b0a5addac5762eba73db6d38611d5888819a81a264a8bc5aa5653acd5176a9a7c7d6265","ssdeep":"768:1O9W7WA6svdHAhyC5FAlaQd0yqEWAsuLWAeAUAc1Q9e01/1PTks9kAkV8Yg9o9Ou:1dqhyC5Skwk8/4txwvcnntd","tlshash":"f043b759d9410efcf03b46946bdef61c346f6beede2a8974b1f46c2629025c43643b82","first_seen":"2026-03-26T08:43:14.91192Z","last_seen":"2026-04-03T12:08:05.91377Z","times_seen":6,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-03T12:07:41.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\nage: 286282\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FREnbRhbx9vG1G5wqVKcjPpeZKg80nCuo4WUV4q%2B1ayGQ7f7MCcymA3TNxZG%2FUYwZ9H6nEWHy5GT%2Fl9FFNwgKMH%2Bbnx9fJBL0T353weE0ciAaqG8S9hgWpNhVPQHh7rgBUwr7HXi2bQSdiFBY1A0uy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch, accept-encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4dhz-1775218061758-b54d0f8568a8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e67f455896d56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27527,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (27527), with no line terminators","md5":"d157f3cfbdd682fa697be828bbff7e58","sha1":"495698a97eea65d5038f536245126afd37dbe83f","sha256":"e8a5cec5951f18324ae68c9ff4937ecf422dbb17b7469adb57dd37fc350caf7d","sha512":"e923e5b86f9f351ea2ed807dca1898867e268ff580aea10418188eddb9dc8fe9d2543a4b9354c3d99c0fba491cd44c084e18e6006d8f5e450fe89b589b687a8d","ssdeep":"768:IS0POzdZf+3NT43lTnmu9vUSvDvsIv7DWWZHZ:t/Zf+dU1yu+4bsGdHZ","tlshash":"23c2833a8394d9bfa033479cd6306f3f21ed839fcd55c51c84b997d4c28aea6a9124d2","first_seen":"2026-03-26T08:43:14.907663Z","last_seen":"2026-04-03T12:08:05.915506Z","times_seen":5,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":27,"dns":0,"connect":1,"send":0,"wait":364,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/2023_Facebook_icon.svg","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /2023_Facebook_icon.svg HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 20883\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"2023_Facebook_icon.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"2db6e2b3c840f3bab7b4d64d1e46cfb3\"\r\nlast-modified: Fri, 03 Apr 2026 06:19:39 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /2023_Facebook_icon.svg\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::ql842-1775218062806-d7c094b3c795\r\npriority: u=6,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=coyKo%2BBwYXLZzXET79aIa%2BwuFeIT2JtyTiVRP9mrjg1pmP8h1u4evDc%2F0JqArKLxPX7a823SWx%2F9fOG%2FPRRj4jGTjgXB0feGAPaeXJK%2BkKyvvbPN9qA5nJxlXqQn2wbSkwdfkArJhI5zer7xMJIXOIk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f45c4dde0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2db6e2b3c840f3bab7b4d64d1e46cfb3","sha1":"9ae0a9ea1ea00e4a9188ee8931431de510cae03b","sha256":"ba34bb0a9e43fdad665ea2b84d0363046177147e763ec3765641501779356876","sha512":"d0fbdbc2c72ab543b610191cfad85344401df4c90d8d032dfaecfb113aa803ef6fcd780a171d5a5e3b2498b362831f600b4c04f41f78ba33eb76378337789a46","ssdeep":"","tlshash":"c1415544d3bd0265c58e836a7bf511481b2db0e326540c49bfbc09a13fc9b85a54a3cf","first_seen":"2024-08-19T16:00:28.223306Z","last_seen":"2026-04-03T12:08:05.884085Z","times_seen":114,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/media/e4af272ccee01ff0-s.p.woff2","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/media/e4af272ccee01ff0-s.p.woff2 HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 910538\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"e4af272ccee01ff0-s.p.woff2\"\r\ncontent-type: font/woff2\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: \"65850a373e258f1c897a2b3d75eb74de\"\r\nlast-modified: Mon, 23 Mar 2026 23:12:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/media/e4af272ccee01ff0-s.p.woff2\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::d4dhz-1775218062309-9ca87f2fc374\r\ncontent-length: 48432\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=90rrIpDSTVJcYOwP%2BzdNXGq8LaC04qo7Fz3ALA3NOPSUJGJAwreNtjGzXS4SpFRsPB8Fq%2FZGqx9n7zNtiT1FdKQ7MPxvAe6Ut6yjue0dA%2FX99LVfVbyHFu%2FcGHi5I%2BszqBng14ofKCUBShT3KCcnqKA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9e67f4592d7c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":48432,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-04-03T17:26:22.142147Z","times_seen":34053,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/9303-042415d7fe3fdc66.