{"report_id":"e80fcdd3-6fc1-4f1c-ad00-881cc89533c1","version":0,"status":"done","tags":[],"date":"2026-09-09T19:21:35Z","url":{"schema":"http","addr":"bystrahodnotex-app.com/","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"bystrahodnotex-app.com/","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"title":"Bystrá Hodnotex | Official Website Platform","dom":{"size":143895,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32875)","md5":"e3bfe2a6637aec8f73cba6b61466f189","sha1":"daac0df951e8c7610a48fb3961d83d5de9651c7a","sha256":"85e58b8125608a753e7c29545f907a20e45e2bbce1db3a8ff178610cf1cee544","sha512":"aa1ed18e09e78d2928c32fd274ac7551cbc207cacf9de4653161137ce1482713c15104b9fd31cfc2855fc018b5cbbe37a74125fbc12ea223d9c1ce0383e15a45","ssdeep":"1536:dn9tMbXlOJi55R+Oviw+fHBDEliclYNe7aVQIeumIK:d9MwXwAQisMLxfmP","tlshash":"4ce3331381a92526403783d430a61f3bd6ba994bfae609407edcc7f61ffac94702b65d","dom_hash":"domhash6095fb0c0e393082bebfc1a3a980c6af","first_seen":"2026-09-09T19:21:42.023968Z","last_seen":"2026-09-09T19:21:42.023968Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bystrahodnotex-app.com/","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":0,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-14T19:21:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":3,"received_data":331341,"sent_data":1593,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":792323,"sent_data":1720,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":8789,"sent_data":528,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.country.is","ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-01-30","domain_rank":253271,"first_seen":"2016-09-23T06:54:06Z","last_seen":"2026-09-03T09:15:58.380521Z","alert_count":0,"request_count":1,"received_data":665,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bystrahodnotex-app.com","ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-09-09T19:21:37.946531Z","last_seen":"2026-09-09T19:21:37.946531Z","alert_count":55,"request_count":11,"received_data":254893,"sent_data":5724,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-06T23:33:22.473656Z","alert_count":0,"request_count":6,"received_data":2706796,"sent_data":3209,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-06T23:00:37.993111Z","alert_count":0,"request_count":4,"received_data":76792,"sent_data":2825,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","size":844493,"data":"","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-11T00:41:39.008089Z","times_seen":6108,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dca9d53787fff314e5bd1a123b28906a","sha1":"1350c858f60bbb03d1b53b05cbad6cea82ff29d1","sha256":"2475d902b4182bac667d464a44c89ee405e5cfd64156b30f811557cf2b347e2f","sha512":"4f123c356eec731b4f3653afdc258b385c8a0040ea14831893fa850c1275efe1fd49c51d4acb5f7541e01f2b9e46bbac0266e5893a6987b568f6aa2e0b0d492a","ssdeep":"","tlshash":"41a002f3187682224e93c660d963fb88d952515dfd4985cc60259e5ae7e29dbc010e90","size":75,"data":"","first_seen":"2023-03-07T01:15:59Z","last_seen":"2026-09-10T23:56:31.432982Z","times_seen":110477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0595cc08cd958864989974e3abde78b","sha1":"a282f16b2b3752e53058934e1707792a0cc383e3","sha256":"e8f68e1e7fd7f1943db3c0d39e8fbbcdf0eeaa22775a56983a1e2138df4c7b78","sha512":"cec3890b888190a3c6410cfd417e5b70e33e190db125f409aa60032591c437e0170b8280077de7474a18a97726317c5909ba282783cd630eda2db39e5c24b3c2","ssdeep":"768:l2hhGCPm8s+K9WURTnt4zyFxw1SdNrOEWQKAMyO37K1M/+y3pE9CAX+2d:A3D7s+K9WsTnt4eFG1w8QKApO3ey3yX","tlshash":"cbf29e0cec1924ebefe9cbf22be13bd4157c40591a5a056d31fb204b6f291a77446aec","size":36292,"data":"","first_seen":"2026-09-09T19:21:42.043127Z","last_seen":"2026-09-09T19:21:42.043127Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"8a4926c35e1da2fd820be78def3ef558","sha1":"598caf385688df918ed770bf52f30e4be0a9c8df","sha256":"33b7926ea401f1fffa38686dfa9896ab5c6b788508e1da41342f1e5c84d251e8","sha512":"38241bb0a8dfbf631c1c67e33940496dec530e5048407a25444d4bc628aab4f9c253eacbe6d3ea0cce7eeaed4bd7ed0078cdd6fd2caf72e14ded39b37428293d","ssdeep":"","tlshash":"73b012232520c8180c010703c86bd3f8e1019028e66090f0c4ad0fdd4530863d011500","size":102,"data":"","first_seen":"2026-09-01T09:18:25.80804Z","last_seen":"2026-09-11T00:54:30.23018Z","times_seen":4377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA5QXgEKFG1Rpx2BMnhGPJV1oV-DwJKMhqCz3GHMogWPSnnfekoIfBxzSxQWn8QSp1RXU0Eb9N0UPhqiXXD36BS2Uoe3rQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dca9d53787fff314e5bd1a123b28906a","sha1":"1350c858f60bbb03d1b53b05cbad6cea82ff29d1","sha256":"2475d902b4182bac667d464a44c89ee405e5cfd64156b30f811557cf2b347e2f","sha512":"4f123c356eec731b4f3653afdc258b385c8a0040ea14831893fa850c1275efe1fd49c51d4acb5f7541e01f2b9e46bbac0266e5893a6987b568f6aa2e0b0d492a","ssdeep":"","tlshash":"41a002f3187682224e93c660d963fb88d952515dfd4985cc60259e5ae7e29dbc010e90","size":75,"data":"","first_seen":"2023-03-07T01:15:59Z","last_seen":"2026-09-10T23:56:31.432982Z","times_seen":110477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA5QXgEKFG1Rpx2BMnhGPJV1oV-DwJKMhqCz3GHMogWPSnnfekoIfBxzSxQWn8QSp1RXU0Eb9N0UPhqiXXD36BS2Uoe3rQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"25ffe7e0adcc69ccd9fbbf2ca12c1faf","sha1":"3f25343a309e74596c56449768f4cbc8f5c9af9b","sha256":"a783d3c4980b239a6bf43d1849b3a4614858dadac0c7912c771ded9f0906e145","sha512":"e61978e530cb0be17cb4724f4c72c4d2c79dab79703f8ae21608aab411927b60381451fb39094287b5504b2c107e501fc9d8750f2f51003e620033f2a3864a8f","ssdeep":"","tlshash":"6bc0127761920ef30c65bc52449540ef1d990c27d212a7f49bda7c157da1c55be00b74","size":194,"data":"","first_seen":"2026-06-09T00:34:53.301005Z","last_seen":"2026-09-09T19:21:42.044087Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise.js?render=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e42675e2728e70eaaa00d4ff30698aec","sha1":"a3999b4419e769a577f73bb4445cba7421fe095b","sha256":"1b0395e6ebb1dfd80e67d9c15e422e2045d1c48adea674725efa942b920b72b1","sha512":"bb72f39bd32615335e4fef3e79a9555e2492221184c32384981c72fcfd84d69552db3095345b3621c7334577309f11457b3b073186905755bc1d200c85e5ac5f","ssdeep":"","tlshash":"f42103b61759a07a0bb20da1e0fdc772e811701cb15c49dca547da861eaaccfce02695","size":1159,"data":"","first_seen":"2026-09-03T18:54:10.549295Z","last_seen":"2026-09-09T19:21:42.030543Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"78178bfddb1a0f6883f1bb03723f7f73","sha1":"e0633a04e2148de40955a123ae76d72ca332206b","sha256":"d937eb458a92a535f517bbc92d354fdb19452d4ad49887e6c00b4af0ce163b5b","sha512":"e7dda93d1fabde9eada93aa0828575f95013efe60d216dda048996386856e689f72310864c2c57f5809ea0b560815797937ba3daa5c84fc046a7f8884bc5bdcd","ssdeep":"96:+4f0FQUriUl/udLOmoi4CTeZwpb3Q+RiumK4iWrdrPKE4iCDB:+4f0KHUcdLToiVTeOpbQ+RiumK4iWBbM","tlshash":"1981107612fb013616739bba57cf5206b26990476dc0cc443f5c43461f8ecaa6ae27ed","size":4186,"data":"","first_seen":"2026-07-25T23:32:49.830833Z","last_seen":"2026-09-09T19:21:42.044699Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"74241dc7c957dd184e1b83ebc4220cc1","sha1":"195545eb539ede25bf5c4ea2a9ba5839e10fdb35","sha256":"143fafc7c399d78b40fa28358935692a1d53f344302d05978c5aebfea2ddb58b","sha512":"87aa993e3b1ab6d6e56c46ca103674372fbf5f1ff724633eabc1dea5c178f09ba85af06eb404c59bb4e4f9ca25f086bcacb768df81ba348c8efccea8e935e384","ssdeep":"","tlshash":"76f09e08f38cc9722661074e26ed8c0d22d0c9978dc0314d37fd120a0fdfbaa5ad465e","size":439,"data":"","first_seen":"2026-05-25T18:38:13.045507Z","last_seen":"2026-09-09T19:21:42.045199Z","times_seen":237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","size":34586,"data":"","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-09-09T19:21:42.039827Z","times_seen":1894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"9bee4a74ffbbe72187a236bea356b2b2","sha1":"f59fed8371be6a1546f6ec8c3e86d45c835469e6","sha256":"b606e1dd5ec0876b3ad78b251b9cb83459d99e1dc4b660466383a0377a0a7fb8","sha512":"0fef840d5afb8ad8d0b9834bd52c14484c02539d74d1e611a5381a8da10cd0df66bed6b1bb2d65eb872a87708161e03f0e26ca0c66d9c2294f74bbe7216fffb4","ssdeep":"3072:9klM0tDKjFs3OwPss3MwP5y1APtA2x2MfMPihvi8EA4JhNyf4L9jo/QKWV+lumVu:9klMmDO11Ix2MfMPig7ou","tlshash":"a744f0ebd63c973ba1d87b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":266273,"data":"","first_seen":"2025-10-21T03:51:56.414562Z","last_seen":"2026-09-09T19:21:42.041531Z","times_seen":856,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bystrahodnotex-app.com/styles/uikit.min.css","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.255Z","timestamp":1788981660255,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /styles/uikit.min.css HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvary: Accept-Encoding\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\nserver: Caddy\r\ncache-control: public, max-age=3600, stale-while-revalidate=2592000\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\netag: \"dhkjzcki9ivggtw-zstd\"\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nx-frame-options: DENY\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":21812,"size_decoded":4872,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (21810), with no line terminators","md5":"567a4fb6fbe8f44d9c063b797faa75fe","sha1":"da3b6560c912170fd4464c5fe75fcc3c44d0445c","sha256":"08fae18a093d29e7a1fb3ecff2268fbef7ed37be7a93168528357b579205cedd","sha512":"5fe76d61f3338d447e442178edfad11f4bda9198852aed0b13e364915c09ef383b1aac386979a19024791ebbe7e4c19b649a4c46757e7abf4f2289850a684d25","ssdeep":"384:D8Z2Rak8G3S6ixiXC8vZ/vu6cror9ACQgvm:4ZTk8GbixiXC8vZ/vu6cror9ACQgvm","tlshash":"eea23348a24478fecd33894b619472fceb995d12b3b61efbe6ae52824b426c70174918","first_seen":"2025-10-21T03:51:56.416779Z","last_seen":"2026-09-09T19:21:42.025501Z","times_seen":781,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/form/intltelinput.min.css","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.258Z","timestamp":1788981660258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /form/intltelinput.min.css HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ncontent-length: 2971\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\ncontent-encoding: zstd\r\nserver: Caddy\r\netag: \"dhkjzcjz7n1gbge-zstd\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14846,"size_decoded":3324,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14846), with no line terminators","md5":"3c71b12a16f4136cc71d73c73ea7eec3","sha1":"9bb9bc6a029e3e780e12ddd4b602f7665bab5d58","sha256":"c5f324d37d9ea6edfeba4eef39996051d09da795b1bba26959294b0f663bb437","sha512":"3e3acfe52d04776e028b4a05796c901e8ff23e512c90535e041e255def900f597dd32d6f0faca3ca5e4a3af723b799763affda683fbe85b86829a43d13a4e0a2","ssdeep":"192:eRbLgqLmLdLiqE4P5fnX/zScObOFhs+bpmTYCM9oRZJiEnJWoCdsPyj9KKaM:eNaBD/xvgbOEM73","tlshash":"046284030318913ee716d1397172d5bc3bbfbb4174d7cad1e6c8822f988799089aba59","first_seen":"2025-10-21T03:51:56.428574Z","last_seen":"2026-09-09T19:21:42.026176Z","times_seen":779,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","date":"2026-09-09T19:21:01.013Z","timestamp":1788981661013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 23:27:58 GMT\r\nexpires: Tue, 07 Sep 2027 23:27:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 157983\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc6f30e40407f1871165fd2607e956db","sha1":"fce2064361e33a584c4b5899d3e96bd8213a320f","sha256":"a75325e8b8a5416d4e63d5905ccd8f6385f0352a1854fdffe1ab2d77dad95d10","sha512":"abf515657741cfac7c5acb3cfabd1aab0d40fdc9299528785745deee769e31bfa8b92718d0b05868d6da92663100c03b8a5e0e729dfa03cf266cdaab40f75cd4","ssdeep":"1536:iA7Rpgh9C9ToL9gTNfWNfK4RxHnHZzhXwWx7W1bx7:iA7ArC9ULiTYNC4Rz9Xi","tlshash":"4c838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-01T09:18:25.804738Z","last_seen":"2026-09-11T00:52:39.941171Z","times_seen":4850,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","date":"2026-09-09T19:21:01.392Z","timestamp":1788981661392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Wed, 09 Sep 2026 19:21:01 GMT\r\ndate: Wed, 09 Sep 2026 19:21:01 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: same-site\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":954,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"8a4926c35e1da2fd820be78def3ef558","sha1":"598caf385688df918ed770bf52f30e4be0a9c8df","sha256":"33b7926ea401f1fffa38686dfa9896ab5c6b788508e1da41342f1e5c84d251e8","sha512":"38241bb0a8dfbf631c1c67e33940496dec530e5048407a25444d4bc628aab4f9c253eacbe6d3ea0cce7eeaed4bd7ed0078cdd6fd2caf72e14ded39b37428293d","ssdeep":"","tlshash":"73b012232520c8180c010703c86bd3f8e1019028e66090f0c4ad0fdd4530863d011500","first_seen":"2026-09-01T09:18:25.80804Z","last_seen":"2026-09-11T00:54:30.23018Z","times_seen":4377,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/images/shape-01.avif","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.272Z","timestamp":1788981660272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /images/shape-01.avif HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\ncontent-type: image/avif\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\netag: \"dhkjzck1ldipvp\"\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ncontent-length: 1141\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1141,"size_decoded":1513,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"f24f37c43d59df4362d94af9b9f7b2f9","sha1":"517da8a13986b69429bd823f250914588864ea13","sha256":"918281d1e2e279a8867eb05690fdf8d6ea4551a68a5effa83a4bdf7af38090a5","sha512":"1d13b32b8902b5a01429844b155d32842b23b17d44a9b1e09c5fb8c2a3fc35b53cf71848ebe6185aa429bc828781ff08b981e2cc55f85916aa49709c0e00073e","ssdeep":"","tlshash":"ae21466533583d52d04e0bba5ebcd3017b61d3b897ef6455b9c17211a9151f1c951c18","first_seen":"2025-10-21T03:51:56.420259Z","last_seen":"2026-09-09T19:21:42.028318Z","times_seen":776,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/img/flags.webp","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.490Z","timestamp":1788981660490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/img/flags.webp HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 28186\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/webp\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"6e1a-JHPdY1y9Ow2NjbjaGyegi0Qmya4\"\r\naccept-ranges: bytes\r\nage: 2257535\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nx-served-by: cache-fra-etou8220162-FRA, cache-bma-essb1270067-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28186,"size_decoded":28912,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4af30d041d95c5a83b016ec6812cda19","sha1":"2473dd635cbd3b0d8d8db8da1b27a08b4426c9ae","sha256":"0e2a53ec4d77d08efa8e8f5fc86b1c25e8f2af39d6b44334e1219ed3e0687a61","sha512":"a43b49d0a8830608a8351b1fe3afc5d468664ad79b674583f6e8f1c647fd5270181e9b1d35cbbbddc0285dc15b49e9d53f34a8bd414d32ae3ad6d659168e095e","ssdeep":"384:NmynJhMcWfubAG0nXDutFs4CIwMB7Po+NKC5NPQic7vmUbx2Kh4du2r0mRo3d0:NmynJhMze5CD+3PZ7AEZPyx2KhSRj","tlshash":"66c2e133be32a6c76d998ab018364ffa97354446bdd359c3a1f6ba98dd374c3294020d","first_seen":"2025-03-06T15:46:52.721855Z","last_seen":"2026-09-11T00:08:30.683549Z","times_seen":3575,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-09T19:20:59.744Z","timestamp":1788981659744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000;\r\nvary: Accept-Encoding\r\nvia: 0.0 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ndate: Wed, 09 Sep 2026 19:20:59 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":71545,"size_decoded":16223,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1710)","md5":"4876371dfa03e348bef83d9d2cacd55a","sha1":"ff916ed3233c7206147402f3f933dfd9c7d9e0a4","sha256":"be671294e60489e85fed3af93a2d7d4514988e012cc952ae40558f689f831e65","sha512":"750b3a7f6585237567e6e00fe9cef9638ab9885957f8d8cd81f03950ae8558080ceefb5daaa637d29a225dbb45b6f63b6d6e9526ac62663a163e0b63839d1b12","ssdeep":"768:gyJwv7nbw+fHjVDEliclYPFeVKIJ/VQ2eumF:gXw+fHBDEliclYNe7dVQ2eumF","tlshash":"7f63c829e2f2513a419306c537e7160a6fb9824be746c054b7ac43f81f9bc9dca3366d","first_seen":"2026-09-09T19:21:42.029531Z","last_seen":"2026-09-09T19:21:42.029531Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":0,"dns":22,"connect":8,"send":0,"wait":13,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise.js?render=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.260Z","timestamp":1788981660260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise.js?render=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 09 Sep 2026 19:21:00 GMT\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1159,"size_decoded":1354,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1159), with no line terminators","md5":"e42675e2728e70eaaa00d4ff30698aec","sha1":"a3999b4419e769a577f73bb4445cba7421fe095b","sha256":"1b0395e6ebb1dfd80e67d9c15e422e2045d1c48adea674725efa942b920b72b1","sha512":"bb72f39bd32615335e4fef3e79a9555e2492221184c32384981c72fcfd84d69552db3095345b3621c7334577309f11457b3b073186905755bc1d200c85e5ac5f","ssdeep":"","tlshash":"f42103b61759a07a0bb20da1e0fdc772e811701cb15c49dca547da861eaaccfce02695","first_seen":"2026-09-03T18:54:10.549295Z","last_seen":"2026-09-09T19:21:42.030543Z","times_seen":11,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":7,"connect":31,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","date":"2026-09-09T19:21:01.285Z","timestamp":1788981661285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 04 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 464913\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-11T00:19:46.049463Z","times_seen":988313,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA5QXgEKFG1Rpx2BMnhGPJV1oV-DwJKMhqCz3GHMogWPSnnfekoIfBxzSxQWn8QSp1RXU0Eb9N0UPhqiXXD36BS2Uoe3rQ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:02.001Z","timestamp":1788981662001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA5QXgEKFG1Rpx2BMnhGPJV1oV-DwJKMhqCz3GHMogWPSnnfekoIfBxzSxQWn8QSp1RXU0Eb9N0UPhqiXXD36BS2Uoe3rQ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Sep 2026 19:21:02 GMT\r\ncontent-security-policy: script-src 'nonce-oCg2bU-kvqKIoVkRLH_Tng' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17044,"size_decoded":3288,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"a15e1f64150ef080dcc578a2f5e2ea82","sha1":"91a4aea78751f66b4477b8ff45b91318af0e308b","sha256":"624dbeb779444f5fae563d50b183fc6bfe8ed23d2a3d4f4f564780fbe7b67e2e","sha512":"de8fedf8048aae67f5b7941be436b637736113432c3caa8e93c50088b9e6fbb504fca4bfba3f758f11d6bbb443bdc388667ae4c187da24824aa10c35e2a0619b","ssdeep":"384:EjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/D:EFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+U","tlshash":"9772fe50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-09-09T19:21:42.03167Z","last_seen":"2026-09-09T19:21:42.03167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA5QXgEKFG1Rpx2BMnhGPJV1oV-DwJKMhqCz3GHMogWPSnnfekoIfBxzSxQWn8QSp1RXU0Eb9N0UPhqiXXD36BS2Uoe3rQ","date":"2026-09-09T19:21:02.043Z","timestamp":1788981662043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 17:27:07 GMT\r\nexpires: Tue, 07 Sep 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179635\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-11T00:41:39.008089Z","times_seen":6108,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Noto+Color+Emoji\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.253Z","timestamp":1788981660253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Noto+Color+Emoji\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 09 Sep 2026 19:21:00 GMT\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8105,"size_decoded":2794,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1209)","md5":"5e5b7351a79c78358de8794a46b6bbf3","sha1":"fb4e1dab0fc1faac137b012fae2c50944e5b2219","sha256":"b49d06a03831ea14989c31fe1e15e76c929b5b67828ae546ca0c6d0c13098f1d","sha512":"18136bd3960a7970e7619bf2bb023cb6729aa6a94ef735e3eafae6beb5d9cffbb9113a507080ddd1b6424cad9fe046d262557b08d48d91058955e9dc841a8c91","ssdeep":"96:qOEadOEa7lgOEa4wSer9hWlJ+OEa50B8mH+MIlnOEaJAvUqH3BeOEaWVNCYOEaWa:NCNzr9OZiR+4rqX/WkvPrF7OK/","tlshash":"b0f1ee684816cb88f5933ca743df1e25f97d14807910c92f5afa7b53afca4a6858db0c","first_seen":"2026-08-10T23:02:04.998707Z","last_seen":"2026-09-10T20:31:45.05826Z","times_seen":133,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":17,"send":0,"wait":38,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/notocoloremoji/v40/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.424Z","timestamp":1788981660424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/notocoloremoji/v40/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bystrahodnotex-app.