{"report_id":"e9af4dce-f0d6-46af-af00-3072c2ef2dfa","version":0,"status":"done","tags":[],"date":"2026-08-26T11:06:14Z","url":{"schema":"http","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"title":"Поддержка Steam","dom":{"size":42500,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (344)","md5":"3cb031ae5f08c51dfa4a700d6bc2a42d","sha1":"33f781e3684a83e85296fd39cc123d9a66aeade3","sha256":"54ed652de9b06bd65b170d1fc546b99d7bc5cf388b6acfa5d3b7b42ec178ff9b","sha512":"18cdc7b56ced650fe5bd16d2b3c955d789ae575706a859d0be16041cc8339c43ab3d588fb84810d95519b73bfca4d7abc38f7afda1f4cb4ed1b0ae4971b91870","ssdeep":"768:9PBEVLkNEG3QekWS2KfIt8opBJJLkNEG3Qr48uq2qo2AATtgn6yf5J3eORpPE/:9PBEVLkNEG3QekWS2KfIt8opBvLkNEGG","tlshash":"f613743198f154374246f186ea357b1e7dc2c1abea0e8a503aec0add6fd2c91c67720d","dom_hash":"domhashd56f9d9ab39a6ff233795893cd9d436e","first_seen":"2026-08-26T09:41:00.258984Z","last_seen":"2026-08-26T11:06:16.143423Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"216.198.79.1","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-30T11:06:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"id8341.com","ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-08-20","domain_rank":0,"first_seen":"2026-08-26T10:52:50.510215Z","last_seen":"2026-08-26T10:52:50.510215Z","alert_count":92,"request_count":23,"received_data":1570965,"sent_data":10987,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"help.steampowered.com","ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"2000-08-09","domain_rank":11249,"first_seen":"2015-06-02T22:49:13Z","last_seen":"2026-08-20T23:38:44.176979Z","alert_count":0,"request_count":5,"received_data":119971,"sent_data":2852,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"waitingpanl.com","ip":{"addr":"45.144.53.193","port":443,"asn":0,"as":"","country":"Slovenia","country_code":"SI"},"domain_registered":"2026-04-13","domain_rank":0,"first_seen":"2026-05-08T03:01:45.67226Z","last_seen":"2026-08-26T09:40:52.740975Z","alert_count":0,"request_count":1,"received_data":412,"sent_data":550,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0be5ea3c4ac500422abc46b89b3e58e3","sha1":"e8e88e5eff6c7ebe1d6a55b23cd49cca3793d176","sha256":"de9b31ddce13e66f2743e67f68993f239f895c0d6b22f7a45b6a5da972004fed","sha512":"5f8394033c200f9eb9932e3b4ff0ddb303f97a61388f6f5394f765ee2c8c296cf0f6a59e68c50b0ae34004537d41209fdfa8d0c5fd9f9d2cfe8271ed38b63a25","ssdeep":"","tlshash":"80c09b08b472fe90479315a08459431df1141517d429fd50b97cccd08f11015118054e","size":133,"data":"","first_seen":"2026-07-06T14:55:45.237812Z","last_seen":"2026-08-26T11:06:16.166307Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ed6fe4b6a4d8cfd17871d91d3a837f6","sha1":"a6d5553eb937cb129e4042a52d316e683d15a2b7","sha256":"544baa1691b99c9af31a94a33325971f6f91973af6aa95aff558b1757cf20cb1","sha512":"6b92365800cd36c2c7c18477cf933bacba1628fe3a178b1c9cd029ae53f7c3f61fcbfac58258c81ef035d9b17df6d0e0c21dfef70c49294321a0a5c31cb5efc8","ssdeep":"","tlshash":"2470000c388080288230280ea0380328a882038f0020e280000e080000082882aa2038","size":25,"data":"","first_seen":"2023-03-07T12:12:29Z","last_seen":"2026-08-26T11:06:16.166855Z","times_seen":997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"002a315aad7f92782241fd549262b6a4","sha1":"2b084a170afc623df7048ce19fd74c2a05bdd938","sha256":"af35f63b9306c671ff1baa24b3e260b6295ae79d9f33dcf68a988f9284a4c53f","sha512":"348c5203a67743de9f5d2237842f348ce68d02a89d4b49f5fbe8bdc2c19da423f6d2887aae34c5f182e13678b6f64b97145356424fe9fbd0d16020e0d29146e4","ssdeep":"","tlshash":"bba0026911581864438577efc067707ea90b254f542ed186550513a1c141674539613a","size":64,"data":"","first_seen":"2023-03-07T17:32:18Z","last_seen":"2026-08-26T11:06:16.167386Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"687f6d4754817414cc9c8adb56f22efd","sha1":"0096d192319c3dbdf8b1051c0286d1b8a42b887f","sha256":"3d42be51c099ce1a624754141e827fd6049c76afa0a440438d7d609915063a71","sha512":"4c003053f5a2f2cbb932854825348a3128553a9089f21482f7debb18cbc22c6fad65e3a7e02c5b2c02a2540aeb3cd1f11cf8cc91029af817cc2e2dd8cb863b3d","ssdeep":"","tlshash":"10d0a90ff1bb1151003b3c809a8b37286c9110574ec49a7e3f0c82e01f2c02a231230e","size":270,"data":"","first_seen":"2026-07-06T14:55:45.241059Z","last_seen":"2026-08-26T11:06:16.167956Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ab551af9b50ea6c9f3909ca540b0b61","sha1":"7b598a68f37467006da617bd9a37c5823ae6b031","sha256":"1f2c47be54f956839ae47db645360168f68fbbd59ac6afe8ae66d262c9cdd742","sha512":"b2c46710191f873c54b44e12a976be46becadec08b388a2bdb37a22cba3ba79e64fd59df11b507bab53d8cf03660fb5d0b51fb176223b550a76df06d8faf1fb9","ssdeep":"","tlshash":"8cf0265aaf612024d222c6aec40ad2852531800b8cadb8303b2ca3440f5d22dd3b2b89","size":465,"data":"","first_seen":"2026-07-06T14:55:45.242679Z","last_seen":"2026-08-26T11:06:16.168604Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"54194d4e5bfbf535e67dc68c5414e167","sha1":"67a302503c01534b14dba3b1d20cfed9907b1f1b","sha256":"9f50dd235970a88ba94395e7037a267ed667eda36ef08e3aecd39572e67f6493","sha512":"ec7260509fe1efb2b6edf9b0b2caae77e94de9cd8326a31e5f86f58f49