{"report_id":"e8c40c0c-b1c7-47b4-9f6b-be93d045257f","version":6,"status":"done","tags":[],"date":"2026-05-28T13:09:02Z","url":{"schema":"https","addr":"gloexpress.icu","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"gloexpress.icu/","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"title":"Home | Page","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"gloexpress.icu","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-02T13:09:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-28T13:08:39Z","timestamp":1779973719,"ip_dst":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":60748,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-05-28T13:08:39.525458+0000\",\"flow_id\":366975936580553,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":60748,\"dest_ip\":\"163.61.188.7\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"gloexpress.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":916,\"bytes_toclient\":3168,\"start\":\"2026-05-28T13:08:39.347081+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"gloexpress.icu","ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-05-28T13:09:11.330062Z","last_seen":"2026-05-28T13:09:11.330062Z","alert_count":63,"request_count":63,"received_data":2513217,"sent_data":28727,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"code.jivosite.com","ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":232952,"first_seen":"2012-07-22T02:03:39Z","last_seen":"2026-05-21T22:07:40.305514Z","alert_count":0,"request_count":8,"received_data":1738712,"sent_data":3767,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"node-ya-10.jivosite.com","ip":{"addr":"185.71.67.146","port":443,"asn":43298,"as":"Storm Networks LLC","country":"Russia","country_code":"RU"},"domain_registered":"2011-05-06","domain_rank":1470369,"first_seen":"2023-01-19T04:47:53Z","last_seen":"2026-05-22T05:57:56.323869Z","alert_count":0,"request_count":1,"received_data":714,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"translate.google.com","ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-05-25T18:14:14.14893Z","alert_count":0,"request_count":1,"received_data":77243,"sent_data":460,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":2,"received_data":34576,"sent_data":1016,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-24T22:41:50.23946Z","alert_count":0,"request_count":1,"received_data":739,"sent_data":442,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":7,"received_data":204503,"sent_data":3690,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-05-24T22:52:50.654314Z","alert_count":0,"request_count":3,"received_data":44774,"sent_data":1683,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":6317,"first_seen":"2012-05-31T07:21:21Z","last_seen":"2026-05-25T13:11:20.450856Z","alert_count":0,"request_count":4,"received_data":433158,"sent_data":2152,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/12-TweenMax.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","size":115897,"data":"","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-06-06T23:35:36.256472Z","times_seen":2456,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1779371255","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"07425c89db0ceec1c8bc484aff17ae6d","sha1":"d71f78d02d2c2ffb0b751d31c94c3bb080df3f36","sha256":"849296e986a812b53e41039867f9ac6b85103f7b6e21de6c5eeffd447daf509a","sha512":"a3762e8f9e5a43fbd289f336ebc3d4821e4bd62265622bc7f4f5943b3e12f32b68fd8c915ac39b91e23260112e65abe0da41cb2e85f9b83f2a77dc4dbc1dfd05","ssdeep":"24576:DcnR2K48WX9n4Aw/LuQhLMcgBVMmM5SsC/Td+SmgPgYlFqnH7XhHX6mW1kWUb:DcnR2h8WX9n4AwucgBVMmaSsC/T4SVlC","tlshash":"77755bc5b2c5f46103d355e6a03b2005b33a2859340da068bbbcdcdbe95a98e6377f79","size":1551945,"data":"","first_seen":"2026-05-21T22:07:47.991167Z","last_seen":"2026-06-02T09:41:22.090838Z","times_seen":406,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"155c982ccfa005e623cb622dfa1073ae","sha1":"3736d5781934cae5a9541b0acc48371c720316f9","sha256":"99052d2a9f62a634dfe532786c3b00238049f60e2361a06dd981ab57ae7cc446","sha512":"c092c0d69b56c00a01299d83bccf9667c4c8c2f17f9c164eaf1f94d2e4a387f6983ad99d2b2088d02ddcbb19407924eb0bcb560151ffa54aaaf9676b8284cac3","ssdeep":"24576:cC0s0W7mFH9PLHTm6Q6hrGbCi9F3HiSwzjdAplkp:cC0s0WCFH9PLH66Q6hybCi9F3CSwzjd7","tlshash":"36656cd5b2d5f4a503e301e6943b1001a33a2c1a740da468fbbcdcd7a96a58e6337f79","size":1519477,"data":"","first_seen":"2026-05-21T22:07:47.99374Z","last_seen":"2026-06-02T09:41:22.091589Z","times_seen":410,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/01-ajax-form.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1be30d77e5267cbcf399d6152253e315","sha1":"8875c6e6232be6cb571e8a90e312107a44c0d4b8","sha256":"e9d3e2a6c29998bcec8abc8ec7618f03d61a52ec8d4c7d5281e6ab2ec54ecd85","sha512":"4cbd6c3be98c32da0f0c28b62d20967751728fa9fe94eeaf28b0bf6a3933de82e51c89f923bf90a2d630ba9f026efbe294fe2ea12ae4029718e7f79199a00946","ssdeep":"","tlshash":"3b21af847e6f0b6e1a47221576fd72c9fb2dd1728207622aa7e9083916841cc17c27ee","size":1250,"data":"","first_seen":"2023-03-08T07:03:22Z","last_seen":"2026-06-06T05:17:59.459529Z","times_seen":972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/10-jquery.circleType.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"166a48c628871b0d9c4fa4b0b8f89148","sha1":"b49d5cdda9a57c44a5c636c62d110926725aed37","sha256":"ee2cbf12efc08718618ea22d9f75fae7b23c2e6bc2a078af6034bfe8734ced6e","sha512":"3867adb5dac773168567755adad1ebb0e857ae037153d6b9ba72248686cb1a8ea3a97705ec2112dbb5fa7da498dba56740b57c60743e8218dfbf0904594bc0e1","ssdeep":"96:zOmRTUjwGlj7Sc6YKPDOxhA0g5gfVEAk9SkniseCFU5O9dXLBNq5wp:zOmRojwDnYCKjAR+f29q5yl","tlshash":"a8a19998aa0921290437b77acfde6a48f736532b01169163bebc11d62fb195803d5fec","size":4880,"data":"","first_seen":"2023-08-11T03:08:43Z","last_seen":"2026-06-06T14:53:42.761854Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/odometer/odometer.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"07013b14ea1c5e30722ded722a1dfff2","sha1":"e6b09f4356f4e0485c6c7f73e629a70a1a4a549d","sha256":"b915a94b58cd8566dbe14df96e8fac1ae0466e35660f887109c5d53e5b996960","sha512":"d765c201184b347d618c3fb63144fc68a7318af5f8388ca01d1941287b83c93344d87d10bf1b2824eaccfe7ed8dae18d52ddba4e9adc1cb38109144e33a3f54f","ssdeep":"192:CABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:FBhvk8QecCa07z+Wd/T","tlshash":"ff129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","size":9897,"data":"","first_seen":"2023-03-07T21:40:14Z","last_seen":"2026-06-06T14:53:42.760725Z","times_seen":1222,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/04-swiper.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b74e42eb5a00c128681fb42890676d66","sha1":"af15c1c1d94e85a0e76bd75def0b4d3b64759f76","sha256":"2f06dae9eda7f01aee86f4a386ff1749c24612c5b1e947c6c91f576c4fa8f565","sha512":"272d20406e4580242446d9dca7441ed7d105ddf0c744cc4a914c53da47f7adaff8d23ebb25f872f91feef2d13efd51067bb594eaa31490ecb91b6a2f3123bc24","ssdeep":"1536:OOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8a:wQCL7ji/udoxKRRtYHgZsUgeAq5qOsJL","tlshash":"f4d3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","size":140942,"data":"","first_seen":"2023-03-07T12:21:29Z","last_seen":"2026-06-06T14:53:42.756955Z","times_seen":1296,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/09-wow.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-06T23:32:24.185614Z","times_seen":12722,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/11-jquery.lettering.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","size":924,"data":"","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-06-06T14:53:42.746293Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/_/translate_http/_/js/k=translate_http.tr.no.e6JlbwPeKbM.O/am=BBAABw/d=1/rs=AN8SPfrUVEVS-yqatjbUs8NwtZKlCwjU2w/m=el_conf","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"477d53622ededcabe514679f0dd59ab6","sha1":"d57152742cb7e0f792b98d9f254ba7960f602ccb","sha256":"592255a222af05d3df0cc887f69158fa913257cb0d24549c71ea8384a7ec9ccf","sha512":"0edd2521277fcf5f4e8c51e7c838ec97719b9055e8387e601cb69b24421e347c10ea50bb502e7a5a34df79508d5e739821784601f1ed00e7e50b3521a612b7d6","ssdeep":"1536:Xi2HuL+088hPmSBJDIgUMImmB7Klv4U6R/NaLdrxiIwNWxx:XzSB9pmBKlt6dcxiCx","tlshash":"2873b78cb6a574658353f4a5412f000eb27b69aef8084cacb298d8f1adf5949413bf7d","size":76673,"data":"","first_seen":"2026-05-28T13:09:15.956239Z","last_seen":"2026-05-28T13:59:29.629198Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9bc6f017304e4ddeba004998d9d0251f","sha1":"022b4349476a71ae335344b85408e816e036195c","sha256":"17c908ab60ae52c1c177f1fde377e31340afcaa63df456dfedbc385135635e28","sha512":"75735a08370c8dad6a44b2a839f612899d9f4d407aa5b5c7bfa5a65146d642d1792d759154d0d2befb10287776ee5c1f5938c7e80f5c36a3d938b20bc1e698d9","ssdeep":"","tlshash":"75e02b177031000a14577065d79a78cc3034550b05390c183b9e608a7ff7f5c239d1a8","size":397,"data":"","first_seen":"2026-04-23T20:34:57.039127Z","last_seen":"2026-05-28T13:59:29.672449Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/marquee/marquee.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","size":9029,"data":"","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-06-06T23:28:27.769617Z","times_seen":3851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/08-slick.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-06-06T23:22:58.427184Z","times_seen":99154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.e6JlbwPeKbM.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpXZjjFr2hoADeX0WbZBmwyodCbQw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85756fcf2da14bb557678e3566557e96","sha1":"f29566ba771e62954e18f07bbe03877f9635ba5c","sha256":"cb29af4fef8f588a9e5bcc5a9dd1f918a693b6212316dcf741061f4bdd83087a","sha512":"1ded0a14fd148626c32a39bab99e1a3543b2cc714d8c14c1d6687429d1efe854682c1f6cb06f270c79cf13f47ed89f81ccdeb5b67d56a26c9b9e72742661b361","ssdeep":"3072:k6n1wy2TnRburi6Tuu7QCRyr2ogeyMdGOAKCnVftJ1E5Yu3PmCAuG6dzFMORtwAO:qSZBbtY8JBhkdzzwqc","tlshash":"a794d9cab3a378529262f8a1a47f0147b93dac57b44c4c6cb189d8db2eb08154573f7b","size":429151,"data":"","first_seen":"2026-05-26T19:06:50.602345Z","last_seen":"2026-05-28T19:21:57.833225Z","times_seen":242,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:srcdoc#217","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"888a21ab7fc56d220a59dd25a83b18b6","sha1":"3bc9b8d495cf8e016aadf7e2bba091f2bd8b7188","sha256":"18c0d112e350349ca7390bc25c50a5fc92e9dc9b63416147c7e57851d105237e","sha512":"3dd8c3099c3300b3f74ffbe65e93e383d5c31087fb362f08bb241107c1061ef7dc8b61113851723a8588b54465c38056721341402f6a0072adce178ed3daf86e","ssdeep":"","tlshash":"b73147cdbbb7e0554272209a992f860bf17a2577981cd050e555ccd0fc70e9b447de14","size":1713,"data":"","first_seen":"2025-06-11T00:07:11.79824Z","last_seen":"2026-06-06T23:45:10.338578Z","times_seen":36845,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/03-jquery.appear.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","size":4424,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-06-06T05:17:59.480372Z","times_seen":687,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/07-jquery.nice-select.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","size":2942,"data":"","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-06T20:18:40.185739Z","times_seen":9143,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/main.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"82f759b293fc2c612523d21b901d22e7","sha1":"2da8445a67bc8dac804d34ad1a62b90546895473","sha256":"ac78b265efd7543570891d7615fc3096ce9c016c22eb64ec152dd69155ad2fdc","sha512":"97a2e8fcd6470dfd0ed5d4414215f6a5e4ccc95ace7b89a99d67999237b08411c62e039318a6a30394433504124fd299136edc68708f365e26dee3a25b8de8a7","ssdeep":"96:dY8RkaIrUMhsxmdToN2MXXm5SFkalOEj8aLputCFC3mZdfokoLJL4m3:u8ubrUrm9jW25SKEj8aLputCU2xotMm3","tlshash":"e9121c4db11360a2473b37689f4a9a08ff70051bc242ce52bd7c4ba45f76764a1e2fac","size":9050,"data":"","first_seen":"2025-04-25T08:34:46.229934Z","last_seen":"2026-05-28T13:59:29.634552Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/02-bootstrap.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-06-06T22:58:44.7483Z","times_seen":17725,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/jarallax/jarallax.