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/9303-042415d7fe3fdc66.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 910537\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"9303-042415d7fe3fdc66.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"6509dbce0556b89b1ece696f9f7b963a\"\r\nlast-modified: Mon, 23 Mar 2026 23:12:04 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/9303-042415d7fe3fdc66.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::hgpsc-1775218062355-d32f1e0a6f43\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgNrm25j9ItIXlPem3ZnRSvAxCnI%2FiiCNVex9cImrBbX%2FkdgfjshTOj%2Fl40WaVypHAASfyRTh8mvrMVCMm4LCdotAp0%2BQyJ9jIYIDJEECH0uQwRbdys8HPHLpe1U9UdrtSRlsAR2JTdlDTcMSd3HQgA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4592d840daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":175462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6509dbce0556b89b1ece696f9f7b963a","sha1":"a63a4c34077320b97f06ca6a686f79d596a10cf5","sha256":"227547e916158d8174ac257799e642fc4a26935d0b31acda5719b2d3bd0ef002","sha512":"3d16b5794692801ebb8dff7c1d8248873a74f0174d492b2e747960cf2aebddf6f1a6d1d8c95c8f803ffd065ec728dee065a3f5e6998ca88b327ef2cc2f0928d2","ssdeep":"1536:kZkRavHHx1XNnEAj2hTn4dJF/OX36+7+25UlXnxraZeXELiZXEoFUNn6g/e0cZ3N:2kIHCRn4dJ1OHzerLUNn/e3Zd","tlshash":"8b04b8b676d0f8d107a780d5843b400af3295c3b146f74a0a3e6cce975645dea1b3faa","first_seen":"2026-03-22T00:15:42.204518Z","last_seen":"2026-04-03T12:08:05.918572Z","times_seen":11,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4493-345c064d69dc5b01.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/4493-345c064d69dc5b01.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 20883\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"4493-345c064d69dc5b01.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"def83e7b4e518b54a038060c69718556\"\r\nlast-modified: Fri, 03 Apr 2026 06:19:38 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/4493-345c064d69dc5b01.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::9krfq-1775218062319-c0722bc2a36d\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jlY6huEWky6X7242xgNtgmhYfsOQ%2BQKjXebZACSxP6ztswvrg7x3lGTHAWD48WYebDYporbybb33hvZB3B8njUq5zgBA73aUXN5aCi8wLT%2F8FZ28fUOUy8AizW4LqlSy6D4tH0nartlkUFDxxtq5S8I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4592d860daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8484,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8484), with no line terminators","md5":"def83e7b4e518b54a038060c69718556","sha1":"473165f51c2b586a44ec271d2673a66478a9383f","sha256":"320004ff6ed7f86649043cb94dabf5e99e66d630bfe5800e5463f139bcc018d5","sha512":"f76cdb3543df1f30697b2ae9199823df2a42439d9da623af0a6542e933c36e47733c44d68a8f51bdd060fced0586a05a66e2d9ae63ea5540f9f6573dd57632fe","ssdeep":"192:oEbfLkEv9x8AiLMS5O7vZm2cyYO/C0dwMcGWx:oOxVQMz/jKmwMcGWx","tlshash":"e702a8ea71e1f8a2835b1050443b100bf37e1db5541e6098e7e99ce6f9b046ca1b3f6a","first_seen":"2025-10-24T00:39:28.71526Z","last_seen":"2026-04-03T12:08:05.919372Z","times_seen":19,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/app/page-314ab887e7a19561.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/app/page-314ab887e7a19561.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 20883\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"page-314ab887e7a19561.