567cee9fa20cee1799f172b0be7cfa4a0bc02093c179df0644d6f17ad75ee06d8bfcaa","ssdeep":"","tlshash":"28c0120b00449130c367a23cfd2fe545811400c31247c9b13f0c52042f1847c4162b58","size":171,"data":"","first_seen":"2026-07-06T14:55:45.244104Z","last_seen":"2026-08-26T11:06:16.169246Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f235d42d249e437447a25407faf78674","sha1":"5de70bf34661e817a4b95b5969d1b5f0b3813784","sha256":"809777704b07408802f66480b025780f945cb49158e804ecd4c95e343585053a","sha512":"560aab7cbb38da8f8b8420703178256b966b04b06b0b94e2082dab7ebe390e1daf980f00d33d7d361dffa1bf92850a503e6c732bfddf98492aacc1a8c728e576","ssdeep":"","tlshash":"6831ce06e1b2f8e80ba3f03dc7591221a010c2834458c9487fcd7b57afada39e3b8d80","size":1693,"data":"","first_seen":"2026-07-06T14:55:45.245114Z","last_seen":"2026-08-26T11:06:16.170498Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b2a591a8607d25504b29109a5804530f","sha1":"7274f32b5a9b89c830a2e3a47df7c87739c4c767","sha256":"645e03a0f0843d8206930ecaada1dce8e27988c9e9a46cce774f764844607087","sha512":"598cd04fef325b1de2f66836456a3b091a4632b3a46c870c6b6a2c98b5f1ce4c7ba2648534549aab5c49110e45ef5b238f64f3c1c8b08ce0d89e9cec9d19d244","ssdeep":"","tlshash":"27b01204c40f05a13404501407b90045c65001123801f444372ed0350f8050244fd1c8","size":98,"data":"","first_seen":"2026-07-06T14:55:45.246057Z","last_seen":"2026-08-26T11:06:16.17106Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"58467e738489f2cb107869c670ae625f","sha1":"ffd2ff6918f4a713e04382588a3531221cde391e","sha256":"3aa5ea24fe372a4809309904ce0649029ca775502ec3486100826b2d31ac86a4","sha512":"0016b13e52217cbbccd28e324c6831e31ecb71cde96474cd41f59b60dd6f562713fed5e39fc924e453fe6eec9ec82fbf3968b20922f13ef3d0bee99ef2235efe","ssdeep":"","tlshash":"4de0865a5082c54692d34ca41ee75204953038db659cb416394c4a225f0ad1f47b7dd8","size":404,"data":"","first_seen":"2026-07-06T14:55:45.246944Z","last_seen":"2026-08-26T11:06:16.171563Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"115295a31c4ba0ac1f6a4b9f81e9caa6","sha1":"2bcd89d7cfd8e7744f4bf94876a71b71919faf8f","sha256":"26f04c3607b40050c8f5e333f76f2f085a8db1bd9c219fede48b3420e493c98a","sha512":"9457602b88f7797d558fe631defc8fbaf760cd0ed1e199d4a4e6558858a047fa66c093fb5834b427ed876d7620fe1f73e3bc96f5fc06de73607e5f8a4f49dc56","ssdeep":"192:dFmi7iVhyA0rR8J74CpAUxiO1pvaETxiN4OT5iNtqj:zmi7iOR8JsMAai+vLtiKO1ic","tlshash":"43e10f6aaab214b1596bb07e0bdf66847074c1db9408ce003d4ccf859f45c6952e9bea","size":7189,"data":"","first_seen":"2026-07-06T14:55:45.248077Z","last_seen":"2026-08-26T11:06:16.172127Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shared_global.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68d0635ada12f979e7d3e1c240bc6b63","sha1":"04e472e36b0b745edcedd186213642511f2674c7","sha256":"cdaae9faffe069d88c9c2b87c3cd8305c8e416515160f3ebcc8f0f1108640ea9","sha512":"4e772b19f5b403a7396a58cf1ae0b70d271fff91d8af5e5748eabafc4e5a53574fd6476f467ab42d702f714cd2314ecbea8b57c1b9b460c0dd2e7b5e590acf7d","ssdeep":"1536:0v99zRW6Q2hNJRNhjmciMQzosXmDecTVbiqD3YHI1Sp6D3QgQDrMTAQaOfXkwCMb:A/5jmciZos2DeclP7YHNgOGXRt","tlshash":"c5f318d5eb7c112a897a302ddd2f504d3a7e1832b00469297c5e94d86ae0d6e43bbf7c","size":159875,"data":"","first_seen":"2026-07-06T14:55:45.215407Z","last_seen":"2026-08-26T11:06:16.15384Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shipping.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"68101a352dae0184238f221b3250b8fa","sha1":"ba43eacad47807112c9403e972b9ea5bd11e8fc4","sha256":"91f15c60a42c895a4003d869927da7066a715c672ff494cb0ddf29026d4807aa","sha512":"b6efbfa6d47669d96c8dd33f7e6d98fab8b90a323fe9083cbbe464af351431352c947ac49628ec8aeac5b5ed16f4b8647f5fbed2d251d176b1ae9c94d1056e6f","ssdeep":"","tlshash":"c9813000aaf516597e2d33b1587db3175a5827e03b8f0872f07c7395ba90e25fe3a502","size":3866,"data":"","first_seen":"2024-12-31T17:07:45.18009Z","last_seen":"2026-08-26T11:06:16.165736Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/help.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1ab5ddee15ff58e849884f1e5843ad","sha1":"add2797fe4c4d57758cd4fde62bbf75af0fd021f","sha256":"7708b23d607ad8d1ee6817d8be643ae012647566a6f519f293fe7d42000e6aff","sha512":"0618703a49b6a4fea4a259476ef5fc50f01e1f272a9b92dc67332c6f8cfed282b54f923a3fae6da4184dca4becf840cc776911ef1f980e02a74ce9396147f7fc","ssdeep":"3072:HTxNL5q5DBp2adtphUswEHV8NLIpuO2hNL7mYB6nwGjvjCbaIbEclurT:HTxNL5q5DBpJtphUswEHV8NLIINL7mYs","tlshash":"dfd3e6d4eb5d249e4431217ddc5e28cc393e49bb7a0609a77cc8127877e192e933af29","size":135069,"data":"","first_seen":"2026-07-06T14:55:45.207108Z","last_seen":"2026-08-26T11:06:16.150431Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/dselect.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e6f65501c3ad292b47328ab6ff5f7a6","sha1":"c78f61677b816a7263f9b179d2acba4fd4a5c2fe","sha256":"14641702e19d6cd25012020f2f8d7ff3d334dcecffbe7291abc53a7dc046b546","sha512":"a356e26e7cfd7c92f202de90952bd7167d0a6bacff50c6a88e38ff1f09424548e5a162a8d90ba933ff81481a877dd664779a26c31b5e0e325b7b07bf7b6beb20","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gEC6b48kgsaWEE+WTZ0VNM9CY94jiv7ksB:MhOdLSwcbkg8x0VNM9Cm+yoQ","tlshash":"4522a850b32c17e910be00bfcc895de8967ca9f68c0358a2bd5881ac75d45ab13fdc5b","size":10720,"data":"","first_seen":"2026-05-01T20:10:36.07722Z","last_seen":"2026-08-26T11:06:16.152711Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/3tkiiddb0026.