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ab5d0553462c68698deead6fd45db14","sha1":"fbd564247fd92970287dbf398c8581e19076f27d","sha256":"8a1018e1a85ba6212ccb1670cea88e36b23d6bde0e56d88ca6d53ce69f1c0f30","sha512":"e600fdbb0f9d1caca58bbef68c31eeb0fe955b932b8d57daadeb92de3f795270d0c4a359e4ac6ea116b0c7efb68b449ad17351daacdef3bb2df232e7f10cbd78","ssdeep":"192:H9W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6J7:dIRCYY7GxNfrMKhUPESBAsot6Jrn","tlshash":"7662e89c3221321285fb72ee201f630eb635997481aac951b52cc9fd2f65e8d40f7f1a","size":15505,"data":"","first_seen":"2023-03-08T00:37:48Z","last_seen":"2026-06-06T14:53:42.759637Z","times_seen":816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/yqmunmoj0A","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9c16a93671478a04e67ef6ce8fd8d49","sha1":"01b684e9d048b15a6db62c1089268153294c59e2","sha256":"e9e14e0a77b0bd6574ede9cad8679750cba46508846b46c6da140df5def3e9a2","sha512":"5bddfe37cf1714a45c8be3be1d26c0dfba9b05c59a438fd87322e2cfdeb34f6585c3b86c5ad28adb1e4e75bf812f10792a74a11cbe61e914e6e53a8bc5f1ce6d","ssdeep":"384:boUeJkQCuw6SmbXm0wrA8zuyEQ+EbzXDpGiqJISO9JHW8r08wI+xcXd4:vFj6x0A8z5EQ+EPXDe6/rp+xcXd4","tlshash":"51822a6e7959b93383b108f5a16f620a773549ebd404cc20a405f9897d78ade813fee8","size":18437,"data":"","first_seen":"2026-05-18T13:47:45.536253Z","last_seen":"2026-06-04T16:04:43.518197Z","times_seen":717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"03b76bd3b0e04c97b6ef056034130734","sha1":"ad1a96fcc81ce36b53f62335a3013bd0618d5587","sha256":"0f311a27d9df6158364f9d7bf0a13f8aa5161fc0b64ffd2946472957288a09b1","sha512":"61553be349ec52ab3dc14091311d0b7916f500a8aa92b0be7f8772a9f25f1e41a1f2f658596b958ad4ea0114f9119555f5af55a1841eb780bec403cc45a97875","ssdeep":"192:xbhNmk/7Obf14M63OOIpUTPqZ8BijFLeEJK:xNNH7ObdF/OIphZ8wjFCmK","tlshash":"3622e71ee7017f360faa13c3748f7752b6a480e992646cb5d89c826943b9bc972177cc","size":10577,"data":"","first_seen":"2026-05-14T14:28:59.262546Z","last_seen":"2026-06-06T23:32:39.724463Z","times_seen":316,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/jquery-3.6.0.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b0e68dfbaec1b2543bbd8ab49bc0dcd","sha1":"38bff9f808f5a41db015e90ae62f56892a5b63cd","sha256":"11089c47ad87fc6773877c79c9523004a3d2cfa2642d2fd0e712b9d0ae039185","sha512":"d574a6b4bfb56a7a82cfc235d2bf3fa2bb5ac818754327ff4b1f56c4ba3f9d217cab04fa257730ef1251ce07a57d110a8273c4a599591cd9f988378d0079dc8a","ssdeep":"1536:rSmVXIpfIylRvJxQzizT+oNSTPIyoyw0e+yU2AQGeKcHDv7k07ZBRfhu00CsmmlF:rSmVfBw0pyU2AQZDY+ByCFmH4gaWY/ax","tlshash":"f0e3508976e621319207f07a8d6fcc08b275545f1a8ded057d0c92a59f1883c9bbafec","size":151290,"data":"","first_seen":"2024-10-12T13:59:00.722Z","last_seen":"2026-05-28T13:59:29.668534Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/06-jquery.magnific-popup.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","size":20219,"data":"","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-06-06T22:59:23.972723Z","times_seen":22469,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/05-jquery.odometer.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","size":12147,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-06-06T05:56:29.889289Z","times_seen":632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"a32804136bab09d1fe4cb6774ce1e68a","sha1":"0b615a1f62369636ba1c0f4f0a8a1a2489685fee","sha256":"781f938e722a7dd940f8301c300a035c1bf8591270c64f974046f07143952dfb","sha512":"a747aa328394cd072bc4b2d9926094335d03db6c04ca6df4bf20626bbed4a27c3ad1651778b6d9a03d30d232b921e5770b29c373b626c82095fa91435272750a","ssdeep":"","tlshash":"64f0dcb30136a829c3428634f6c4753de243d5148a6d6ca5322c00b6f2c825a80cfaf8","size":472,"data":"","first_seen":"2026-05-26T19:06:50.774288Z","last_seen":"2026-05-28T19:12:41.88566Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"0470f52ca4eab636c93c56560386d379","sha1":"63ab47a49a6a9ff0d6eef4ca475859b006f13195","sha256":"4290cdfedfc53dc055fd4a8d2cdb34defb9cf18be4c7a267d185af80755ad240","sha512":"305d89bfb97172068d8558c62c9ac9e549c4822ac6820b9f580187d435b6771628e5a99678a5268f30d7cd7c665ffe018ad4c15e792ba329ce2b2902b321ac17","ssdeep":"24576:2C0s0W7mFH9Pf3rmwO6E0vbCi953HiSzzjdApFGF:2C0s0WCFH9Pf3ywO6E0bCi953CSzzjd5","tlshash":"4e656cd5b2c5f4a507e301e6943b1002a33a2c1a740da468fbbcdcd7a95a58e6337f79","size":1517676,"data":"","first_seen":"2026-05-22T03:31:47.313128Z","last_seen":"2026-06-02T09:41:22.092346Z","times_seen":380,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/05-odometer.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/05-odometer.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 434\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0db2ffb579367350645c5cce8bcb622","sha1":"f52705958f241317f66b5ca2153cee1c1aa8b892","sha256":"6613bec6b1e7bf01e3507ca03d1f4baeeb321d13275fcd99ee7fc85f3025e89f","sha512":"4312b7eec24f918e3fdef8d00e35b3fcbc47477e4eae2f4299ea103e1926466d14d3b60634b539e26132abcf654de1ae13c40e47dc44a482cde7f5ce669618b1","ssdeep":"","tlshash":"ee71f51d1f60132463367406b7d927a0fefcb9525623e59db74aa44bcd03db9c288e17","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-06-06T05:17:59.428973Z","times_seen":411,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/odometer/odometer.min.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/vendor/odometer/odometer.min.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 406\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3116), with no line terminators","md5":"c5c5fd142cb067412692ca3202cf8884","sha1":"839930805cd5086af7bc88b4248d50f533bab7c0","sha256":"c023b507dce43045404d4f737df6672956dc2cb3dfca9dc61b74480219315ef0","sha512":"71b1a3dea5ed53d1a5356cbf3d09181b20f68191ac7a2b9edc31a48543bb0b47be25fcf4ec515b0cbc060c74d3687b9af4490ea4b07c3b1a4b59ede74dff6a8b","ssdeep":"","tlshash":"8351e2154f91136863367506bac81b60befce9015123e98e735da54bcf43db9e398b0b","first_seen":"2023-04-08T14:13:01Z","last_seen":"2026-06-06T14:53:42.734412Z","times_seen":1758,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/footer.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/footer.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2628\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":25922,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6f198b4cf6a10610c9eb394b96098e63","sha1":"6e85b22a661dc59eb8b041f37e8ab73f6091a60a","sha256":"55c0af67620e9f272b9b614eb29186a96147753f3f04e729393aee250a31190d","sha512":"14f44f431eaa12cf932f3ddc08cd48adaaa41c6f1e7ca0b85bc132d4b92c5f4cc75d717f74397580445e78741b60e63605eb5db31c9faac7f76bb074e39cf922","ssdeep":"192:xFR9oPeEKNlfUl6lgIK4dXOUlm+k4C8fVSYOLwXLf4SnleFY4L9KIUlcLrRPC8fA:kifRNUP5MD1dL","tlshash":"00c2ce5c762a030666334bb997e25244e7b051c7ee0606d97f8813518ffb2fc8692daf","first_seen":"2025-04-25T08:34:46.288127Z","last_seen":"2026-05-28T13:59:29.642172Z","times_seen":37,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:32:27 GMT\r\nexpires: Sat, 22 May 2027 14:32:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 513373\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-06T23:04:16.001862Z","times_seen":29004,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":16,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/fonts/fa-solid-900.woff2","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/02-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 150020\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":150020,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280","md5":"d5e647388e2415268b700d3df2e30a0d","sha1":"97f0942c6627ddd89fb62170e5cac9a2cbd6c98c","sha256":"886c86112a804ef1ddd1cb206af4c8c40e34b73c26652ca231404aa35a6b30d9","sha512":"50b2ffd7537d0424286936cb7ba566004a664f447e4aaac8fa40ceb2850ead6cdb39c957515ae05a07aaeb8f6e3e428c4b95e4efa3edcadc9473e9e200bb47d6","ssdeep":"3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5","tlshash":"03e312e8c98e8e24452e2b975b436d4cfca1c97d77bfba0e2b5401b94f1e0521b34a71","first_seen":"2023-08-04T22:28:10Z","last_seen":"2026-06-06T23:11:43.990729Z","times_seen":36821,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":95,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/script/widget/config/yqmunmoj0A","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /script/widget/config/yqmunmoj0A HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\ncontent-type: application/x-javascript\r\ncontent-length: 697\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: gzip\r\nexpires: Thu, 28 May 2026 15:08:40 GMT\r\ntest: azazaz\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9p-up-gc45\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1383,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JSON text data","md5":"35df23fe0c28733e0532ba269a212946","sha1":"3bda1974408678e077351940fb258fffd81d6c21","sha256":"2e65a2e999038bf04e77a71f1d51f929f8deaa43e0e871f0cce0fc320b408b04","sha512":"6a79ffee4d6b9379b37b0c8974ab05248e458bcff078367239f9a0f576f86b8cd9e7b25548760a08704ea29c3b11884b2afdd5709879b5023177f83574a8a36f","ssdeep":"","tlshash":"b72153e60d48586b0d857ec7a11bae07283c82a7efc54f75cbd89c2c10a33d5131720b","first_seen":"2026-05-28T13:09:15.919027Z","last_seen":"2026-05-28T13:59:29.625227Z","times_seen":2,"resource_available":false,"data":null}},"time_used":498,"timings":{"blocked":139,"dns":1,"connect":72,"send":0,"wait":217,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/banner.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/banner.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2130\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":18446,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"52c2cae2a4b77b6ce36628e14067aec5","sha1":"f6943bc5ac23e2fc59d5619ba8962303438f6f5b","sha256":"e145621875f9144bcb6dda799a63c2e13991757420aeaac5933b85d6c4fce594","sha512":"3d47f6a7246a2ef008e085afbfba00f470945fdef7255a8b8c7ff147d14a267e4ce548b79685ba6944d0648aab23ffaba0cb9bc88fe10918f68afb77c7e36919","ssdeep":"384:/7xF67ZxlslBl+lOxF67nxF67YTdDxF67zxF67iwV2unVRnVrVHV1V8t:TxF67ZxlslBl+lOxF67nxF67SxF67zxh","tlshash":"3282da294e1011059233d76c6fe50b58e6799043ee12049df3c6264bcff66bc636afab","first_seen":"2025-04-25T08:34:46.237708Z","last_seen":"2026-05-28T13:59:29.662982Z","times_seen":37,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:32:27 GMT\r\nexpires: Sat, 22 May 2027 14:32:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 513373\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-06T23:04:16.001862Z","times_seen":29004,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/fonts/fa-regular-400.woff2","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/fonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/02-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24488\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24488,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24488, version 772.1280","md5":"747442fa76f1d9a31f9a54a2e8a4b448","sha1":"07fc0ae14bb3187839082aed3bca11dfb1e04524","sha256":"9169d8be7a8177e5a92a4d04b6de7f6504b938573bf4da5889871c4f376d3849","sha512":"274dbe5bc31c560d2cc2d15afe5485687b2f7dd0ee24ffed99627310ea36a6a3cc1c91e22368f909d056f4faab051838d469e0bfe8a30169b735aca5eb0f402f","ssdeep":"384:Ok8mTTNu15tM1xuB9dYY7YRHmOdjzUJsAr4p8Oq7kpPyXBpqrhDRBybCpMuT33SI:OGg15tM1xuBYY7YRHmcjzUJJr4p8Oq7a","tlshash":"0cb2df2cebab2746c908513a2ec4deef3dac1b674d0461298c45edece8847281d9c964","first_seen":"2023-08-14T23:16:18Z","last_seen":"2026-06-06T22:45:07.078367Z","times_seen":9162,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/agent_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:42.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/agent_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:42 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 3760\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a047476-eb0\"\r\nexpires: Sat, 13 Jun 2026 14:36:15 GMT\r\nlast-modified: Wed, 13 May 2026 12:54:14 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-14T14:36:15+00:00\r\nx-node: m9-up-gc91\r\ncontent-range: bytes 0-3759/3760\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3760,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"8e9a165c4cb185ffd0b2658fa088e43b","sha1":"195873e5e8bbb2f5ecc32d95f90d6fb75817a649","sha256":"ff81aad05612f90cf97c238f219765884e5cbf49351d8dc96a4a063c598c3f43","sha512":"6ef9fac16ac2835ecb95ab077270293a95a3597fd28fb053b32cfeb6b0a72b52c0ee51b0504a463ac9db1d8a3b2c6c41f113012d6364d16feb8e01821a3221ff","ssdeep":"","tlshash":"c771295c69348528f80b31b89f4b765ac1512c19a8f2ddd4a62818e7377b36a678820e","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T21:57:38.019288Z","times_seen":16386,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/07-animate.min.