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"fddd64d9f8c9c7f16e76e3d1d1683088\"\r\nlast-modified: Fri, 03 Apr 2026 06:19:38 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/app/page-314ab887e7a19561.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::gc9pd-1775218062327-7a063c94c37f\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VYK2izmFe7JLl8GllIvpkFVNPfWwcLek7R7KMKVCjY7QImXt0t7OrgXvdj%2FLhI26Y1q1urp3lFBPVqmw9p3WehfX4vXID72y4ycQMDZNRJTnKTX03%2F0RDPqn49f0YdEEcb98o3w2chanSRkyueTXRqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4593d8c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27151,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27151), with no line terminators","md5":"fddd64d9f8c9c7f16e76e3d1d1683088","sha1":"b20880200a77d06817d44e82e73c6bca63373253","sha256":"f4f86b6e17c88151c5d3d6585ac9b184c71fb39123713ae554fe569a2c577c74","sha512":"d0c9655ccfdd9d8e6fb73cd7c305ebe193c4b4f59d65ed315e3568e732f7df6bcfcf20ec9c264c52a0082b5f1c2f7fc2c4d2e970f8be4a3dc714bab0d498a6b4","ssdeep":"768:iYKjP6TJYurnbD9V91k1PTjiHA7HA5Zll9VL1K1PTNaGym868A49g5KSpX:iYKjP6TNrnb0KICZlORaOijSpX","tlshash":"5bc2435ae7e19aee7436079c494d910e32ee678fce5acd686474bad2c84d1c53a023c3","first_seen":"2026-03-22T00:15:42.188642Z","last_seen":"2026-04-03T12:08:05.920571Z","times_seen":11,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"busines.ads-program-agency.com/_next/static/chunks/4599-5328b8dfa11ee91a.js","fqdn":"busines.ads-program-agency.com","domain":"ads-program-agency.com","tld":"com"},"ip":{"addr":"104.21.68.135","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://busines.ads-program-agency.com/","date":"2026-04-03T12:07:42.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads-program-agency.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 20 Mar 2026 02:15:48 GMT","end":"Thu, 18 Jun 2026 02:15:47 GMT"},"fingerprint":{"sha1":"90:8F:FC:32:78:02:C3:E7:AF:64:69:72:FB:D4:28:29:E8:7E:00:5D","sha256":"4A:75:1A:C3:A6:A5:36:F6:A0:85:9A:AC:33:EF:F9:FC:CA:83:BE:8B:93:A4:06:B9:4B:62:13:48:F9:21:85:15"}}},"request":{"raw":"GET /_next/static/chunks/4599-5328b8dfa11ee91a.js HTTP/1.1\r\nHost: busines.ads-program-agency.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://busines.ads-program-agency.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"4599-5328b8dfa11ee91a.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 03 Apr 2026 12:07:42 GMT\r\netag: W/\"3a36c3abb77a28a87773287d08cf93ed\"\r\nlast-modified: Fri, 03 Apr 2026 12:07:42 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-matched-path: /_next/static/chunks/4599-5328b8dfa11ee91a.js\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::wtfzm-1775218062342-92c01a1059e3\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=trUOnG%2B0fkbo2wdtgCC7JoDiTrDHrmfY5aQHHRJzaODpRhr%2FGHGFVvwvWJmS4Jmhhu7KKZcl%2FvJAbrug3jMOsCPZgp4d5UIuB%2BPtUiExUk4qVwqeYluziM5MDzx9zSWukzSrj2u%2Fh7YxpffbbMKJpwE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e67f4593d8a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26852,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26852), with no line terminators","md5":"3a36c3abb77a28a87773287d08cf93ed","sha1":"851643f23ef3703a79d4bd8e43f367d244543601","sha256":"41aebe9bee7937740ccfaea790c8f997d0f3a3a3ed05cbc9628ad2eeb5ae76c1","sha512":"42e6ee17a1613154ef629d66e7c13e3cb5dee9ab579762b47fce9faa0790ecf3f795f9d9f500af67c948f0d3641b797ff06a509b691bd9908bedde8c5e3a0802","ssdeep":"384:6gBiAIAc8E/vztiPRdWfjin24/+1kWd8Voi7Xar67hcNL55EH:qkE/LtkzjnfLWEo8Xar6U5eH","tlshash":"a7c20ab63695f899134780e4d43f400bf73a1834261d9068b3ed9cfd69a8986a173f7b","first_seen":"2025-11-21T01:38:58.229668Z","last_seen":"2026-04-03T12:08:05.921334Z","times_seen":14,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-03","alert":"Phishing Block","trigger":"busines.ads-program-agency.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-03","alert":"Sinkholed","trigger":"busines.ads-program-agency.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}