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4d5002e724d1fb3c36aa0807fbbfba8","sha1":"f0506834cdc3f71d964461b59c73965ce47c02cc","sha256":"c0e9e1598387f7e9c1086606ecd44bbbbdb43a665fde3bf870fa240d70081a1c","sha512":"ce5b19112eee870502e308e4d83049bbed39d6f5f64cef893c9fc0be4a5e05dc503bdbcfd2402a099bc2ab93bd58bdd4c78550785a7c7105d1de3d5056abcbdf","ssdeep":"6144:CDBcC3tGHfu3tUTg5XSc2WzfWCFpxnRpI+kai:CVQuDjFpxnRTkR","tlshash":"c694d6706bc0a84813a78fb7b35bb4d5fc6e085f3c59095bd201fda0799522aeaf1931","size":418007,"data":"","first_seen":"2026-08-26T09:41:00.292528Z","last_seen":"2026-08-26T11:06:16.161395Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shared_responsive_adapter.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15addec289a89408ca46b9b15797149e","sha1":"7004276fab8e3c4ae33f1c8919d102eed1084955","sha256":"5edcb9726fdc97f8a01d5948f7eccfb279a51de6c0e610e38d2225434b0f34b4","sha512":"e7021e8f334cb7816ecd258ff9a72ca76db8214abb96b208b58397c193a602049f07073173930e37bbed09b4c05d314a8d6318f3df0e33b55d12e10c96a766b3","ssdeep":"384:0GUcz6olWst4anMMY5erCGgxEQx/kjHBc2gdXf7h6oq:0G7z7Wst4wYkuBEosjHCNZ7A","tlshash":"f7b2b5a9f75e12768179331c6e5b348e32bd84f8710aac827d60255c3aca54e43e6f4f","size":23695,"data":"","first_seen":"2026-05-14T04:43:00.991826Z","last_seen":"2026-08-26T11:06:16.153288Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/jquery-1.8.3.min.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","size":93636,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-28T07:04:38.344938Z","times_seen":37950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/tooltip.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","size":17568,"data":"","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-08-26T11:06:16.149837Z","times_seen":598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/main.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f65a4345bfd77680372a0ac7b379e5c3","sha1":"94f1669be6ee3d951621660d883e418acb5f71e9","sha256":"1867008a2a6ca1de656065c1dfce828356a5826fcdbe34a3668e2e51813d48b7","sha512":"337dc1fc57cf7a06d544d65cb0e6620d7a96a1d94cea09ae0c05a3d61d061eaa52b599efa6384588af56a0d4d4d93f9030498fa967d85f82d037165859669ec4","ssdeep":"192:+wrJG2AHVDFDlDFuDIUYokzdqSmKmqYAwuAjxHYrIJ/vbZzzGyUwta4X8LcVB3D:+wNG2AjrRwPqouAjxHYsJ/vbZzzG+Z/z","tlshash":"c042f6e8327c7e7316a136a601778510d62170632c0f5da4b38eddf668aaed16327f72","size":12957,"data":"","first_seen":"2026-05-05T09:25:57.965748Z","last_seen":"2026-08-26T11:06:16.159391Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"id8341.com/index_files/logo_steam.svg","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.269Z","timestamp":1787742345269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/logo_steam.svg HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38795\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"logo_steam.svg\"\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"31aabe1e01f27b3b9b47d7265807afc2\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l7z47-1787742345272-d10ec0edb69b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3646,"size_decoded":2288,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"31aabe1e01f27b3b9b47d7265807afc2","sha1":"a430f5a8a81145215c41c3ba80929627e570d81e","sha256":"3a4d08139646d567a612f75b8179641c570d490f8013478d131266ed21f3d453","sha512":"60dfb140295124b3f6b57592504ca6006c22988bba82bf63c5559fa7f8da2aab7e163265abb2a312034875f95fa850bbacb620ecca6c56ea8e79689963cd31c4","ssdeep":"","tlshash":"f971b4cc17338be06595c27e1e7476d223b365a9e8b001e8a3920c202c0bfe69a64d75","first_seen":"2023-10-31T01:09:47Z","last_seen":"2026-08-27T22:12:29.254363Z","times_seen":3002,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/favicon.ico","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.922Z","timestamp":1787742345922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/x-icon\r\nCache-Control: public,max-age=86400\r\nExpires: Wed, 26 Aug 2026 19:49:21 GMT\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nContent-Length: 1406\r\nDate: Wed, 26 Aug 2026 11:05:45 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1406,"size_decoded":1747,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel","md5":"2690ced7d66cf8b34658922e9625f65e","sha1":"57477c2180cc7b6b9e3064a46cf8da4ad7555540","sha256":"0c6516e22335e762e68bb63cc3f6eee7455fc226d0fc00c62ef13fc93fa16971","sha512":"c95a83a53c9fd1da6388b8c63e6b8434670f1a0c9c9db2cc775efc127899536095ec8290ec251575d1a355cc8c3a2c9786e719ae7e51d992de9e73e080d92aab","ssdeep":"","tlshash":"d42186016521db79d3f88d72fcc397508b255044c1f7ae867c9974945c88024f49e330","first_seen":"2023-04-10T19:13:33Z","last_seen":"2026-08-26T11:06:16.144957Z","times_seen":57,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shared_responsive.css","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.237Z","timestamp":1787742345237,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/shared_responsive.css HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 470983\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"shared_responsive.