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/07-animate.min.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4618\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":68601,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"8ea67bf7d4ccacd55a30e2046f9241b2","sha1":"9e7eadfdcdf03a5664aaef256c76248ee786dd3b","sha256":"5d825a730b53e73c1ebf5e26ad9b5fc8e67ba28324ac6a55d5c966f4df4aa7b6","sha512":"1336cc299baba59cdcd3af3d2a9968a721ecc3ee2fbf15f62d295c761de8e88488caaaf27a8002f044ee3084e6306d6bde9a680c61bb5de71ef8056244c7f14a","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvw:LIW/yffHf7SpS/fjf7","tlshash":"9063096929e1114466370a15c7df9f78263ce5a31826ecfab3d2588bcf41fac23c9617","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-06-06T12:33:58.856405Z","times_seen":768,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/project/project-one__img1.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/project/project-one__img1.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 71540\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":71540,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"5957be12c29d935a33afad2b63e7f16d","sha1":"5b6ce0549211cc9ff7c33cb552f51351f178b9ec","sha256":"7763d7dc5835ce28d8f27b8762c236f70202e187ae5717823bd4f06aae415484","sha512":"201352987ae1e1ecaca4118c861da8e22f61c74c08f751d565a45624e533537de8b59691919800bf5f11ee8a0f837b60057b43f2752b5a1606213ab4518c3290","ssdeep":"1536:qDrmJBWqg7FUdmQywLtDYEJzb1AdztGuP5GNZjhYqm:q2BywLhX9mdz8pNkt","tlshash":"f563f14fdeef230d4d14b0f5cae26605b3026accf1631c179aed489ca89b2c5b875d66","first_seen":"2025-04-25T08:34:46.30648Z","last_seen":"2026-05-28T13:59:29.655164Z","times_seen":33,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/testimonial/testimonials-one__img1.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/testimonial/testimonials-one__img1.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 5849\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5849,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 95x95, components 3","md5":"47192423ea985f37721675100042fc55","sha1":"10f7d98683c25b12d5668bfafe85a48571574069","sha256":"9786c4d265ec98e255b1b95a79530ddbbd3cd0d8bbd882477a4ad5cde54c0046","sha512":"9709400067e42d30f1cd7d471c3e37c9415cd1bfcdb58c7316af14454c029e6453fdb9c8fd36215e4cec058e3ff417039c03ba7c01d64b4503eb0790c85f7dec","ssdeep":"96:RZzVDjmf0vQlsyYGrtUF/NOWmDFnRW7UE2PPSGZs/hLOS9x00gbOBqYOfxs05rGv:RjDjBv5y1kCgT2PPSGZsQ4OfW2M","tlshash":"47c19d83edd505056fc76d3380e4e7a05e50ba6ff902aa8301851b8da8f2b2573d3b95","first_seen":"2025-04-25T08:34:46.255349Z","last_seen":"2026-05-28T13:59:29.648702Z","times_seen":32,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/05-jquery.odometer.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/05-jquery.odometer.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3694\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12147,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12122), with CRLF line terminators","md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-06-06T05:56:29.889289Z","times_seen":632,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/services.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.060Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/services.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2429\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21434,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d02a940423ab0e8904615d64567531e5","sha1":"88c9f946f90ccd4421dda68ad8f15ce40f211bc7","sha256":"2086a4b573cbaf41e3f3bcb509c109f0bd32ddaac1337e05c9f335af6b772f0c","sha512":"643cc00ad283ac60745a6e1bd04b11165e8193439d2df381445a94c5806beea0b7cdb4735f2e52eff6fc7edcfe3fbbc8e32032e74f87c46e51a0bf88ba51f9b6","ssdeep":"384:RTUQMqkSmdoy6ZKojT1yBq2wDcbgZ2ZzUr:RTUQMqkSmdL6ocizUr","tlshash":"4ca23f6cc3150159ca37f7745fd23248e2285063ff271548bbe85115aff9bac8392eaa","first_seen":"2025-04-25T08:34:46.258086Z","last_seen":"2026-05-28T13:59:29.642736Z","times_seen":37,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:32:27 GMT\r\nexpires: Sat, 22 May 2027 14:32:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 513373\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-06T23:04:16.001862Z","times_seen":29004,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":32,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/09-slick.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/09-slick.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 483\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-06-06T23:31:55.378563Z","times_seen":65587,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/project/project-one__img2.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/project/project-one__img2.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:12:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 54839\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":54839,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"bd137a133ceed37a99ed7e954821cc09","sha1":"1e9bb0fbaea13eed8a577012715d5ddd31a6cf64","sha256":"dbccba0b7e79f69dac45174d7a1b80a48314a4657766b0ac1d7c012fd17d979f","sha512":"2ff7c3e35c9594fa6fd0be01cda1962480ee590385d0724c7dfe3b0317bfe47b0ee2f342a8768a836a9fed7e0672e3a9441283bf8c6ab74ca4245be9c7c0551b","ssdeep":"1536:A9QfNuBh11yKtmlU47XrnMfjJTYFULkNTYD:i3BvQKt+U4rrPULB","tlshash":"2e33010c37d3343b79b919f388ad093f76062caaf7188369016a194fdd8d968330766e","first_seen":"2025-04-25T08:34:46.292987Z","last_seen":"2026-05-28T13:59:29.633589Z","times_seen":32,"resource_available":false,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/breadcrumb.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/breadcrumb.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 430\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1955,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"088169fef5061e90c703850df5977b20","sha1":"391202824ba1d0dec2cad2ec71954e37c7b45960","sha256":"0f3e44d626d247974685747a4c99da09f0b6718647f57ee90d9aa8b11f83f2ec","sha512":"1f82acd9ed79ff044e56e91cbee679b039f6552afc82694d6e1ad2e5f485b5ce406949febb3fd371c7cc0f32b32234f878396a917892dc3ea55d650a7b4b444a","ssdeep":"","tlshash":"d841bb08873a6261b9378768b7d62e59d36811439d0a02a8bfc4660e5ff537cf281f5d","first_seen":"2025-04-25T08:34:46.31076Z","last_seen":"2026-05-28T13:59:29.624722Z","times_seen":37,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/da8269d/locale-en-US-json.js","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:42.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/da8269d/locale-en-US-json.js HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:42 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3419\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-d5b\"\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-28T10:24:32+00:00\r\nx-node: m9-up-gc231\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10579,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10552), with no line terminators","md5":"03b76bd3b0e04c97b6ef056034130734","sha1":"ad1a96fcc81ce36b53f62335a3013bd0618d5587","sha256":"0f311a27d9df6158364f9d7bf0a13f8aa5161fc0b64ffd2946472957288a09b1","sha512":"61553be349ec52ab3dc14091311d0b7916f500a8aa92b0be7f8772a9f25f1e41a1f2f658596b958ad4ea0114f9119555f5af55a1841eb780bec403cc45a97875","ssdeep":"192:xbhNmk/7Obf14M63OOIpUTPqZ8BijFLeEJK:xNNH7ObdF/OIphZ8wjFCmK","tlshash":"3622e71ee7017f360faa13c3748f7752b6a480e992646cb5d89c826943b9bc972177cc","first_seen":"2026-05-14T14:28:59.262546Z","last_seen":"2026-06-06T23:32:39.724463Z","times_seen":316,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/09-wow.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/09-wow.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2572\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-06-06T23:32:24.185614Z","times_seen":12722,"resource_available":true,"data":null}},"time_used":427,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/testimonial.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/testimonial.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1821\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15504,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ad923dbeb52afb01d7cf6e603bace799","sha1":"134445954367981f102eab479afa3224fb6e9a1e","sha256":"72dda3dfe7c0ec9f567dacdaf350f575e67a845c873e6e62273cc371c7fd3ddb","sha512":"a87775f1b02866f073c736d89aa6630ec62a78683a395ec43eeea7bb53fe0f87cb4debf6bcf0341631bc90d02196dbbf042c4ef6b6e5c520c1d2d0dc0bb60836","ssdeep":"192:KcUl04QoZal+RbxZLD3/jUlcEi6IWUl9+8hgQwES/U4bp8Zal+RbxZLDf/RUlQGH:CvuYI4puYWE+cwQubT","tlshash":"a5628c4e971a02139773f7b4dbd05348d3319047df120a69ba806616dff5b38e1a2e6e","first_seen":"2025-04-25T08:34:46.269117Z","last_seen":"2026-05-28T13:59:29.651031Z","times_seen":38,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"node-ya-10.jivosite.com/widget/status/2378269/yqmunmoj0A?rnd=0.4908282498267159","fqdn":"node-ya-10.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"185.71.67.146","port":443,"asn":43298,"as":"Storm Networks LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/status/2378269/yqmunmoj0A?rnd=0.4908282498267159 HTTP/1.1\r\nHost: node-ya-10.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: 185.71.67.146\r\ndate: Thu, 28 May 2026 13:08:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\naccess-control-allow-max-age: 1728000\r\naccess-control-allow-origin: https://gloexpress.icu\r\naccess-control-expose-headers: X-Geoip, X-Botmode\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-security-policy: frame-ancestors 'none';\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-botmode: no\r\nx-frame-options: DENY\r\nx-geoip: NO;03;Oslo (Alna District)\r\nx-powered-by: foxy/6.0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"55ad24367b5fbc815e7d4942c6a52011","sha1":"9994f826495cc249eb6d8d9c35f1ea180847bb21","sha256":"882f0191ddddc2973b675f5c7af4fb2e2c732df4d0765814c389c109115d475d","sha512":"f0f99c5a6fd03f9eb8ad0c1846c9af3e7cb5211482f6d83dec9fdb492b74aff11b821005a155d8c4da1e86746d4ece16dee952c6618f8e2c9ba8df1fcf0b490f","ssdeep":"","tlshash":"a0a024350111d0050370c371d1d73d470131010533d1d03cf155500473f75f004dd007","first_seen":"2026-04-23T20:34:56.997817Z","last_seen":"2026-05-28T13:59:29.653447Z","times_seen":4,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":73,"dns":23,"connect":19,"send":0,"wait":67,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBAABw/d=0/rs=AN8SPfqP_HaryGJFfkiCENzXW3iqcibGlw/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 24 May 2026 10:06:38 GMT\r\nexpires: Mon, 24 May 2027 10:06:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 356523\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-06-06T23:45:10.300996Z","times_seen":64881,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/js/bundle.js?rand=1779371255","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /js/bundle.js?rand=1779371255 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:41 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 342498\r\naccess-control-allow-origin: *\r\ncache-control: max-age=86400\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-539e2\"\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-27T13:49:51+00:00\r\nx-node: m9-up-gc98\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1551945,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d335b09bd80d314cae6eff2a112fd378","sha1":"b0501f2069f3cff4589423f4dfa928696855bbcb","sha256":"95a62828cfb2dfcccd5b2fe9f49737a2023658b7c6c18e3ba2741d66d7a2c29a","sha512":"7dff5fec411fe138760b26762015e8bc3e0b0a0e77288f8f478397134073d5deb066bda519d43a6b06eea49d75907e5ff8348c58d57416ce17c131ef3aab898f","ssdeep":"24576:DcnR2K48WX9n4Aw/LuQhLMcgBVMmM5SsC/Td+SA:DcnR2h8WX9n4AwucgBVMmaSsC/T4SA","tlshash":"a1255bc5b1c1f46503d355e6603b2009b23b285e7809b064babcddcafa6759e6233f79","first_seen":"2026-05-21T22:08:58.783028Z","last_seen":"2026-06-02T09:41:22.083356Z","times_seen":408,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:51.