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 709628\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:46:00 GMT\r\nexpires: Thu, 09 Sep 2027 10:46:00 GMT\r\ncache-control: public, max-age=31536000\r\nage: 30900\r\nlast-modified: Mon, 10 Aug 2026 16:08:31 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":709628,"size_decoded":710441,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 709628, version 1.0","md5":"aee3120deb6abe19c1351f372e23935b","sha1":"41aee579dc07516b547b7e59a0c241f346be8fdc","sha256":"1ea085e149cb9e5f1ac086f0580f7dc10d6cc06cb2e29caa8a7360064a7eadd6","sha512":"b671e3fd574c6849b1301da19d5946308cd8fcc99dab690b7779c6afa761f472a340dd5b69e41e42aa520a9d92719bfb8d71b5ad790066a82acbf6337a8add89","ssdeep":"12288:ssZLH3vHM8eicr0CNHwJsfXLsdEHp65/nfZ7N8tOJt86YjsSEEWKinOB:dZ3vUiqN1D45nPtudWKhB","tlshash":"c0e423746051170ae093ccae3c275c2e35e1ae517c0c3a3a65c57a5992acef370aee7d","first_seen":"2026-02-18T08:28:29.769217Z","last_seen":"2026-09-09T19:21:42.034448Z","times_seen":571,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":0,"dns":0,"connect":32,"send":0,"wait":18,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/images/background-5.avif","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.452Z","timestamp":1788981660452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /images/background-5.avif HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nstrict-transport-security: max-age=31536000;\r\netag: \"dhkjzck1ldipn85\"\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ncache-control: public, max-age=2628000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\ncontent-type: image/avif\r\naccept-ranges: bytes\r\ncontent-length: 30101\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nserver: Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":30101,"size_decoded":30475,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"83c8d26271cb94d94c31432abf14fbee","sha1":"b3b2c8447940eda43c2423678e7334b6d89ff50a","sha256":"cef01082169630b2ff8bdafb0cc0fb41960295c754566e624770b6531a73378e","sha512":"236257382fa987eb37414af91bf59042309620f166795fe69a8b379b25feb7de7c5597f505ca12a295e8340e26728481588ead1583740f78adb00bf98ed1348f","ssdeep":"768:SC9i23D+riblDTIA3oFgywx8cTaCO+2KabcoGVtFCw+e2pZX:S6Dui9TIZZXcWCODAok/+bXX","tlshash":"07d2f11774e04a97cd707d3a93416d1c30a6c450baaca27f4c653feeb51d09968f2933","first_seen":"2025-10-21T03:51:56.400965Z","last_seen":"2026-09-09T19:21:42.035023Z","times_seen":776,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/images/background-2.avif","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.455Z","timestamp":1788981660455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /images/background-2.avif HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-content-type-options: nosniff\r\ncontent-type: image/avif\r\ncontent-length: 16313\r\nstrict-transport-security: max-age=31536000;\r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\netag: \"dhkjzcjz7n1gcl5\"\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\naccept-ranges: bytes\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nserver: Caddy\r\ncache-control: public, max-age=2628000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":16313,"size_decoded":16687,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3cfe8d0bff1f59eec36c84b6916d12c7","sha1":"58ea66f373562c323da76d5b916e3882b75182f1","sha256":"b700c328b344cba6adad8e162d56b3ec5bac81faff29d76e40cfd03f95372487","sha512":"8b31e7abb8c04791c2118f01435fd63310de7d6e70627c80e4b7152f9ba1ec881c3700af540cce7d2d84e16378dc5c51517f1afa85cc65a73834f4de18f024cb","ssdeep":"384:N1tO+4aXZGYUW/T9Q6w6K/Cmt4pwzY6RrODYTXu:NnPBtb9QcOCmt/kTDme","tlshash":"6672c0a33322d048e25171b617cfa2e97e7f4e3660fb1c64bd6a26c5ce8344e1f641a5","first_seen":"2025-10-21T03:51:56.446042Z","last_seen":"2026-09-09T19:21:42.035584Z","times_seen":776,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","date":"2026-09-09T19:21:01.274Z","timestamp":1788981661274,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 03 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 10 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 533439\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-11T00:14:25.417391Z","times_seen":724012,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/styles/main.css","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.256Z","timestamp":1788981660256,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /styles/main.css HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\netag: \"dht39bszwy93e6w-zstd\"\r\nlast-modified: Tue, 14 Apr 2026 18:27:56 GMT\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nserver: Caddy\r\ncache-control: public, max-age=3600, stale-while-revalidate=2592000\r\nx-content-type-options: nosniff\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\nstrict-transport-security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":18392,"size_decoded":4736,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c109710ac51828fbc6ffde952edb40ca","sha1":"76110c1b3b8d60eeb8e2ecb3665b95594fac6659","sha256":"eb630ed0c372a40a587d4b1014c0faee736a072e03f98f9fa6027d4be2d69bee","sha512":"c30e9f847bca574f99bdeeac827a942c0599f4af64220ff5b155a1f5bbdaaf0ea29529a7e205df009e4daa795fff1305fac17afb14a1da1beca9df8313efd135","ssdeep":"192:yDf7LE0ko+BPqDjzAqfkUmppi48QUXhNSq36VQVdXyxRYTv46YNi7CUVQykBXySe:eaPmzHuAOMwDEx20Dqm","tlshash":"3e82436797a31945b00b846c2beba755332c4043860ede7d7f9e7348cf4a1e8d5a2b8d","first_seen":"2026-04-14T23:40:51.073598Z","last_seen":"2026-09-09T19:21:42.03673Z","times_seen":371,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/images/shape-02.png","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.454Z","timestamp":1788981660454,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /images/shape-02.png HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\netag: \"dhkjzck1ldip7o\"\r\nvary: Accept-Encoding\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\naccept-ranges: bytes\r\ncontent-length: 276\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nserver: Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":276,"size_decoded":646,"mime_type":"image/png","magic":"PNG image data, 259 x 259, 4-bit colormap, non-interlaced","md5":"9edc85636b3c04e8825e4d75ee49f4f9","sha1":"678f5cae7eefd779c38d0b5a062f6f3a88693df6","sha256":"6afacb29b13eafebc237920ce8200dea928978569a65a73600e8562c992d9971","sha512":"755986d69d69d5687ec0c38c0cbb309cb851a4e20ec75f8e731892a406b8fb94a0325f5d1312209e71e9c3c85eb83b25db5d72c9c03820c1c8b117a51132f3b8","ssdeep":"","tlshash":"6ad05ec9daf0faf519255a55f1218199986c03e8703f416e93cb84382e62789d7853a3","first_seen":"2025-10-21T03:51:56.422169Z","last_seen":"2026-09-09T19:21:42.037301Z","times_seen":798,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/webworker.js?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt","date":"2026-09-09T19:21:01.453Z","timestamp":1788981661453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 17:27:07 GMT\r\nexpires: Tue, 07 Sep 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179634\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-11T00:41:39.008089Z","times_seen":6108,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/images/cropped-Favicon-32x32.png","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.649Z","timestamp":1788981660649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /images/cropped-Favicon-32x32.png HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 609\r\nserver: Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\netag: \"dhkjzck1ldipgx\"\r\ncontent-type: image/png\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":609,"size_decoded":979,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f17b2d52496a7b6283c91478bcb1d51f","sha1":"c497b97a94a45f2de7310d4722a10c6c54abfacc","sha256":"06a0640bb63a5e1ffb8e6204b8bc4b267997a6a5c0834d2e54cdc5cfe5c2d3c2","sha512":"22a93460f5dae42f5005a67ce62f2f46ab640c060b14a07819a84cc3bba6bb8a12a7cffbbe751a4f24fe32e27144739c7f4bd310d5513776d462f3d0637a08eb","ssdeep":"","tlshash":"3df062dd15d0280942e6e6f2db4f0467f887ffa102ca105cc1a07ce9f1868a174fab05","first_seen":"2025-03-03T22:55:46.45545Z","last_seen":"2026-09-09T19:21:42.037851Z","times_seen":3681,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.934Z","timestamp":1788981660934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"GET /recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\ncontent-security-policy: script-src 'nonce--BDqwRDCLoNi8_PqiNATBw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54848,"size_decoded":29664,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (36298)","md5":"b21307f931f9eb4b6903ce485b3229d0","sha1":"1fabd7ddb9508db1a0c555b0ff2b6034358b1f12","sha256":"104eaa4aebc044f3f18eeb4ecfee454d6d38c43266d70a52d632d57002847620","sha512":"e0a1094803827fd4554b424dfc3fac358476e885265aaaa025f72984f92376f18afa69840503ca965a9f017014178d916c888a0c600bbfa79f1096fa91d4cae6","ssdeep":"1536:y+kdP383D7s+K9WsTnt4eFG1w8QKApO3ey3y2:y+kdPM3DrW7ytsK3y2","tlshash":"a3336b5048171446dfd78de223d93f74fd2e8250224280b973fe635bae9bca7a15a39c","first_seen":"2026-09-09T19:21:42.038704Z","last_seen":"2026-09-09T19:21:42.038704Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","date":"2026-09-09T19:21:01.015Z","timestamp":1788981661015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 352523\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 17:27:07 GMT\r\nexpires: Tue, 07 Sep 2027 17:27:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 179634\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":844493,"size_decoded":353410,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (746)","md5":"79e251d536cdd001a23818a648c6e5af","sha1":"27829f43c050bc8da3a45501d048feb67dc8d1b2","sha256":"25068be5bad4bf87c01c5bef4c33825addea39e12d99aa7b55b52288fd0631a6","sha512":"ed7b75e6ae6f0a98eaaec9ea2e454193c10c5844245565ab08b48aa5d381a8c9a733c601105496de3bf521959bc83f30353d82d5be2f1a88d0899d2e35f44347","ssdeep":"12288:x9jhlvbfgbTB4LEeebL3B51euHaZS10YE+:f7aFlbL3B51euHm+","tlshash":"1c052bddb49676b16332b5f910772109533d9815d88c086db1abd8f03ab084ea17befb","first_seen":"2026-09-01T09:18:25.8255Z","last_seen":"2026-09-11T00:41:39.008089Z","times_seen":6108,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/enterprise/anchor?ar=1\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026co=aHR0cHM6Ly9ieXN0cmFob2Rub3RleC1hcHAuY29tOjQ0Mw..