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"3ad49ffc1f18cf3d21f2640fce73f2e4\"\r\nlast-modified: Fri, 21 Aug 2026 00:16:01 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bm2ht-1787742345241-fd163f0f5881\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21234,"size_decoded":7365,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1673)","md5":"3ad49ffc1f18cf3d21f2640fce73f2e4","sha1":"15b0535c8bbbf0570c9d79e2314d5b508905d413","sha256":"2a91e390f847e9277717648a6e5c8e6c59b8798ebe8936c1aa9e98397cc0c29a","sha512":"032a003338607636d390c741d087588d784a0090b171ade78c4701379ee9ef3d5d909709838bb065f96cfc8300aca5a6c2e1b813414f4ec603d44e2093e0722f","ssdeep":"384:hl5qYb2mQXrUgCYezhmVJzeQj/H6TKlojylO6MK:j5qFmQXPCczeQjv6qOa","tlshash":"3d9285176e20a102b30e7259fe569f25272fc1597f0d8e5ab7b9316862c539d00a3bcf","first_seen":"2026-05-05T09:25:57.952704Z","last_seen":"2026-08-26T11:06:16.145911Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/fonts/MotivaSans-Regular.ttf","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.514Z","timestamp":1787742345514,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/fonts/MotivaSans-Regular.ttf HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/index_files/motiva_sans.css\r\nCookie: uv=mt9zmu2w-wc0hfu60\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38793\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"MotivaSans-Regular.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"57613e143ff3dae10f282e84a066de28\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7b9r-1787742345517-6a2a9a0140f2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122684,"size_decoded":57655,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 22 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;MotivaSan","md5":"57613e143ff3dae10f282e84a066de28","sha1":"88756cc8c6db645b5f20aa17b14feefb4411c25f","sha256":"19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14","sha512":"94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176","ssdeep":"3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh","tlshash":"82c34b06f316e70aec614e3c66769399b358f8a53f2fcb0b95857d60bcad0d51e8128c","first_seen":"2023-04-05T04:16:14Z","last_seen":"2026-08-27T22:12:29.220168Z","times_seen":7343,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/fonts/MotivaSans-Medium.ttf","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.515Z","timestamp":1787742345515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/fonts/MotivaSans-Medium.ttf HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/index_files/motiva_sans.css\r\nCookie: uv=mt9zmu2w-wc0hfu60\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38793\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"MotivaSans-Medium.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"2d64caa5ecbf5e42cbb766ca4d85e90e\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qcshb-1787742345519-fc9d520b5650\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":124048,"size_decoded":58003,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaSans","md5":"2d64caa5ecbf5e42cbb766ca4d85e90e","sha1":"147420abceb4a7fd7e486dddcfe68cda7ebb3a18","sha256":"045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f","sha512":"c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96","ssdeep":"1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9","tlshash":"86c35c06f706d709dd240e3df9a1a3a9b358f8a57b1fcb0fa6856d65fc8e0852a441cc","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-27T22:12:29.352043Z","times_seen":7104,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-26T11:05:44.941Z","timestamp":1787742344941,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 490394\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"d6e9d367db9fee46ca51e14c1dbd4a0c\"\r\nlast-modified: Thu, 20 Aug 2026 18:52:30 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bm2ht-1787742345001-b314cd54489d\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery:1.8.3","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":48232,"size_decoded":10016,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"88107af634b24f6251c670049b673ce0","sha1":"44c90d95073630bc527833d199bdd8c86b64b4ff","sha256":"c86161ef3e258a78e1160df1853f0c4a7a27d658c1bdb198fe2c7506aa7a5bd4","sha512":"dce57a87c1f550091e5b9751afe5ecaf7a35ae6ed935816d03de90db92f6bd3626bce4f6fedb4a3fc2641cb96605bbd11112c037158cceb69697bbb8a756fb3a","ssdeep":"768:JIIVobQhKkbYcQi20gV1bSY6YhibQhKkbYPOAKeMQkQq6J2j6wRTW3eORpPE5:JIIVobQhKkbYcQi20gV1bSY6YgbQhKkD","tlshash":"3e23952158f150b7424af1a5ea757a0e3e81c1afea0e8d053afc1aed6fd2c50c5a734d","first_seen":"2026-08-26T09:41:00.260885Z","last_seen":"2026-08-26T11:06:16.147754Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":22,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shared_global.css","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.231Z","timestamp":1787742345231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/shared_global.css HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 6866\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"shared_global.