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: x-goog-authuser\r\nReferer: https://gloexpress.icu/\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://gloexpress.icu\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Thu, 28 May 2026 13:08:51 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T23:09:45.281132Z","times_seen":16194959,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/contact.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/contact.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1115\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7021,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"71c520f3772074562c68285196124ac0","sha1":"bee0ac015ecd27fe3166aad3d3394e6c36de3eb9","sha256":"29db2f8cc1ba872ab36ebd0d64c7b6144e0484f359b92ae4c9c3d3fbe997b937","sha512":"e75011c66b138642e0c39be4c3a8b3d5a0a7cffc2f2ef981df0a18bcea85877fd33918710cb0ca8462349513477f9ae2acb5602e721542db0334efc3dbef2d7e","ssdeep":"192:RFgp4m+7CsUl/gF+ci2fHpIp1alUlub9FD4FvRdy:0pQ","tlshash":"fde1bddca221011e5673d76977e56b14d761a087ce0f0689fb8092584ff67fc8e12f89","first_seen":"2025-04-25T08:34:46.297466Z","last_seen":"2026-05-28T13:59:29.643309Z","times_seen":38,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/03-jquery.magnific-popup.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/03-jquery.magnific-popup.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1655\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7283,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"315a8701db84cb30ea6b5341fc72e96d","sha1":"924365f00528401bf8209941cd63cf92026f1cb0","sha256":"4109ef354421000c38591be5a59f12d87a211f8f7902cf79f084d4380d788dff","sha512":"c68052a4da98decf8ef3c0c9caae99badabf5c0f771f1d0cb44c1826465e6c7a413a7944db95dd2912be5e886da647942990d294379b56ba04a3e4918c06b93c","ssdeep":"96:0Qsi7sStyXYV8RTQEpz8Z1dni9mwDYDnuuw6lYikXhrqdStZFvtFhBF0FDLEx:NFtyXYoNAUJQkXZqdStZFvRBFwLEx","tlshash":"49e1e198db122302d637daa4e7934729b7120073eb0305abffe1584ab7d995c0625fd9","first_seen":"2025-04-25T08:34:46.240733Z","last_seen":"2026-05-28T13:59:29.622161Z","times_seen":38,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/logo.png","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Sep 2024 17:26:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11461\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 846 x 283, 8-bit/color RGBA, non-interlaced","md5":"ba45c9fb8137371cc4725f72928a47b5","sha1":"d79b4285b2d88102d2f92e5f629fb9cf44c69676","sha256":"f216f18f7102b1263cfa707dcadd5fc9a3eb4fdaf5006f6d0427df3f29ba2b47","sha512":"33dc01222e4b45ca375a4c88902b5d0757aadb4fc67cbbddf0d6b6ddb0419a1b7d532795ab38f846197d9198d5454cf141ce902b96e42d24fc3fe2d13920a015","ssdeep":"192:/SleId55dDHRGVfg97OLuwqhWNhGM6o/YUF4ronbD:qI85dDqO6OAlf4ronbD","tlshash":"c6328d9588aad39561ac69dd2835d4c4b17be23adc701fd0650dfa0fccd9920b1cc9d4","first_seen":"2026-05-28T13:09:15.942192Z","last_seen":"2026-05-28T13:59:29.629748Z","times_seen":2,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/jquery-3.6.0.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/jquery-3.6.0.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 35930\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":151290,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (755)","md5":"7b0e68dfbaec1b2543bbd8ab49bc0dcd","sha1":"38bff9f808f5a41db015e90ae62f56892a5b63cd","sha256":"11089c47ad87fc6773877c79c9523004a3d2cfa2642d2fd0e712b9d0ae039185","sha512":"d574a6b4bfb56a7a82cfc235d2bf3fa2bb5ac818754327ff4b1f56c4ba3f9d217cab04fa257730ef1251ce07a57d110a8273c4a599591cd9f988378d0079dc8a","ssdeep":"1536:rSmVXIpfIylRvJxQzizT+oNSTPIyoyw0e+yU2AQGeKcHDv7k07ZBRfhu00CsmmlF:rSmVfBw0pyU2AQZDY+ByCFmH4gaWY/ax","tlshash":"f0e3508976e621319207f07a8d6fcc08b275545f1a8ded057d0c92a59f1883c9bbafec","first_seen":"2024-10-12T13:59:00.722Z","last_seen":"2026-05-28T13:59:29.668534Z","times_seen":79,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/12-TweenMax.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/12-TweenMax.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 38559\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":115897,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32043)","md5":"7ae6465dae50c862dc55a547caa86a66","sha1":"38cb690397f9eef5a9592efc9ce9e936e4e863cb","sha256":"a863a77e9ee263a0ec9c1e792bb33ed0f663582b7369f472261df7b6040990c4","sha512":"e8c08fb3d7db488b7a993a491f62dba3d2a4ef581c83063ce410aa2463f4e31f8ed3c5b79bf3a229f32231ce1540a627f830ad010c291ae996783d1c002791b1","ssdeep":"1536:jjm/F0VPBJ7jG/D+EH/GPJBpYSiZAr0GOlygZYzw6JcIfGxlLYiGsYVVOiE:jC/Wv51/vme0lybJXkYiGu","tlshash":"3db318c5312270128497269a557f0a47333bddbab4098d2cf589c5de3e1ce8921aff7a","first_seen":"2023-03-07T12:12:24Z","last_seen":"2026-06-06T23:35:36.256472Z","times_seen":2456,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/jarallax/jarallax.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/vendor/jarallax/jarallax.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5057\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15505,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15303), with CRLF line terminators","md5":"7ab5d0553462c68698deead6fd45db14","sha1":"fbd564247fd92970287dbf398c8581e19076f27d","sha256":"8a1018e1a85ba6212ccb1670cea88e36b23d6bde0e56d88ca6d53ce69f1c0f30","sha512":"e600fdbb0f9d1caca58bbef68c31eeb0fe955b932b8d57daadeb92de3f795270d0c4a359e4ac6ea116b0c7efb68b449ad17351daacdef3bb2df232e7f10cbd78","ssdeep":"192:H9W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6J7:dIRCYY7GxNfrMKhUPESBAsot6Jrn","tlshash":"7662e89c3221321285fb72ee201f630eb635997481aac951b52cc9fd2f65e8d40f7f1a","first_seen":"2023-03-08T00:37:48Z","last_seen":"2026-06-06T14:53:42.759637Z","times_seen":816,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/partner.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/partner.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 328\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1116,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"17f0ca413b803424a06fda25b224919a","sha1":"d352c89c8d3a5ad001107efc93b9ab149b40bfbf","sha256":"c2556a050645525097b5fcb61315d2d60f50dc081d43622b5064bfca2573c04a","sha512":"f7422adc08cb94b3b7e2e557d07c38fe7208c4ef632669ab6c8d6141a4ebea0a2db32ab216cbac01bb2a2c3e48c463cbd9f287c0e7a69b5c92e4d402d092544f","ssdeep":"","tlshash":"4521c29a1606012945739b681ff12389d4b08143db2708ec7b8613648fff3acc6a3db9","first_seen":"2025-04-25T08:34:46.300003Z","last_seen":"2026-05-28T13:59:29.65911Z","times_seen":38,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-28T13:08:39.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Wed, 18 Jun 2025 21:36:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6669\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"GSAP","description":"GSAP is an animation library that allows you to create animations with JavaScript.","website":"https://greensock.com/gsap","common_platform_enumeration":"","icon":"TweenMax.png","categories":["JavaScript frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":59438,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"07efa4c89d69a2a3c2c9d4e726bb049c","sha1":"7da8a3e6f2f74269eac490a16d82553eeb27d744","sha256":"375db703edcdee79330fc73b20713b57cfeb37249ad0d073b6891f910b23d17f","sha512":"a28a229a91bc4749e5c0191fd597b73530c532f7529f7d1f8bfeb70aaccb610e944c5c22aaa2bbb695e3daa14a8aaa2378562f8fdc63357f5d7addd219142e81","ssdeep":"384:RtLAWg4QzSgZxp8RZt0qnnLASEwvSEWYtlPCNPjNinRruU:XLA34QzSgZz8PkSnaEWqMjUntuU","tlshash":"d943ba2164f00127029291e66eb12f6bafe1ea0bcd5f5a6072bc0fd95fd3d86dc03659","first_seen":"2026-05-28T13:09:15.947276Z","last_seen":"2026-05-28T13:59:29.667469Z","times_seen":2,"resource_available":true,"data":null}},"time_used":998,"timings":{"blocked":449,"dns":273,"connect":87,"send":0,"wait":93,"receive":1,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/06-swiper.min.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/06-swiper.min.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3821\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13689,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (13425), with CRLF line terminators","md5":"6604e7f8fbafb482f29e0dfa78e0e2e5","sha1":"520ff7d839d3a94c855c9d75a76b5b166a5bf1b9","sha256":"6d0a4af85bd32d089f36e072c98a15212d4468d562be75c0c3ef16c611c971cf","sha512":"be16d57b531449c3df6ce164fb091adf7afb184d408f3bbfb0087d2d9fcf93363b97b1e62d78d0662dba3c087df296b418b25b165386d1e0c05e947d759e31d6","ssdeep":"384:T7UbeQS7Rgx9BU0m/XCcif65W/1mXA82FHpx:Tob67gbhm/XDif65W/1mXA82Fn","tlshash":"a352236417003837f3774f6e46a1e6b59f60cc838a934d9db2c0dd44d6f98b9121eb95","first_seen":"2023-04-11T05:32:16Z","last_seen":"2026-06-06T14:53:42.766079Z","times_seen":1170,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/fact-counter.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.068Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/fact-counter.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 875\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"ea4f3a0d3e7ed88343eaaa7d4da76277","sha1":"127bdfb9a1185342ed9c642b95ca5cd72b712c9c","sha256":"e095ad9c7fcc253cc08e714d5cdd738ec47920482c2cff82eab251fc51a55db2","sha512":"171a1dedeb15ac503fee99d381a5a30a11dd9d59248b8c5c187147fd1ba24ea900f52c87b8ade5927b605d458dcfba3d18394473a590fb4d98dab308ef45d628","ssdeep":"192:MiM0w4uxUlIzgUls9k4SYgxTteJmliAJIP9+xVrUlb9EPL:9qA4","tlshash":"a4d14b5c671351155f339bac2bd51365f1619093aa0e02983acad2068fffbfc8242f9d","first_seen":"2025-04-25T08:34:46.302354Z","last_seen":"2026-05-28T13:59:29.666444Z","times_seen":38,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBAABw/d=0/rs=AN8SPfqP_HaryGJFfkiCENzXW3iqcibGlw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBAABw/d=0/rs=AN8SPfqP_HaryGJFfkiCENzXW3iqcibGlw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:34:30 GMT\r\nexpires: Wed, 26 May 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 153250\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-06-06T23:09:22.921523Z","times_seen":10164,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":81,"dns":1,"connect":31,"send":0,"wait":29,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/fonts/icomoon3317.ttf?m31ns","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/fonts/icomoon3317.ttf?m31ns HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/10-icomoon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: font/ttf\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19144\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34912,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"104f05a605e860cc8af4b4527a1879e6","sha1":"cdb2de110f39a0d516e9d15d0dd86e29227f806a","sha256":"9cc34f06fe4bc4b2932fb01550a80a4b90840c80f735775867c7755e9c515f60","sha512":"bca35d494be40cd9fdac40e5407669da1b54e8316e3f81909c53e0abf8473d3e683816d9658ca3e9906f490314ee7a2f6988f9af906a4b09382bd3d67fdd4de3","ssdeep":"768:7xdcAflTO6XoD0PuKVq6eM0vbW6nGSrmZUhLgUvzVzTFjgI:7DG0NQAYW6nVrEUFf3","tlshash":"0bf23a0bdbeacf65d803e77e1a12212ddddeca2d433d9686a9c06c10ed458ec4d2c997","first_seen":"2025-04-25T08:34:46.231119Z","last_seen":"2026-05-28T13:59:29.647684Z","times_seen":39,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":108,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 13:55:20 GMT\r\nexpires: Sat, 22 May 2027 13:55:20 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nage: 515601\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6225,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-06-06T23:16:10.095355Z","times_seen":69324,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/css/da8269d/widget.css","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /css/da8269d/widget.css HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 25561\r\ncache-control: max-age=864000\r\ncontent-encoding: br\r\netag: \"6a0dbb3b-63d9\"\r\nexpires: Sun, 31 May 2026 13:49:38 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:35 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-21T13:49:38+00:00\r\nx-node: m9-up-gc41\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137948,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"1f06fa8edf5c67ac64217c0f32bd0432","sha1":"6b2f6f757cf0593604e0047c6d6eee2535821217","sha256":"c9743d00e642be1dae8fa276ac280a552b9ae3a5d11fcabdbc39fd40f0cd7deb","sha512":"40ae38b128d2b67493f19c83f856cae6455a18384846ee07264d5735fb2aee14897b905ab9bfca326144276a3c7933fbc83f93c514b5399339c1a6126cda2c13","ssdeep":"1536:SL5GTKVyQ6V6Krh0Duwyu2o2ESipVyG6D6v+Jlr4pUU62FkPQLi4OhlODDd6zcj1:P4VouHysex/VI","tlshash":"24d3e96aead2953ce51e541ac8c5aa3ca53de502cf330daff344f3e187ca6e21276505","first_seen":"2026-05-21T22:07:47.943222Z","last_seen":"2026-06-02T09:41:22.083889Z","times_seen":414,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.110","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:36 GMT","end":"Thu, 30 Jul 2026 15:51:35 GMT"},"fingerprint":{"sha1":"E5:96:47:77:13:A6:29:CD:FF:81:1B:F8:39:BC:A7:BB:8F:64:3A:E7","sha256":"0F:2D:F7:5D:E8:A1:BF:0D:8E:B8:3A:AC:9A:9D:1B:82:66:8F:C2:E9:77:F6:7C:BD:32:3F:86:9C:97:9C:2D:5C"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76673,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2113)","md5":"477d53622ededcabe514679f0dd59ab6","sha1":"d57152742cb7e0f792b98d9f254ba7960f602ccb","sha256":"592255a222af05d3df0cc887f69158fa913257cb0d24549c71ea8384a7ec9ccf","sha512":"0edd2521277fcf5f4e8c51e7c838ec97719b9055e8387e601cb69b24421e347c10ea50bb502e7a5a34df79508d5e739821784601f1ed00e7e50b3521a612b7d6","ssdeep":"1536:Xi2HuL+088hPmSBJDIgUMImmB7Klv4U6R/NaLdrxiIwNWxx:XzSB9pmBKlt6dcxiCx","tlshash":"2873b78cb6a574658353f4a5412f000eb27b69aef8084cacb298d8f1adf5949413bf7d","first_seen":"2026-05-28T13:09:15.956239Z","last_seen":"2026-05-28T13:59:29.629198Z","times_seen":2,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":92,"dns":3,"connect":15,"send":0,"wait":111,"receive":0,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/06-jquery.magnific-popup.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/06-jquery.magnific-popup.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7046\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20219,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087), with CRLF line terminators","md5":"b37d7edf99565d3858eaa1ad80df3cff","sha1":"786a4343711e9af5e5dfcc493e7d2331b48875bb","sha256":"b0a45cd5aed66e27bd8ee861d0e3b782c8e79849bde32f90f078b9f2451a36f2","sha512":"a48797bf6796ab59e1b40003c98ac999a877c8b07adbf317b087ff49046c943a11c3922b92f228e88c1c770b1e4d80b75240c79e9958de50fcf1fbb9c35dbd1a","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:iPBIt8I5h5t1qkOLCMst","tlshash":"bf921894f2b2b21383a735b8686f60093a729952ed06c855a55d94d87efcec89027f3c","first_seen":"2023-03-07T01:03:21Z","last_seen":"2026-06-06T22:59:23.972723Z","times_seen":22469,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/main.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1835\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9050,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"82f759b293fc2c612523d21b901d22e7","sha1":"2da8445a67bc8dac804d34ad1a62b90546895473","sha256":"ac78b265efd7543570891d7615fc3096ce9c016c22eb64ec152dd69155ad2fdc","sha512":"97a2e8fcd6470dfd0ed5d4414215f6a5e4ccc95ace7b89a99d67999237b08411c62e039318a6a30394433504124fd299136edc68708f365e26dee3a25b8de8a7","ssdeep":"96:dY8RkaIrUMhsxmdToN2MXXm5SFkalOEj8aLputCFC3mZdfokoLJL4m3:u8ubrUrm9jW25SKEj8aLputCU2xotMm3","tlshash":"e9121c4db11360a2473b37689f4a9a08ff70051bc242ce52bd7c4ba45f76764a1e2fac","first_seen":"2025-04-25T08:34:46.229934Z","last_seen":"2026-05-28T13:59:29.634552Z","times_seen":36,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/blog.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/blog.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4059\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40847,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"81e7d73c0304b622dcaf027c99332255","sha1":"3bd4e6806b3a7cf6775c3276edabe0b0d80ed7b2","sha256":"fe1609a69891caba63be8a2e0150e9bd2ebec794d13be6a84b32836fbfe49ee0","sha512":"0e5f1a6286025a51d3969dfa774c69b5d569a9139fe6666f69ae75c6453881f677ae0c2ca3663de7f3de0019e84703d3488face6cc8120fa93884187900a2ade","ssdeep":"192:uXMEv/c+7EV34c4TpeWUlohWUl4n3Ul148qRpv/uw5+7l424T7+WUlMIWUlfj4k3:TWL9rOMSxaiNPKaB82HMrnblp92ZE","tlshash":"5603fcac4226018ad633eb7c1bd56359e5285093df124588fbd452148ffa7bcc352fae","first_seen":"2025-04-25T08:34:46.259244Z","last_seen":"2026-05-28T13:59:29.636613Z","times_seen":38,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/translate_static/img/te_ctrl3.gif","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /translate_static/img/te_ctrl3.gif HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1412\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 28 May 2026 02:27:30 GMT\r\nexpires: Fri, 28 May 2027 02:27:30 GMT\r\ncache-control: public, max-age=31536000\r\nage: 38471\r\nlast-modified: Thu, 03 Oct 2019 10:15:00 GMT\r\ncontent-type: image/gif\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1412,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 84 x 19","md5":"9afe50090c0bc612953d081295eab5b1","sha1":"71a4da2a622879c29176ecfa5afe1bbe3e8cfa40","sha256":"d228d0256370863119c043f1e5ca8f3930f6999bd9f250434b6d8935f45dc171","sha512":"d7290b951cec51994f3480c32b70de0faeca433b5d99209b044e1d4c12327768de8c344b6bded806d993251e0ee6f98f0dd64f4480e999fbc06abfe3dd8056fa","ssdeep":"","tlshash":"042182b5cc99114a5be1bd27a334899da8b12c56c38d74595436bdb43470f098422812","first_seen":"2023-04-05T08:27:37Z","last_seen":"2026-06-06T17:34:50.690301Z","times_seen":11195,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/custom-animate/custom-animate.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/vendor/custom-animate/custom-animate.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2396\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":32988,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1219dc768fdaff06b81cb03cb2a59e7b","sha1":"926286ac5981209764f98bdd3177dc86c2eacc07","sha256":"c90961359afdf7bdbb1de2999848ce60104e82688377f6d6768642a28fb7c3dc","sha512":"537cffe9c3128a23bb2b1638bc15e86b26beef70a6074e899d40b4ecaa9319455e2f0b145c500b0b51ad8553abd3062a3ade8d5152bbf990582bf622168118ba","ssdeep":"192:svEVrVo2+o2wTo0Fo0/h9+J9+Qlxi9wxiG8Ks8KnTaiTaFrk8ZKI4NTHP3h6FS6d:cucvzECD","tlshash":"e8e2699a1c42040447774b31d7df4e28eb38596368131dbdb3d7258e4f69ba8138eeae","first_seen":"2025-04-25T08:34:46.241756Z","last_seen":"2026-05-28T13:59:29.643847Z","times_seen":45,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/style.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9395\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"45c5ae8adb88c65f934698f3c9c3ea89","sha1":"a53b4d3659690c9c12cfc9c7ebbe9e5820da3036","sha256":"50d8f11ceb647e4ec677509b5185a3b6dbb148568bbda868391dd6b33ca0aa7e","sha512":"74dc54eb0c5eab973ff6763a2c5ea84474047b38c8a734a3fc5d1071ffadd8335218b0298ec811a6a4b498e8d4fb2f2b8600ce9787aa327ca2c58ba124b4330c","ssdeep":"1536:Ou9ntDhOMKoP/Kouzoj8mLKS0W5kQ/2FLM7AaE1q7WaV5V0i72avk:2r","tlshash":"c073529cd621010aa333dba85be51749f2742083df0611acbbd592558ff67bcc262ede","first_seen":"2025-04-25T08:34:46.227874Z","last_seen":"2026-05-28T13:59:29.664441Z","times_seen":36,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/responsive.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3619\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33245,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e1d05a9cb6b8a3285ab10d1a6850be92","sha1":"35c13186d2d5ab8bb98ae999f5845a1d94fd7bf4","sha256":"ab1e6034323774d495772d0ebcbb16757a93a50be741daf7822103af1fcfead7","sha512":"a22a60a8957083a4b46520aa7129252ab3469d72d1bf7abb846624e8063d9ac24534f9af332c887401faf4a3102955f8dc4a84f4c0803bb771a676f081c7f1c0","ssdeep":"384:UETZ2IBuDxVq5GLmPTIG7knuoJEPsOT191U1LKJ7TRL:b2IBuDxVq5GLmPTICknZJEPv/uLKzL","tlshash":"71e2bc0cb90b110c4789e2d4bbb46ef1ed226066eba740faf4f05725e0e864c57d96ed","first_seen":"2025-04-25T08:34:46.245368Z","last_seen":"2026-05-28T13:59:29.639736Z","times_seen":37,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/testimonial/testimonials-one__img2.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/testimonial/testimonials-one__img2.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4648\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4648,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 95x95, components 3","md5":"01a74c543bba0eebd62189d3ef2132d9","sha1":"936246ddf5aae03c287fea94a69d4075e0cda61a","sha256":"31e7e19a9ba8202e66a739d6ee48faac03970f034dab9bb0217747e8d6a1f562","sha512":"0f805831d3989262ae6737fe14d250eb14652e4b348f14411c5f38fa742c23a8ff9758f6f6c92d054abee27d95018d6d7bb6f161e42dffa2348fc4b98683f885","ssdeep":"96:RbTBxVjy7z6Wmn42ijegtpK+HTEaCc2sfwZwjDMSi40:RHB2z6W7jdtkuDmZk4S2","tlshash":"0ea14cd5ca876ce4f9772d368f92c30227166e01e98a6be620bc1570c8761f51371ed3","first_seen":"2025-04-25T08:34:46.274025Z","last_seen":"2026-05-28T13:59:29.644895Z","times_seen":31,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/03-jquery.appear.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/03-jquery.appear.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1239\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-06-06T05:17:59.480372Z","times_seen":687,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/07-jquery.nice-select.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/07-jquery.nice-select.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 930\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2822)","md5":"d13462ec489f9f0c309a811f85feb3d6","sha1":"d9545f8b139eae5b387de1a60a84abe949c7e88f","sha256":"66bdef0724e5306421bcc7e0910e41b5645228119ad9096ca4a6099e48d94e6a","sha512":"36a61db3cb2eea38afcb5fd62e85bcc75b593110fbff565f8561bf8dc4502cecd5d64d6b20e0c2a4c8280676abe505ec84a24657bbe2d0b5cb3573e816c33966","ssdeep":"","tlshash":"a4511114b10512f648ff25d37911b147a075493dc42ac14be97e86b21efec02aab6d5f","first_seen":"2023-03-07T01:31:39Z","last_seen":"2026-06-06T20:18:40.185739Z","times_seen":9143,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/08-slick.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/08-slick.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10097\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-06-06T23:22:58.427184Z","times_seen":99154,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/10-jquery.circleType.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/10-jquery.circleType.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1166\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4880,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"166a48c628871b0d9c4fa4b0b8f89148","sha1":"b49d5cdda9a57c44a5c636c62d110926725aed37","sha256":"ee2cbf12efc08718618ea22d9f75fae7b23c2e6bc2a078af6034bfe8734ced6e","sha512":"3867adb5dac773168567755adad1ebb0e857ae037153d6b9ba72248686cb1a8ea3a97705ec2112dbb5fa7da498dba56740b57c60743e8218dfbf0904594bc0e1","ssdeep":"96:zOmRTUjwGlj7Sc6YKPDOxhA0g5gfVEAk9SkniseCFU5O9dXLBNq5wp:zOmRojwDnYCKjAR+f29q5yl","tlshash":"a8a19998aa0921290437b77acfde6a48f736532b01169163bebc11d62fb195803d5fec","first_seen":"2023-08-11T03:08:43Z","last_seen":"2026-06-06T14:53:42.761854Z","times_seen":94,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/project/project-one__img3.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/project/project-one__img3.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 55499\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":55499,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"49f7dddf4807932d3414aa50b7896aa3","sha1":"eee00ef5091b49d8ee26a72927e47ede0425ed6f","sha256":"8328d0119352de79bd665fca32685b93a6bb5c14ef5ccfd714bfcde353838915","sha512":"21dd78ad11c43d71b3f832a025a762ff25ac6b4b85e51ffa6576243d18ad3e7774c90d668c5f912689c2e498930d226426bdde4430d124911847257cba42f9bc","ssdeep":"1536:p1kPXRleS7YckjlpPSEgODH8RUEBz9p0h43xbQVPa+eml:vAXRP7YznSFODH8CkpyhEbQX","tlshash":"1b430299ed61cd81956816ecc5330e9936128f6763ac947e58980f33fda01c71afc36e","first_seen":"2025-04-25T08:34:46.224472Z","last_seen":"2026-05-28T13:59:29.640276Z","times_seen":32,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/04-swiper.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/04-swiper.