\u0026hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=rvgge6fak8q0","date":"2026-09-09T19:21:01.286Z","timestamp":1788981661286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 04 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 04 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 464913\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-11T00:19:46.049463Z","times_seen":988313,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.259Z","timestamp":1788981660259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"871a-JROK+GPirWm7Ca9OkwCUSfLnXMs\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1387678\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nx-served-by: cache-fra-etou8220125-FRA, cache-bma-essb1270021-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 12976\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34586,"size_decoded":13771,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18251)","md5":"7657299ef4e0a3abdc478c0b9d7075aa","sha1":"25138af863e2ad69bb09af4e93009449f2e75ccb","sha256":"8e184485db8b6a8a741dd831f7bae84644eedf8f0c371172e69721e1236a7cd1","sha512":"eb5e7ae63fb48ea7b543f7339625284b3cc5477b6c8be03667714ebab1eb7c493a1445bae46348d992a4477a2080634c532b16c7b6ae4102e1524e51ab142b6b","ssdeep":"768:U+h03XVqC/iPIqXpwJxsyysdjx2nmY249lHGIw:UiPIsy/tWHG","tlshash":"c0f2f9aeb3646637abfd82a270e54403ae6f79444604043d78bc8ede1399dd171f6b38","first_seen":"2025-10-21T03:51:56.40324Z","last_seen":"2026-09-09T19:21:42.039827Z","times_seen":1894,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":2,"connect":11,"send":0,"wait":11,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/images/background-4.avif","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.369Z","timestamp":1788981660369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /images/background-4.avif HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/styles/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\netag: \"dhkjzcjz7n1g1ah5\"\r\ncontent-length: 60233\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncontent-type: image/avif\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\naccept-ranges: bytes\r\nserver: Caddy\r\nx-frame-options: DENY\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60233,"size_decoded":60608,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"cdb0ec10556444a17569d8e5d0e0ff96","sha1":"ce14f4961c02c1fa6ff750981e2d6e9176ce51e4","sha256":"8624f05152f3ce27b3c2a596d7c93bf39f1208b0246dff5b073b94f747cb95ae","sha512":"5ff6812dd4009f70e7eb631f8a32f9e68c0e07835503c5b4bb00cc81f001f204ca29c0f6aa59e0222dc3fd59125fa7baedf99512f557f0eb22a70d9f135a422f","ssdeep":"1536:UrA18Z6po8yFG1+2mSWd6xtxIOvUzWGVPQPDXi7jX:00a8RBBWMxECQiPDWL","tlshash":"7b4312babd302a7d6b978bafc57343051833d12bcc76fa7139d11ac0a091a928fd5b50","first_seen":"2025-10-21T03:51:56.44395Z","last_seen":"2026-09-09T19:21:42.040382Z","times_seen":776,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.country.is/","fqdn":"api.country.is","domain":"country.is","tld":"is"},"ip":{"addr":"172.67.75.199","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.492Z","timestamp":1788981660492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"country.is","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 22 Jul 2026 00:18:08 GMT","end":"Tue, 20 Oct 2026 01:17:54 GMT"},"fingerprint":{"sha1":"C8:95:B6:41:54:BF:CC:CB:F6:25:39:AC:AD:BB:8C:44:02:D7:AE:5F","sha256":"44:1F:B8:8A:5E:D7:23:CD:EA:13:42:96:1B:04:9F:C7:7D:C7:AB:7C:D5:D8:F8:31:AC:3A:DE:D1:D8:12:39:F8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: api.country.is\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bystrahodnotex-app.com/\r\nOrigin: https://bystrahodnotex-app.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 38\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UEUs34DuN1wSySZb4t2Ka2CyrzsPp7rhh4RTpyz5PjX5d2mAUZhYeoqMnajtsx7qVvbiKRvcI4D32IwmqxSRUS38S3ladw%2BWc0feJJA7LGVjn1kIxGpzdfOAdKFoxNQ3\"}]}\r\netag: W/\"26-s87Asb/nOWeVJNZsRLZ5EgeHar0\"\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a3888db2a99a805c-CPH\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38,"size_decoded":665,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"84ce7d452c22b1ff0ffc904e7ab8394f","sha1":"b3cec0b1bfe739679524d66c44b6791207876abd","sha256":"73029324a548df1d37ca51cc4e456e4925e9bb95cefab9e69892626377f64f40","sha512":"9871e27e557fd6f1deaeb8c3ce3d5638c659e1b6085c49e851501dc3300b1207d89eb1847fd0e32355132e7df50c4505b61e4d2601c78e13c9ef22c8d3012cb2","ssdeep":"","tlshash":"3580045500704f04d45043451445503040d7534113434d04c3c4333d4d401dc7000031","first_seen":"2025-12-20T16:42:41.64905Z","last_seen":"2026-09-10T20:42:13.627719Z","times_seen":529,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":5,"connect":25,"send":0,"wait":59,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@25.8.3/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:01.341Z","timestamp":1788981661341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@25.8.3/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://bystrahodnotex-app.