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"cde72c399d5de9c75b5c933ebf1ae0d7\"\r\nlast-modified: Wed, 26 Aug 2026 09:11:19 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l7z47-1787742345236-3e42efb11357\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":86082,"size_decoded":20286,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1819)","md5":"cde72c399d5de9c75b5c933ebf1ae0d7","sha1":"55c54326b7c5d91007a0a1f713d52f75cf15a8ba","sha256":"46786620249dfea5661828bef147cc33953b36ccfefcae438fe5e25c9fe82f05","sha512":"3f1c04ef5a7231504dd4c20d96e2f2539e6c6828e60eddff03cb8d68b73c1c2261486d33c2a1a24b8cde345b167b602ed4310f6d97a9141dbae9a8a25cd65bd6","ssdeep":"1536:+XsHeX5CzkucKN9GISh8xNrhOd8Kt/h+TcLuTcK65JLwHAfnh87C:EuhN9GMxfOdJSTcK2JLwHAfnhCC","tlshash":"9783d833a6953547732f94a9fa17ab5ba33f0187eb0e8fa9f161352cd3840d41273a49","first_seen":"2026-05-05T09:25:57.968551Z","last_seen":"2026-08-26T11:06:16.148345Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/jquery-1.8.3.min.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.239Z","timestamp":1787742345239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/jquery-1.8.3.min.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 39639\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"jquery-1.8.3.min.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"3576a6e73c9dccdbbc4a2cf8ff544ad7\"\r\nlast-modified: Wed, 26 Aug 2026 00:05:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l7z47-1787742345246-0d556f38a417\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93636,"size_decoded":35589,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65483)","md5":"3576a6e73c9dccdbbc4a2cf8ff544ad7","sha1":"06e872300088b9ba8a08427d28ed0efcdf9c6ff5","sha256":"61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf","sha512":"27d41f6cfb8596a183d8261509aeb39fcffb3c48199c6a4ce6ab45381660c2e8e30e71b9c39163c78e98ceabc887f391b2d723ee5b92b6fbc81e48ac422e522b","ssdeep":"1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ","tlshash":"b393f8ed73c6717243ab30ae40af610ef1365869280d8410f129e8f9bc79a499277f7d","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-08-28T07:04:38.344938Z","times_seen":37950,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/tooltip.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.241Z","timestamp":1787742345241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/tooltip.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 39638\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"tooltip.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"93995e3bb315bc0695254d745e88d5e1\"\r\nlast-modified: Wed, 26 Aug 2026 00:05:06 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bm2ht-1787742345246-631f76b44f35\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":17568,"size_decoded":5265,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"93995e3bb315bc0695254d745e88d5e1","sha1":"206782432cbbafa347e32cd5c19775a701faef83","sha256":"39cbe8d0785370b4ebda08f844727ac3a6fc5cab10bd26cbeda5dc36ff4166d0","sha512":"b6e8c9675e186e53a54a40e45ee78f6025b0ddc3f067f6f0bef67fef3ce5f30cce2d0be18b7457e05ff397ef8c301ab5bb07fe53fcf61e11f65de9f872f361d0","ssdeep":"192:h3ug34ZknOPADCO0izmla3uCXDJiC7ZEb9k9Hdqyo0WPn4PRP/4PaP34Pjc+8ubK:h3ug4R4svlBEJpocOFJ2eu+i9","tlshash":"ec826591f73d20ae407ab3be896d2388b33e40b65161f8757d7886743a4e4970392fe4","first_seen":"2026-02-18T02:21:57.511284Z","last_seen":"2026-08-26T11:06:16.149837Z","times_seen":598,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/help.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.245Z","timestamp":1787742345245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/help.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 39633\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"help.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"ca1ab5ddee15ff58e849884f1e5843ad\"\r\nlast-modified: Wed, 26 Aug 2026 00:05:11 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7b9r-1787742345249-4399141df4a5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":135069,"size_decoded":28768,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (355)","md5":"ca1ab5ddee15ff58e849884f1e5843ad","sha1":"add2797fe4c4d57758cd4fde62bbf75af0fd021f","sha256":"7708b23d607ad8d1ee6817d8be643ae012647566a6f519f293fe7d42000e6aff","sha512":"0618703a49b6a4fea4a259476ef5fc50f01e1f272a9b92dc67332c6f8cfed282b54f923a3fae6da4184dca4becf840cc776911ef1f980e02a74ce9396147f7fc","ssdeep":"3072:HTxNL5q5DBp2adtphUswEHV8NLIpuO2hNL7mYB6nwGjvjCbaIbEclurT:HTxNL5q5DBpJtphUswEHV8NLIINL7mYs","tlshash":"dfd3e6d4eb5d249e4431217ddc5e28cc393e49bb7a0609a77cc8127877e192e933af29","first_seen":"2026-07-06T14:55:45.207108Z","last_seen":"2026-08-26T11:06:16.150431Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/header_logo.png","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.268Z","timestamp":1787742345268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/header_logo.png HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 38795\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"header_logo.png\"\r\ncontent-type: image/png\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: \"a4e79c73ee13cb25b60fc4b0ba1f690c\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6khxv-1787742345271-33b0b633d849\r\ncontent-length: 10863\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10863,"size_decoded":11380,"mime_type":"image/png","magic":"PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced","md5":"a4e79c73ee13cb25b60fc4b0ba1f690c","sha1":"b690c31b2eb1b0eb085e91aaae7e79f03debe7c1","sha256":"6cb869df089146c12efb5e9c968e911c314842624ba6f052a11346ac734cadc8","sha512":"aad423119f410a655f0aa475d2fe692087d7262c3986ce71347981c5b60f6a10031d7050bf9b9aee4e7d84d814f0b8883c964028fcbe14ed3464602f3ba6cec3","ssdeep":"192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM","tlshash":"4722c06cfcc0c875958352ba3e27fb7043f93e10c44b86b86960e5a5365c8f4959d137","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-27T22:12:29.146878Z","times_seen":7595,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/fonts/MotivaSans-Light.ttf","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.513Z","timestamp":1787742345513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/fonts/MotivaSans-Light.ttf HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/index_files/motiva_sans.css\r\nCookie: uv=mt9zmu2w-wc0hfu60\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38793\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"MotivaSans-Light.ttf\"\r\ncontent-encoding: br\r\ncontent-type: font/ttf\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"d45f521dba72b19a4096691a165b1990\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:12 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6khxv-1787742345516-553035b32182\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":122660,"size_decoded":57188,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 18 tables, 1st \"DSIG\", 24 names, Macintosh, Copyright � 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSans-","md5":"d45f521dba72b19a4096691a165b1990","sha1":"2a08728fbb9229acccbf907efdf4091f9b9a232f","sha256":"6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc","sha512":"9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c","ssdeep":"3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh","tlshash":"70c32a46f712eb4adc554e3d6162a3d5b348f9f53b2f830ba2856e55fc8f0c90e46288","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-27T22:12:29.281289Z","times_seen":4090,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/motiva_sans.css","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.228Z","timestamp":1787742345228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/motiva_sans.css HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38796\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"motiva_sans.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"5566ef532b6535d0e81c3c410a41fefa\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bm2ht-1787742345232-0c72dac96a08\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":2042,"size_decoded":1080,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5566ef532b6535d0e81c3c410a41fefa","sha1":"d825d2918157e888ffaf4f4d039ee67c4eac7715","sha256":"576b505a364467100126c83a9ec3e2ba5f494bddd2259a58ca3cbee7d2b9240b","sha512":"0a78571c07ccc042c09e31527bb849784f6438bafa9d41dc0787683d838420085268cebcc15b6b9302bab533ef6d2d0a84165c587d6d9eff459080331da6ac71","ssdeep":"","tlshash":"a8418c00595ca53b97b00d47f3ce6e098d5f38187225c576d8a12968aff687e43b0b9b","first_seen":"2026-07-06T14:55:45.219964Z","last_seen":"2026-08-26T11:06:16.152116Z","times_seen":4,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/dselect.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.247Z","timestamp":1787742345247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/dselect.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 39631\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"dselect.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"2e6f65501c3ad292b47328ab6ff5f7a6\"\r\nlast-modified: Wed, 26 Aug 2026 00:05:13 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bm2ht-1787742345253-7412eea69c27\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10720,"size_decoded":3773,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2e6f65501c3ad292b47328ab6ff5f7a6","sha1":"c78f61677b816a7263f9b179d2acba4fd4a5c2fe","sha256":"14641702e19d6cd25012020f2f8d7ff3d334dcecffbe7291abc53a7dc046b546","sha512":"a356e26e7cfd7c92f202de90952bd7167d0a6bacff50c6a88e38ff1f09424548e5a162a8d90ba933ff81481a877dd664779a26c31b5e0e325b7b07bf7b6beb20","ssdeep":"192:MRfE8jdnRqi49tazp+SJ2GvZg2gEC6b48kgsaWEE+WTZ0VNM9CY94jiv7ksB:MhOdLSwcbkg8x0VNM9Cm+yoQ","tlshash":"4522a850b32c17e910be00bfcc895de8967ca9f68c0358a2bd5881ac75d45ab13fdc5b","first_seen":"2026-05-01T20:10:36.07722Z","last_seen":"2026-08-26T11:06:16.152711Z","times_seen":29,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shared_responsive_adapter.