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 34402\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":140942,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65272), with CRLF line terminators","md5":"b74e42eb5a00c128681fb42890676d66","sha1":"af15c1c1d94e85a0e76bd75def0b4d3b64759f76","sha256":"2f06dae9eda7f01aee86f4a386ff1749c24612c5b1e947c6c91f576c4fa8f565","sha512":"272d20406e4580242446d9dca7441ed7d105ddf0c744cc4a914c53da47f7adaff8d23ebb25f872f91feef2d13efd51067bb594eaa31490ecb91b6a2f3123bc24","ssdeep":"1536:OOgAc1fFOszeCOG3RxCK8Yi/Glq+dBZDUiOMRLMGpukRRgj8evHgZsUgeAq5qV8a:wQCL7ji/udoxKRRtYHgZsUgeAq5qOsJL","tlshash":"f4d3094eb39061a551e36257525e8241a3b72409b80ad0ac35b68cd7adbde4c13bfffc","first_seen":"2023-03-07T12:21:29Z","last_seen":"2026-06-06T14:53:42.756955Z","times_seen":1296,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":410,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/marquee/marquee.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/vendor/marquee/marquee.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2160\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9029,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9029), with no line terminators","md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-06-06T23:28:27.769617Z","times_seen":3851,"resource_available":true,"data":null}},"time_used":448,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":448,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/odometer/odometer.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/vendor/odometer/odometer.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3374\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9897,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9874), with CRLF line terminators","md5":"07013b14ea1c5e30722ded722a1dfff2","sha1":"e6b09f4356f4e0485c6c7f73e629a70a1a4a549d","sha256":"b915a94b58cd8566dbe14df96e8fac1ae0466e35660f887109c5d53e5b996960","sha512":"d765c201184b347d618c3fb63144fc68a7318af5f8388ca01d1941287b83c93344d87d10bf1b2824eaccfe7ed8dae18d52ddba4e9adc1cb38109144e33a3f54f","ssdeep":"192:CABzlvk8QecC6AOcu2flRdI5s/GMjXuu/T:FBhvk8QecCa07z+Wd/T","tlshash":"ff129580be02a725875371e151bf0709b7bb99ae6404401df67c9cdabe25c38e12bf74","first_seen":"2023-03-07T21:40:14Z","last_seen":"2026-06-06T14:53:42.760725Z","times_seen":1222,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":447,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/widget/yqmunmoj0A","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /widget/yqmunmoj0A HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6307\r\naccess-control-allow-origin: *\r\ncache-control: max-age=7200\r\ncontent-encoding: br\r\netag: \"6a0dbb3c-18a3\"\r\nexpires: Thu, 28 May 2026 15:08:40 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: MISS\r\nx-node: m9-up-gc80\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18437,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18437), with no line terminators","md5":"d9c16a93671478a04e67ef6ce8fd8d49","sha1":"01b684e9d048b15a6db62c1089268153294c59e2","sha256":"e9e14e0a77b0bd6574ede9cad8679750cba46508846b46c6da140df5def3e9a2","sha512":"5bddfe37cf1714a45c8be3be1d26c0dfba9b05c59a438fd87322e2cfdeb34f6585c3b86c5ad28adb1e4e75bf812f10792a74a11cbe61e914e6e53a8bc5f1ce6d","ssdeep":"384:boUeJkQCuw6SmbXm0wrA8zuyEQ+EbzXDpGiqJISO9JHW8r08wI+xcXd4:vFj6x0A8z5EQ+EPXDe6/rp+xcXd4","tlshash":"51822a6e7959b93383b108f5a16f620a773549ebd404cc20a405f9897d78ade813fee8","first_seen":"2026-05-18T13:47:45.536253Z","last_seen":"2026-06-04T16:04:43.518197Z","times_seen":717,"resource_available":true,"data":null}},"time_used":475,"timings":{"blocked":169,"dns":1,"connect":58,"send":0,"wait":84,"receive":1,"ssl":157},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/notification.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:42.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/notification.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:42 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5808\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a0ad858-16b0\"\r\nexpires: Thu, 18 Jun 2026 23:58:17 GMT\r\nlast-modified: Mon, 18 May 2026 09:14:00 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-19T23:58:17+00:00\r\nx-node: m9-up-gc69\r\ncontent-range: bytes 0-5807/5808\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5808,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural","md5":"9aa341af370c4e59155717260ba0f282","sha1":"0c1216ecead8d1409557c843d96202c063f3f252","sha256":"1112436abea08c851302bba4d4e37a27e25e5ec26b20474667a3369d41154bab","sha512":"e6663f8406d859a7ae65e6eb9512ed1e79244b8f5b2119823f80fed99c17dd4a086cc17083f3cd70b6dd990c39b3be80142f303a7c2a9fbb9302147e700fa5cb","ssdeep":"96:XYLRSqytFnbfWnHBaSvgEyZMZuiusJ0jQDrrQNw:IMTnbfGhaSvg/inqc0m","tlshash":"cac1297acc3c146fd81e88b53f3bb0c9421c61803a00d8e61c99bb5bd6b2ba975468d2","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T21:57:38.06269Z","times_seen":16387,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/02-all.min.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/02-all.min.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 21867\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":102157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (52276)","md5":"d4323858024a7a96f2e0e0449df90ba4","sha1":"b3eef8ee5ecbbf51b63419cf922c58cfc4734631","sha256":"552b316e5b535ba9e456aad19ed48e2a4386c7093398190269a2648c08f25939","sha512":"c30ca4bc92e35318073dc224ce22d2b3d4de06b94f8538c1093eb0c2008509f3f7d1f6a3e2496688d8dabea627840d8b4843745fbe11401ffcafd786c0ca9e9f","ssdeep":"1536:0wMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuIprrlCa:M709gMGFiyPGuIprlCa","tlshash":"82a3b7f8e44c15d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-10-27T16:52:55Z","last_seen":"2026-05-31T10:27:57.061355Z","times_seen":514,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/04-nice-select.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/04-nice-select.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 959\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4224,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"48330d63ca3adb9b5b7f9c017171bb9d","sha1":"c7aad786f1229d807556486024afd103cfb8ba6d","sha256":"8d94d95318d93de39e7271a19fd6accb1143b234fe91e5f8532141836c48a15b","sha512":"d81abec0be2a32e9c3eeef590c8905339a5fce49472fa06a3a3623ca96e16563d36656ad044f29e21d89754c20806e7722a6af7937f2e89e33538c6f829fa9d6","ssdeep":"96:oID5hTrXeiw6WeswIxN1zNFT9u8J3Fq4nE:oID5hTaR6WeswI7bFT9u8J3FdnE","tlshash":"409103799a231552282f476fafdb6b18233dc0435826cc6cb7c0d60a4f0e69c8cd5b8b","first_seen":"2025-04-25T08:34:46.244106Z","last_seen":"2026-05-28T13:59:29.632496Z","times_seen":54,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/shape/banner-one__shape1.png","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/shape/banner-one__shape1.png HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Jul 2024 22:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2894\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 135, 8-bit/color RGBA, non-interlaced","md5":"789dd39c4759c73ffa8d54e02dfd6bf3","sha1":"0cb2db6dd6e82baea6a9a1001355aa92526cafa0","sha256":"5f7e87bb98bb8b5ffc0a25f00a08d0ed5aa28e827d314ff9a74c66ad750d1f7b","sha512":"e7112ca131c682619f6696cb057080c0767bbe5978a6d59c95e43362d92c0b5233b2cc5cd4af047411ecec0a04c79b1d46e8a523844c4112a4663d49b6a5ea3c","ssdeep":"","tlshash":"19512b83b30315dbf7f5ddb6514928316cf51cba86286188c22bcfcd9a884009769e38","first_seen":"2025-04-25T08:34:46.226786Z","last_seen":"2026-05-28T13:59:29.627674Z","times_seen":33,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/02-bootstrap.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/02-bootstrap.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 22192\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-06-06T22:58:44.7483Z","times_seen":17725,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":403,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/header.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/header.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3456\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27156,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d2c1ba2f486ef7bd4ab049b748960a39","sha1":"938fc176b98ce1d8516a085451e5ac29a00d3c68","sha256":"53377e21756d198ed55337d509259fa55603aa842581580571a7f09459d92538","sha512":"3a34d5ae9a8555f61e44b5fa8cd60075d981505946115afe87c1e7a090f8e0b49adbf85d62267d223e4742f1a032df06548085984492a50834b8a630aba71798","ssdeep":"192:Axf/SMaQVtaKev/yJ7cvrMv4N1oiC/CcM041Uln9FD4A6qqZDWs85ocKyuapVhdL:fjvMNIY3oW6PnqT","tlshash":"fec21f4c862221469233db9cebd21708e6b44043ef06015dbbd65b469ffb7acd153eae","first_seen":"2025-04-25T08:34:46.24302Z","last_seen":"2026-05-28T13:59:29.622703Z","times_seen":36,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/01-ajax-form.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/01-ajax-form.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1250,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1be30d77e5267cbcf399d6152253e315","sha1":"8875c6e6232be6cb571e8a90e312107a44c0d4b8","sha256":"e9d3e2a6c29998bcec8abc8ec7618f03d61a52ec8d4c7d5281e6ab2ec54ecd85","sha512":"4cbd6c3be98c32da0f0c28b62d20967751728fa9fe94eeaf28b0bf6a3933de82e51c89f923bf90a2d630ba9f026efbe294fe2ea12ae4029718e7f79199a00946","ssdeep":"","tlshash":"3b21af847e6f0b6e1a47221576fd72c9fb2dd1728207622aa7e9083916841cc17c27ee","first_seen":"2023-03-08T07:03:22Z","last_seen":"2026-06-06T05:17:59.459529Z","times_seen":972,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rajdhani:wght@300;400;500;600;700\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Rajdhani:wght@300;400;500;600;700\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 28 May 2026 13:08:40 GMT\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5718,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"890583dacdbc48d3155991cc85838538","sha1":"d3e085d05a0748cad96960e6baaaed03f8953662","sha256":"973829226d0ed346e57f98b2526ed405d47525dea607db0713309058682727c3","sha512":"85ffb88f7bffc2fc22383893315cbf46b10b9fb210290702458a6ab91eeda9c38ab4d193bcf6129ae0210e8daf10a4ee0ca6ec2da7df3c771ddfba41b6f7725d","ssdeep":"96:8OWKOWAJc+uqOWSN/OLmOLcJc+uqOLoN/OgGOgMJc+uqOgr6N/OxTTOxTTJc+uqM:YC0HzToaao49xkH4HUCDL","tlshash":"e3c133a1092bb85067933cc213ce7d36df0e23946854a935affe1c9cac9ac765351b4e","first_seen":"2025-09-19T05:10:02.937666Z","last_seen":"2026-06-04T01:26:47.311448Z","times_seen":425,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":155,"dns":1,"connect":15,"send":0,"wait":19,"receive":0,"ssl":153},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/rajdhani/v17/LDI2apCSOBg7S-QT7pa8FvOreec.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15688\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 27 May 2026 09:21:40 GMT\r\nexpires: Thu, 27 May 2027 09:21:40 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 03:40:35 GMT\r\ncontent-type: font/woff2\r\nage: 100020\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15688,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15688, version 1.0","md5":"d5448938a162ccb434b09f4572c0191f","sha1":"be9eae3d1d9f4fbd2208e0fd3c871b17b65b6516","sha256":"5b7e4a6f97163c2636724d4de90304fc895653dcfe64c67a7a22f26331ca5c5f","sha512":"df0245084768642738387f7a0daa11c4bd0109617c4120bfd88083c30d686ee2bd327e426ce0d9ee1f50839c5e2890f8a2a2d7acce3705fe8fa324fe623ad942","ssdeep":"384:Bktl5HsgImpL/2gZDAMAyNWE3pZrsjyb2mf+X:Bkl5MgDpT2g5AMtswpZZ2mf+X","tlshash":"7962c046a5a6b998f4d4ecfb0086542c19bb5ca11c6230f3c719356f5bd3e75cee4540","first_seen":"2023-04-14T01:29:53Z","last_seen":"2026-06-06T23:27:16.654547Z","times_seen":5000,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:32:27 GMT\r\nexpires: Sat, 22 May 2027 14:32:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 513373\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-06T23:04:16.001862Z","times_seen":29004,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/favicon.png","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/favicon.png HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Sep 2024 17:26:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 964\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":964,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"0df99c3b3a5b30ff6f9cda58533b96d4","sha1":"90fd84120878ea1a797c8c6160cc8cb29a5a3311","sha256":"adbd2d077d185167368702044219517e21815b173b1bdc2688f8b597b6bab06d","sha512":"73799333b3d0127a18ba515b20345627bc078b4cc5fcbc3518be4a11e54315fdb96e7e999b9ac594ac7241dda227ea7982290a1b02bb9b03c1a55a184394dac7","ssdeep":"","tlshash":"7e1198f5e2b1d93ff10cd56350944108f7d2ced00b7b5ce0f9bb46aa8d595047942605","first_seen":"2026-04-23T20:34:56.984737Z","last_seen":"2026-05-28T13:59:29.669067Z","times_seen":4,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.e6JlbwPeKbM.