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 62752\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 25.8.3\r\nx-jsd-version-type: version\r\netag: W/\"41021-9Z/tg3G+ahVG9uyMPobUXINUaeY\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 139858\r\ndate: Wed, 09 Sep 2026 19:21:01 GMT\r\nx-served-by: cache-fra-eddf8230107-FRA, cache-bma-essb1270067-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266273,"size_decoded":63527,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"9bee4a74ffbbe72187a236bea356b2b2","sha1":"f59fed8371be6a1546f6ec8c3e86d45c835469e6","sha256":"b606e1dd5ec0876b3ad78b251b9cb83459d99e1dc4b660466383a0377a0a7fb8","sha512":"0fef840d5afb8ad8d0b9834bd52c14484c02539d74d1e611a5381a8da10cd0df66bed6b1bb2d65eb872a87708161e03f0e26ca0c66d9c2294f74bbe7216fffb4","ssdeep":"3072:9klM0tDKjFs3OwPss3MwP5y1APtA2x2MfMPihvi8EA4JhNyf4L9jo/QKWV+lumVu:9klMmDO11Ix2MfMPig7ou","tlshash":"a744f0ebd63c973ba1d87b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2025-10-21T03:51:56.414562Z","last_seen":"2026-09-09T19:21:42.041531Z","times_seen":856,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/enterprise/bframe?hl=en\u0026v=8x-4t2pegToiW8KmThtO4AQt\u0026k=6LcIaJksAAAAAFL0mwS-Fxjl1PZ-Y8KExM0mHreH\u0026bft=0dAFcWeA5QXgEKFG1Rpx2BMnhGPJV1oV-DwJKMhqCz3GHMogWPSnnfekoIfBxzSxQWn8QSp1RXU0Eb9N0UPhqiXXD36BS2Uoe3rQ","date":"2026-09-09T19:21:02.041Z","timestamp":1788981662041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /recaptcha/releases/8x-4t2pegToiW8KmThtO4AQt/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42354\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 23:27:58 GMT\r\nexpires: Tue, 07 Sep 2027 23:27:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 157984\r\nlast-modified: Mon, 31 Aug 2026 04:01:33 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43201,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"cc6f30e40407f1871165fd2607e956db","sha1":"fce2064361e33a584c4b5899d3e96bd8213a320f","sha256":"a75325e8b8a5416d4e63d5905ccd8f6385f0352a1854fdffe1ab2d77dad95d10","sha512":"abf515657741cfac7c5acb3cfabd1aab0d40fdc9299528785745deee769e31bfa8b92718d0b05868d6da92663100c03b8a5e0e729dfa03cf266cdaab40f75cd4","ssdeep":"1536:iA7Rpgh9C9ToL9gTNfWNfK4RxHnHZzhXwWx7W1bx7:iA7ArC9ULiTYNC4Rz9Xi","tlshash":"4c838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-01T09:18:25.804738Z","last_seen":"2026-09-11T00:52:39.941171Z","times_seen":4850,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bystrahodnotex-app.com/images/003.avif","fqdn":"bystrahodnotex-app.com","domain":"bystrahodnotex-app.com","tld":"com"},"ip":{"addr":"91.236.116.210","port":443,"asn":42237,"as":"w1n ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bystrahodnotex-app.com/","date":"2026-09-09T19:21:00.271Z","timestamp":1788981660271,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bystrahodnotex-app.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 05 Aug 2026 18:47:17 GMT","end":"Tue, 03 Nov 2026 18:47:16 GMT"},"fingerprint":{"sha1":"C2:A2:EC:54:76:4C:F4:33:70:B8:9C:A0:4B:0E:01:6F:CD:46:38:65","sha256":"70:09:E1:9F:05:C9:DD:21:35:99:12:A1:30:66:7A:C9:3C:5F:D6:F4:4E:A6:70:BC:2B:CB:8B:19:C2:DA:17:A3"}}},"request":{"raw":"GET /images/003.avif HTTP/1.1\r\nHost: bystrahodnotex-app.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bystrahodnotex-app.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/avif\r\nlast-modified: Sat, 04 Apr 2026 17:40:13 GMT\r\ncontent-length: 15554\r\ncache-control: public, max-age=2628000\r\nstrict-transport-security: max-age=31536000;\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\netag: \"dhkjzcjz7n1gc02\"\r\naccept-ranges: bytes\r\ndate: Wed, 09 Sep 2026 19:21:00 GMT\r\nserver: Caddy\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15554,"size_decoded":15928,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"e6009bcbcd96356eb1a28a8af5c7db10","sha1":"7503dd022f2d2666be2ec20fc3701fa58284f079","sha256":"ddf95beaa3052a04d92b996fa5c3522af31cb9aef367a6d9af39e90f2026f035","sha512":"b49d94fa6ded572467743983f1a5637e93fdfa7d70b80eb5bf2a3e3b6341f0699b4cfa049c00269b2c57463a75cc223c3411eb2130b49ec796a3c5169d5f21d4","ssdeep":"384:PUO3if3cksNQl1Pc5oz7ile7XbUmHDNsiZvQff04:MO3u/salz7i6IIDNfZ27","tlshash":"b162c0f8e541a5ceee8ada3c1d19b616260c63641b3575b0390df72c8c96fe49d40ef8","first_seen":"2025-10-21T03:51:56.431567Z","last_seen":"2026-09-09T19:21:42.04211Z","times_seen":776,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-09","alert":"Phishing Block","trigger":"bystrahodnotex-app.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-09","alert":"Sinkholed","trigger":"bystrahodnotex-app.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}