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.249Z","timestamp":1787742345249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/shared_responsive_adapter.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38796\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"shared_responsive_adapter.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"15addec289a89408ca46b9b15797149e\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::l7z47-1787742345254-03d8de612a3c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23695,"size_decoded":7287,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"15addec289a89408ca46b9b15797149e","sha1":"7004276fab8e3c4ae33f1c8919d102eed1084955","sha256":"5edcb9726fdc97f8a01d5948f7eccfb279a51de6c0e610e38d2225434b0f34b4","sha512":"e7021e8f334cb7816ecd258ff9a72ca76db8214abb96b208b58397c193a602049f07073173930e37bbed09b4c05d314a8d6318f3df0e33b55d12e10c96a766b3","ssdeep":"384:0GUcz6olWst4anMMY5erCGgxEQx/kjHBc2gdXf7h6oq:0G7z7Wst4wYkuBEosjHCNZ7A","tlshash":"f7b2b5a9f75e12768179331c6e5b348e32bd84f8710aac827d60255c3aca54e43e6f4f","first_seen":"2026-05-14T04:43:00.991826Z","last_seen":"2026-08-26T11:06:16.153288Z","times_seen":40,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shared_global.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.242Z","timestamp":1787742345242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/shared_global.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 39637\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"shared_global.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"68d0635ada12f979e7d3e1c240bc6b63\"\r\nlast-modified: Wed, 26 Aug 2026 00:05:07 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6khxv-1787742345246-5706ddd6b26e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":159875,"size_decoded":42961,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4310)","md5":"68d0635ada12f979e7d3e1c240bc6b63","sha1":"04e472e36b0b745edcedd186213642511f2674c7","sha256":"cdaae9faffe069d88c9c2b87c3cd8305c8e416515160f3ebcc8f0f1108640ea9","sha512":"4e772b19f5b403a7396a58cf1ae0b70d271fff91d8af5e5748eabafc4e5a53574fd6476f467ab42d702f714cd2314ecbea8b57c1b9b460c0dd2e7b5e590acf7d","ssdeep":"1536:0v99zRW6Q2hNJRNhjmciMQzosXmDecTVbiqD3YHI1Sp6D3QgQDrMTAQaOfXkwCMb:A/5jmciZos2DeclP7YHNgOGXRt","tlshash":"c5f318d5eb7c112a897a302ddd2f504d3a7e1832b00469297c5e94d86ae0d6e43bbf7c","first_seen":"2026-07-06T14:55:45.215407Z","last_seen":"2026-08-26T11:06:16.15384Z","times_seen":4,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/header_menu_hamburger.png","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.266Z","timestamp":1787742345266,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/header_menu_hamburger.png HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6864\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"header_menu_hamburger.png\"\r\ncontent-type: image/png\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: \"eabc76eb57feae44add7faead028521e\"\r\nlast-modified: Wed, 26 Aug 2026 09:11:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7b9r-1787742345270-cb4c08bfb423\r\ncontent-length: 3777\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3777,"size_decoded":4302,"mime_type":"image/png","magic":"PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced","md5":"eabc76eb57feae44add7faead028521e","sha1":"4e3e53938fad15661d2d046a868338841a95db19","sha256":"fc9e6260a2706ae146282d77e67bc1b74688435f8912ab4c1932641eec28bffa","sha512":"5c6da6eeefddf321c2bc7e39a134e0a3140a9f93ad1560b2e102ef60ec218c29aae14ed344c79e25cc5493cd15551040d8c909de28dcab02034d787563104e07","ssdeep":"","tlshash":"eb717ce7323e5456e1f056c6015b52f69eb1a1080d2b4e09f224b77831ac63be38333d","first_seen":"2023-04-05T21:31:08Z","last_seen":"2026-08-27T22:12:29.292911Z","times_seen":7628,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/images/blue_body_repeat.jpg?v=2","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.511Z","timestamp":1787742345511,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/images/blue_body_repeat.jpg?v=2 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 65743\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-100cf\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Wed, 26 Aug 2026 11:05:45 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":65743,"size_decoded":66011,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x690, components 3","md5":"105f079801573f86f1eb00e5a5859b5b","sha1":"a25da185557ecc0eb30943f902723b415bba4728","sha256":"b258176e6b291343c18679962ab8658108451a22f12a5aecab106501d8bc091e","sha512":"fb3574ade953ac8dc2dbd866d035327b73e1ad47528a878bf6b8c328679f44d7cb513a57e74a2e0489a5b42fa1c8992e9ee73ec54f7f19047f2e863be5fbc8f7","ssdeep":"1536:rNLzMwRMBrmzHC4IO0cYFmL+76ELuC+ZYJ+pGXN:JLzVm6dIO0tmqoZC+G9","tlshash":"eb5302cbb65c7693f2ac857ee6cae599ee317f84b11441eb4385882f04210ad5e17cd4","first_seen":"2023-05-21T17:27:57Z","last_seen":"2026-08-26T11:06:16.155085Z","times_seen":72,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":19,"connect":1,"send":0,"wait":152,"receive":12,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waitingpanl.com/dhhnkcwkcohehmlplsmymqcilqlalsjneeqbibobfxmijn","fqdn":"waitingpanl.com","domain":"waitingpanl.com","tld":"com"},"ip":{"addr":"45.144.53.193","port":443,"asn":0,"as":"","country":"Slovenia","country_code":"SI"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.520Z","timestamp":1787742345520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waitingpanl.