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpXZjjFr2hoADeX0WbZBmwyodCbQw/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.e6JlbwPeKbM.O/d=1/exm=el_conf/ed=1/rs=AN8SPfpXZjjFr2hoADeX0WbZBmwyodCbQw/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 123569\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:33:43 GMT\r\nexpires: Wed, 26 May 2027 18:33:43 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sat, 23 May 2026 23:10:45 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 153297\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":429151,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2481)","md5":"85756fcf2da14bb557678e3566557e96","sha1":"f29566ba771e62954e18f07bbe03877f9635ba5c","sha256":"cb29af4fef8f588a9e5bcc5a9dd1f918a693b6212316dcf741061f4bdd83087a","sha512":"1ded0a14fd148626c32a39bab99e1a3543b2cc714d8c14c1d6687429d1efe854682c1f6cb06f270c79cf13f47ed89f81ccdeb5b67d56a26c9b9e72742661b361","ssdeep":"3072:k6n1wy2TnRburi6Tuu7QCRyr2ogeyMdGOAKCnVftJ1E5Yu3PmCAuG6dzFMORtwAO:qSZBbtY8JBhkdzzwqc","tlshash":"a794d9cab3a378529262f8a1a47f0147b93dac57b44c4c6cb189d8db2eb08154573f7b","first_seen":"2026-05-26T19:06:50.602345Z","last_seen":"2026-05-28T19:21:57.833225Z","times_seen":242,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":55,"dns":5,"connect":15,"send":0,"wait":16,"receive":38,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/cleardot.gif","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:58 GMT","end":"Thu, 30 Jul 2026 15:53:57 GMT"},"fingerprint":{"sha1":"3D:2F:68:CA:7D:7E:91:9E:9A:F6:55:25:90:92:2C:70:DF:61:E1:AA","sha256":"17:D0:A6:F1:72:DB:CB:B5:FD:37:15:CC:95:48:17:63:D5:77:2E:57:FC:4D:6A:36:5B:D9:8A:76:6B:1B:54:5E"}}},"request":{"raw":"GET /images/cleardot.gif HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/gif\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 43\r\ndate: Thu, 28 May 2026 13:08:41 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nlast-modified: Tue, 22 Oct 2019 18:30:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-06-06T23:21:19.072441Z","times_seen":73379,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":82,"dns":2,"connect":21,"send":0,"wait":31,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jivosite.com/sounds/outgoing_message.mp3","fqdn":"code.jivosite.com","domain":"jivosite.com","tld":"com"},"ip":{"addr":"95.181.182.182","port":443,"asn":210756,"as":"EdgeCenter LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:42.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jivosite.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 13 Apr 2026 09:15:59 GMT","end":"Wed, 28 Oct 2026 09:15:59 GMT"},"fingerprint":{"sha1":"FC:CA:E0:FD:EF:DB:CA:09:E8:7B:15:0E:CA:07:21:E3:45:D5:D6:E3","sha256":"05:DF:70:71:8F:EA:05:F3:CC:0A:49:93:07:DB:2E:CC:70:6B:05:5C:90:16:52:43:8A:04:29:EE:60:A6:BD:DB"}}},"request":{"raw":"GET /sounds/outgoing_message.mp3 HTTP/1.1\r\nHost: code.jivosite.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx\r\ndate: Thu, 28 May 2026 13:08:42 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 5014\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncache-control: max-age=2592000\r\netag: \"6a0dbb3c-1396\"\r\nexpires: Thu, 25 Jun 2026 23:25:26 GMT\r\nlast-modified: Wed, 20 May 2026 13:46:36 GMT\r\nvary: Accept-Encoding\r\nvia: 1.1 sharxy\r\nx-geo-shard: ya\r\ncache: HIT\r\nx-cached-since: 2026-05-26T23:25:26+00:00\r\nx-node: m9-up-gc81\r\ncontent-range: bytes 0-5013/5014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5014,"size_decoded":0,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"7bf3e4962a5ecf1f8cbcc2ff3428f531","sha1":"f75c694461a643d2e096ae8d0f6c1a9d19602eee","sha256":"d44244617bf21df7a137694fa762d5cab3b82cb9fae8f33de5917977b02b2a11","sha512":"53fb17ca3361636acb0b80107f66810150a8bbed9aa5f878c2b1fb5a23ddf7fd349b30eb082b05efb3c0d08dc5383d30ef15d0ca99ad98d62e0a9a335112ed6a","ssdeep":"96:nKEOyBuK+1D2sMVx9FX7+0YQQinefV/1gr/EaadKXdGdimO1:K2QhGvYinsLE/SUdUime","tlshash":"5da1399616202262f6090cbf124ec2f4e3996f6b39044726b67cd290f46ffa25366983","first_seen":"2023-04-05T14:05:33Z","last_seen":"2026-06-06T21:57:38.034409Z","times_seen":16386,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/resource/mobile-menu-logo.png","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/resource/mobile-menu-logo.png HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Jul 2024 22:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3608\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3608,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 40, 8-bit/color RGBA, non-interlaced","md5":"5e8c8df70bc84857e0ad2438968b1c50","sha1":"e0a5f86104037e70c91986178731bc9de7e21b6c","sha256":"ced30d90ee04c5a6f4e44ea17094402c91f8e0a9b9134dd1b91dfa458e6f5eab","sha512":"2b6ef9c870d029a96d06083568c947fb32e81d157102f8d9d33733573e068cde971dbd231b93c739f7dd6f60508b82bdd8edd7f8870212105336e44f5cdf1bdb","ssdeep":"","tlshash":"fc717d0dae5b9a41d2baffc354fd475bec370480a68dedfd40ca88532834084126a5eb","first_seen":"2025-05-10T17:35:07.965903Z","last_seen":"2026-05-28T13:59:29.65451Z","times_seen":16,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/about/about-one__img1.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/about/about-one__img1.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:12:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 53420\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":53420,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x510, components 3","md5":"2096be708258ecb49ada5d7f759aae4f","sha1":"f87348a75b158686b8788a2d1a669498c7746692","sha256":"401457a02e50052224e156f280df528114289ae8924c452f05a5e99daa560b37","sha512":"524282d939f7c85bff8abda9b0826b5a6b265275f5ed02cfb061fb87fc80c939709b33f6174f933c769a902c17896a9cf36a40e1fe953accc4ce3c7e1213b631","ssdeep":"1536:3oUWqWtCA05UrDuueI/kNIJXORYOrUfQY0:HWqWAA0OSue1IJXOrg0","tlshash":"9433020190146cc7fad071d806a2d651d7ebdda4c0db7b186bf3ca61bd20b4a7b8d98e","first_seen":"2025-04-25T08:34:46.267709Z","last_seen":"2026-05-28T13:59:29.644351Z","times_seen":31,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,500;1,600;1,700;1,800\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"64.233.162.95","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"GET /css2?family=Rubik:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,500;1,600;1,700;1,800\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 28 May 2026 13:08:40 GMT\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27486,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"d1822c246512fca42d70bae3f05dedf5","sha1":"62e69a3762e226a7b160f71980308bb84b92d94b","sha256":"f9dbdc8415a36077c046de0117b784be75ed93b735d7c6665ed47709489cca5a","sha512":"98bc9874bce2cd1aaa1800f7713fff34f9353120f01bcc20df638b0b89d434bbf05ae86d3423567ab03c7289284aa2738e6e045c0b554f724b82bfe68a92000a","ssdeep":"384:jolk6sXYSDtlk7swLN6Glk0sh6kxDlklsKd/clQAlVnly+lXFl8clBjl+X:YsY0nprlbxLM","tlshash":"71c2ace1481e5494bf472cc263ce2d33de0ea355309495299afd1f9eaca7d2232647ce","first_seen":"2025-09-23T13:17:36.333169Z","last_seen":"2026-05-28T13:59:29.628671Z","times_seen":19,"resource_available":false,"data":null}},"time_used":361,"timings":{"blocked":165,"dns":0,"connect":28,"send":0,"wait":17,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/team.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/team.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1040\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6855,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"776d78271ad90c460119e292d889285e","sha1":"cd36607406594224abede421830fc207da7ed315","sha256":"d6edbcbce3ddae0bf421a5c268e651db0436035892d3e1560835cba87545bdcd","sha512":"2307bea192de232b42764372fdf76b98e1b6acf2fe794ca5260e0c4b14e3bfbda06d7a9d83cdaf45c798205206928fc26d2518c3624ca105d436538efb4006f5","ssdeep":"192:VP0YUlLONHTUlVhnCTqD46H4BuFUlNFD4/wbpWUlBcxUlhsfUlUCiWUlw98CCrkN:ejP5IZ7NefM","tlshash":"58e1c008a62d16079973f7749be1234ef2704083ef410599bad092569ff6b7cc392dae","first_seen":"2025-04-25T08:34:46.264677Z","last_seen":"2026-05-28T13:59:29.646267Z","times_seen":38,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/slider/banner-one__mian-img.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/slider/banner-one__mian-img.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:12:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 112922\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":112922,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1025x760, components 3","md5":"36b587464b88972c8435c4af16e2cf3b","sha1":"fb0d5754f8dd126d41272a47a91125ff95e46fff","sha256":"d7b6b29b7a26f86530b8d4876ec0117e07a628cf53826ba2c10a1370098ec379","sha512":"8ae0f094ed64398f233502c2644afc7d4e9ebd7186c7cb6aa00d631c143f5897b810951cb40e862467a7ed2f761cc0fcc28bd013317d4d3174eedf47604d811b","ssdeep":"3072:bBg0pCjGfubAcpvWzo9bbFVP83UzwpX3IN0pk0zV1/Pz:bLCSWbV8o9H3HzcICpk0L","tlshash":"8fb31274e8be8e60942b20c8c5864135e7939b92fdd98f0339356ce155484e63c67bbb","first_seen":"2025-04-25T08:34:46.301137Z","last_seen":"2026-05-28T13:59:29.647182Z","times_seen":33,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/resource/video-one__img1.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/resource/video-one__img1.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:12:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 244502\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":244502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x650, components 3","md5":"c6110029528686a714c90d9ae5a1647b","sha1":"5047f8aef33068c1ca4cb07f18ac93972fba3135","sha256":"f867c3d8a7e26f24dfacb904dec6ef58b2dc1c533b5691e4c26754b68cc0ff4c","sha512":"b4e622be085e9fc069ce883e2c4ff758ba5f1637924eec86969baa59b1821fdbe99ae023c3290fe77daf42604689d06a338bbc7e3e0202d94205ce633c8635d7","ssdeep":"6144:iGvdwhsUtunZxfNQEskZ2Vy7OHgDdz5FNUOFuFFk8:i6AtgvfNQWZky7OStLyX","tlshash":"7e3423102eb38489f9a91e3d4c453b6050cac98cadd58fd203c75d46eebad98e37649e","first_seen":"2025-04-25T08:34:46.304302Z","last_seen":"2026-05-28T13:59:29.620423Z","times_seen":33,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":98,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"173.194.220.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /s/rubik/v31/iJWKBXyIfDnIV7nBrXyw1W3fxIk.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 May 2026 14:32:27 GMT\r\nexpires: Sat, 22 May 2027 14:32:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:39:37 GMT\r\ncontent-type: font/woff2\r\nage: 513373\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35348, version 1.0","md5":"6e192bc03c1ec5b2ba6b1281ae4f4a71","sha1":"54dd8ad0f73f88eb7c28888d5582380a978f6571","sha256":"8fb387ef4c02189952d5644187a217863e71db410f9dfb3b0afd0ebc4447bec6","sha512":"412aec2aa07af44d4f5e889ddddb9af73b89cccb793aabbb1161583f3d13ff0adc2053edb329a039fa5bc7c9f5b4a69170365e3ad29cd95a8b81fe9997ae1f7d","ssdeep":"768:Dbm/Jw6U5CNNTG4IwnW0kpZ/NXBeh58pFpS0Lz6fihG4iW3lpsii3AYNb:umF5CN5GVwnONBV20Lz6fihGs33siiQk","tlshash":"97f2f1817ff58f13286ab078b5bf8f5b4778a348509674af92c3e7b48c851c85f12891","first_seen":"2025-06-02T19:11:03.283598Z","last_seen":"2026-06-06T23:04:16.001862Z","times_seen":29004,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/01-bootstrap.min.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/01-bootstrap.min.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 23421\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":218807,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (562)","md5":"25dd66fca94c37f57c328ae410c683f9","sha1":"53fd4aa094f0e7ea1eac6bb263cb65329702cff9","sha256":"d56b1aa1e7f5e963b3e1a2d343614dccfb4ee9b098ead7b6e669f8744a45800d","sha512":"5bc40eaf25bfc72515eb795618c0792fa92e6e30abb50c25f563d478f551fdd7be1276fa286630328e4ce07faaee78739c27f57f20b3291ab67c585a4a1c2f8c","ssdeep":"1536:qfnpVWlih7kWq21yGYjGUtF6WMQVl2YIJvtszleSQmuw:qFh7NtszleSQmuw","tlshash":"a724404ae9f22959184b806c59ee6bb5b33c4083c31edd79bd8f3354cf492918d62f88","first_seen":"2025-04-25T08:34:46.282495Z","last_seen":"2026-05-28T13:59:29.660979Z","times_seen":38,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/10-icomoon.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/10-icomoon.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1211\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6035,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"86e3de880baad8195a9f2801567618b1","sha1":"3d346767a8fdbb6b01e77992fe68d0d06a4bcfcb","sha256":"af337776e6bee32c44a02a89697b38e7c53c79edd53889d795bc4548b6c2802c","sha512":"2716b9d69cdc40d9a0778f4b1f1a3bfe94968327a569181244897bd35cbf2864e255683f35e5df11429126a908c5bce52e71e707c701dceeb373f3523bc79cb7","ssdeep":"48:QfOUmrZOrOk9A+OrMan/BMyZoFRBhZTVkiJxpCvmZZDCnOdgj2mkZvCOAYF3CqSh:QfOfOrO6A+OrMYG3Fh/kdv4D35nvC4Sh","tlshash":"fac12ae498bd1da01308e4d16342a620ff1ca3a89d871d5bf2b3788cb7e23415197afc","first_seen":"2025-04-25T08:34:46.253107Z","last_seen":"2026-05-28T13:59:29.657575Z","times_seen":38,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/js/11-jquery.lettering.min.js","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/js/11-jquery.lettering.min.js HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 428\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":924,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (859)","md5":"83f6723631eeb52da3101b72b7624728","sha1":"3c74ddfb1209f2fd56fd58e61829e01a073e303f","sha256":"c9bd115d1d0d0871a3e6b701384a903d7bd378313a0504ae94949f5bb21894f0","sha512":"549fe261b8aed5e27ac8b8a67d38bae6dd91f5315c1b90fd5fc6427db6c41614df3e728987c6f2a0a5c46b08b949c2590582f57a28ab2f5f8c733643c744f3f5","ssdeep":"","tlshash":"4311dcc4f3a3aa07479bb7bd513b620ee26654c354030c01f9a8d2563da7b490aa7ea4","first_seen":"2023-03-07T14:30:16Z","last_seen":"2026-06-06T14:53:42.746293Z","times_seen":825,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":426,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/module-css/about.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/module-css/about.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 09 Sep 2024 20:26:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1706\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12799,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"665c00992dab7ca2fb6cdb33426bce5e","sha1":"546b63d8ecd4a151bf7732c4384fb2f10847f3d1","sha256":"bd2c6eaf882431d33d13555f100bdf283cc25ff863e41fb795ecb1c161c7dfde","sha512":"85ec1b217d130b7876db268857f5951b9cebdd2a3519be9456542c89f45b34840a4356c14ef4a531028660d658ad606aa0d9351696ae1a525b002eb7b6c2a5a7","ssdeep":"192:1cQ5hszPGZCPxUlJtUlTUi+YeEe/Ru17bpp5/vTS3GZHpNLR9WCCC+1vwxfmKqw7:VBsu+","tlshash":"1942d34c87520109d677dbb8abe02395d6704057ce92004bb7ca62558ffe7acc793eab","first_seen":"2026-04-23T20:34:57.036076Z","last_seen":"2026-05-28T13:59:29.630855Z","times_seen":4,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/fonts/fa-brands-400.woff2","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:40.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/fonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/assets/css/02-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:40 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 109808\r\ndate: Thu, 28 May 2026 13:08:40 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":109808,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 109808, version 772.1280","md5":"005c9aa92b564b73b7582cc4f1fa49cb","sha1":"373361ed756b1fe68ce2f5968d467826b6973bb5","sha256":"faae6fc0aa94cc5bde5076647c817a23206096a1cbeda10d1c6f3d89d6163ed1","sha512":"cf057683226d25fab8518295d9a2bbc7261b85a0e911d323f949719b6484beb99843887ac634e58f21988c5af3b8d825b8289cbfe29b2d4e1817016be1499bba","ssdeep":"1536:598+segXMbYt4ZF+jfdgY0q+JtV63kYFF8ChI+2F2aqQPj+QU0yXbO/YvSdE:AeeemxT+kkgeChI+20aqqDhcSK","tlshash":"56b312cbe021d582bdee1c5b69ba14bf61180424427dbe9dc306746bbf16e023d0bd27","first_seen":"2023-08-04T22:28:11Z","last_seen":"2026-06-06T22:59:21.360629Z","times_seen":27955,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBAABw/d=0/rs=AN8SPfqP_HaryGJFfkiCENzXW3iqcibGlw/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:41.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:13 GMT","end":"Thu, 30 Jul 2026 15:53:12 GMT"},"fingerprint":{"sha1":"6C:B9:FE:19:9C:7C:AA:5D:D2:39:3A:16:2C:50:FB:C8:59:C8:CC:A8","sha256":"FC:4C:0C:6E:AB:D1:82:30:1F:A9:46:DF:FA:38:02:9F:06:56:FF:98:E0:8D:AB:9A:26:C3:2A:97:C5:CF:A6:1C"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.B7Dih9Jyjnw.L.F4.O/am=BBAABw/d=0/rs=AN8SPfqP_HaryGJFfkiCENzXW3iqcibGlw/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3967\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 26 May 2026 18:34:30 GMT\r\nexpires: Wed, 26 May 2027 18:34:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 09 Apr 2026 01:12:55 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 153251\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20284,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20284), with no line terminators","md5":"fde4f72b90fe807270db3c332dd058df","sha1":"7ef4d70af01c38a7f80a7650be25f63aff4ba751","sha256":"ab31c9be358d2107fc1158434c7aeaaf15f82e3e405ed67ab236b5ac232ed159","sha512":"9bef39350af557afeb10cb71068426ab28befaf5295359954787be06a5ce0993d69e8f5018a5a17c44311d294dd1a87a6f82edd0f5743df0149b8e4e53061695","ssdeep":"192:nvqx/EhZINcrXsfg0SgG8CqA3uku9SJFzvQVMbnUIfIxIVVpTrecfzPtcmt4v78l:gMF8Sb3i0JFzourUqWMVpTrdfzPtcBG","tlshash":"c492872057aed01967efa82364d36dff71d444db90123eeaaf5a7352cd821f231ea214","first_seen":"2026-04-13T20:43:22.641436Z","last_seen":"2026-06-06T23:09:22.921523Z","times_seen":10164,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:51.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:15 GMT","end":"Thu, 30 Jul 2026 15:53:14 GMT"},"fingerprint":{"sha1":"19:42:B0:56:3A:E4:79:BF:8B:69:E2:50:F4:76:BF:1E:A9:D7:7A:49","sha256":"D7:FF:C1:46:95:F3:5F:08:04:B0:E1:A8:FE:14:FC:60:19:58:D6:C7:D3:6E:82:B3:64:07:E9:E1:CB:9A:27:8C"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://gloexpress.icu/\r\nX-Goog-AuthUser: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1172\r\nOrigin: https://gloexpress.icu\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1172,"data":"[[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,\"en\",null,\"TE_20260525\",null,null,[4,0]]],1871,[[1779973721145,null,null,null,null,null,null,\"[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,\\\"no\\\",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[1,\\\"te\\\",\\\"84CFC752-7F83-417E-A9F4-6204DA1021B0\\\",[\\\"https://gloexpress.icu\\\",null,[\\\"\\\",[],[],null,null,[\\\"navigation\\\",\\\"h2\\\",[],[],[],[null,1000000],[null,12000000],[null,284000000],[null,285000000],[null,468000000],[null,376000000],null,[null,561000000],[null,562000000],7097,6669,59438]],[\\\"translate:page_load_to_initialized\\\",[null,562000000],[1,518000000],null,[]]]]]\",null,null,1,null,null,null,0,null,null,null,null,null,1]],1779973731147]"}},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://gloexpress.icu\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Thu, 28 May 2026 13:08:51 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-06-06T23:09:22.909214Z","times_seen":555215,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/css/08-custom-animate.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/css/08-custom-animate.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2275\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":31975,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"dbf4dc74cd97d371ee68d440591433f8","sha1":"08943e0e485db98016c999049d1dbee35b597b6a","sha256":"14fa27f6a1df9bbf5834b7f02e90cb0f5ea8e564d3d21bb9d7cbff5d46e4cff9","sha512":"9e20e7a274f5abe45a83ae06044740e033ab94573dcccbaa1a2ab76a6f0a0d69bf7b391cdd778958e468a09fa770f9cf4328c0ec297f81e866c751a74341ce9e","ssdeep":"192:ilBoHP0IixikPLE93ZvYXY2+Y27h9+J9+QbCQ6wxiK8Ks8Kn3pX3pQrk8ZKI4NTT:o0gvzECy","tlshash":"abe26a961c42044487774721d7db4e2ceb38597368131ebab3d7248e4f65ba813ceeae","first_seen":"2024-10-12T13:59:00.674708Z","last_seen":"2026-05-28T13:59:29.670549Z","times_seen":55,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/vendor/jarallax/jarallax.css","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/vendor/jarallax/jarallax.css HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 31 Jul 2024 22:13:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 159\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":335,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b80225d900588f8298b80d0a248eb1ea","sha1":"63ddc9c975da1a89cc9778521268ffc76d11c969","sha256":"a80fcab3658c799f1732e8567bce5d6e422e51afbac13e385779c87b1c4a5d5b","sha512":"8b3e005fe9a4ca2946d42f07b542c92884b81defbca17c93015da9b2f9110faed0c68c8d44d8af2308b5da08bc2f4ecf938064c2225af930509b46f6b0092f9c","ssdeep":"","tlshash":"33e07d8107241549ad3bdb9c7b840628e2ad41dbcf83d01933c4f745cfb1604a6a5daa","first_seen":"2023-04-07T05:54:15Z","last_seen":"2026-06-06T14:53:42.768558Z","times_seen":1194,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/shape/banner-one__shape2.png","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/shape/banner-one__shape2.png HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 31 Jul 2024 22:12:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3598\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3598,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 183 x 306, 8-bit/color RGBA, non-interlaced","md5":"f1324b4272f2b13e8c6a71e8859770bc","sha1":"0d037e22bf63c0cb15889b228da4bcfe876e0dcf","sha256":"6dbfd649b7acfadb853ed48c19f62c6e90eedb5a385dca54577cacad2c88670e","sha512":"cebd6801eb5f04a7c76311f2cd77ea5d0dabdf8db0ce73d28d6eeedb11af4174dadd33202d6b941720b1838bc99ff47041d5ad780cdffa190f9879afad014eb9","ssdeep":"","tlshash":"0d715e17f3ec6d618c43678933d11b47e0b74d19f5fa4de9881138a4192fc846e0c9a9","first_seen":"2025-04-25T08:34:46.254209Z","last_seen":"2026-05-28T13:59:29.635502Z","times_seen":32,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gloexpress.icu/assets/img/project/project-one__img4.jpg","fqdn":"gloexpress.icu","domain":"gloexpress.icu","tld":"icu"},"ip":{"addr":"163.61.188.7","port":443,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://gloexpress.icu/","date":"2026-05-28T13:08:39.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gloexpress.icu","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 14 Apr 2026 04:16:51 GMT","end":"Mon, 13 Jul 2026 04:16:50 GMT"},"fingerprint":{"sha1":"F2:0F:05:EC:83:7D:8B:3B:F8:21:B4:3B:BE:D1:3B:DA:73:EA:ED:DF","sha256":"27:CB:4D:68:D0:8D:1E:C6:79:53:E8:18:F1:EE:88:39:8B:E2:3C:9A:77:08:32:12:E9:2F:CB:B3:A9:8B:D7:BD"}}},"request":{"raw":"GET /assets/img/project/project-one__img4.jpg HTTP/1.1\r\nHost: gloexpress.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://gloexpress.icu/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 04 Jun 2026 13:08:39 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Wed, 31 Jul 2024 22:13:00 GMT\r\naccept-ranges: bytes\r\ncontent-length: 69992\r\ndate: Thu, 28 May 2026 13:08:39 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":69992,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 410x300, components 3","md5":"6b040b249f57ddfe99786778628855db","sha1":"3b772da8ae5f58770f1a36c240f55a6e85c11d0b","sha256":"04d0fc10d189457a8be5590e8066e5bf0b6e901714f1c1e2a8b2d6dd469db00f","sha512":"1fc486baba7cf5c5d2156ef798d368bddc40b4e9f82cdea0078900f4aadcd5a11d3f7d5201cd95e05fb1c5e29376d5ddaa35d7979bdd893bd02c3564cbb3d286","ssdeep":"1536:r7eQevBmqut9Lwf2IuZth9n/4LDrHzBOs7nQGNlfz+:yBm5dh/Zth9ngvrHzBOenQG+","tlshash":"fc631290ee047872d6a75ab7b567342c911b4d55ef808dfe3570eac96c604b2ce03fa2","first_seen":"2025-04-25T08:34:46.307524Z","last_seen":"2026-05-28T13:59:29.637897Z","times_seen":32,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-28","alert":"Sinkholed","trigger":"gloexpress.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}