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Jun 2026 16:35:55 GMT","end":"Sun, 06 Sep 2026 16:35:54 GMT"},"fingerprint":{"sha1":"8C:B2:66:F9:84:6F:D0:16:53:6F:24:33:F3:CB:62:B6:FE:DD:B7:21","sha256":"4C:91:95:61:7E:B1:39:40:77:83:43:1C:C2:81:5A:AB:94:A9:67:74:09:69:53:F9:42:79:AA:7D:30:33:63:5E"}}},"request":{"raw":"POST /dhhnkcwkcohehmlplsmymqcilqlalsjneeqbibobfxmijn HTTP/1.1\r\nHost: waitingpanl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 148\r\nOrigin: https://id8341.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":148,"data":"d=id8341.com\u0026u=f-mt9zmu2w-wc0hfu60\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 67\r\nETag: W/\"43-hrmg+7Q5HY5qofztXVTZttajdEg\"\r\nDate: Wed, 26 Aug 2026 11:05:45 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":67,"size_decoded":412,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a3285be2371774fc2924919cd30e2d86","sha1":"86b9a0fbb4391d8e6aa1fced5d54d9b6d6a37448","sha256":"b00a0129f21f2ec2fd8d87f8d67131ba24cb6b1afb6a8e4c67ed9fd74ddbb17f","sha512":"3192961627a64589839c0c730a63e866da40679a02763303f3f5ef5f45f35a06d807cf2c514585ddf82e5858d68a9eee61b253599080e98fca5331fd056abd06","ssdeep":"","tlshash":"3ba00295859061fe8b43490c814d6e000b7c002769c47ac6f40c0f8851f10afc429233","first_seen":"2026-08-26T11:06:16.155721Z","last_seen":"2026-08-26T11:06:16.155721Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":15,"connect":15,"send":0,"wait":148,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/buttons.css","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.229Z","timestamp":1787742345229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/buttons.css HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38796\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"buttons.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"25881b90a0ce0119a61231ea5688f035\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6khxv-1787742345233-578a9bdf788c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":36473,"size_decoded":4963,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"25881b90a0ce0119a61231ea5688f035","sha1":"a5c1b63eea8d5e5e12c5a5141deedf0316b7aaec","sha256":"d1c259d645161358bcdcc7d07c4144cda32cbfa675bc084b84b9ba25323532ec","sha512":"d71e223b3071a4515f7f633e7cd087d833c3a1a40ba75c98ea9f599fc3ec1b3a1c8461105680e6c31b1cbe0bcef7fa61af7b581b41ce409ced2140764e4a7ac0","ssdeep":"192:X9MA5hhzxcbeYatuUxpC2hSGz0usVWnGsws9cbpWG0WASsaZsMtAmYabUoByYagD:l5/z6bJaBhSdbiabUo7aZaKj6vvZfGU","tlshash":"1cf2ce99b38c70753237e1e065175fe86a7a109e88670f9efab5b2bc13da0ec1535813","first_seen":"2025-05-26T14:57:53.038233Z","last_seen":"2026-08-26T11:06:16.157662Z","times_seen":37,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/store_game_shared.css","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.232Z","timestamp":1787742345232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/store_game_shared.css HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38796\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"store_game_shared.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"877ac3be91357d1f193a5a6a4052c21c\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bm2ht-1787742345237-0460aa0e73e9\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18454,"size_decoded":6348,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3866)","md5":"877ac3be91357d1f193a5a6a4052c21c","sha1":"492484184fcb0b3f16a2256d975733dbfd261af0","sha256":"ba2cde0da0a18459e35e95b8675958a5ca708ea6326397423af4088aa2245251","sha512":"d1118c361bab1020c8717e9839fe450610694db5a64da4d4a693a7b2188c3ee0fae210494507acff01e57a725b6afee661051994919811b0b6e2907751e81377","ssdeep":"384:ObtFvljP9d3/j7SV7HWmypDra4SRDtq7d3/j7SV7H+y8ZZ:I59dKV72BpDrwtA7dKV7ey8ZZ","tlshash":"f9820a1f2122b8c9b16fd4d9ef41f6b1af0f548bac0c5f4aba95f12cd6480446732b99","first_seen":"2025-10-19T11:02:47.141725Z","last_seen":"2026-08-26T11:06:16.15866Z","times_seen":237,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/main.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.248Z","timestamp":1787742345248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/main.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 39630\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"main.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"f65a4345bfd77680372a0ac7b379e5c3\"\r\nlast-modified: Wed, 26 Aug 2026 00:05:14 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6khxv-1787742345251-db51f0409a71\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12957,"size_decoded":5528,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12794)","md5":"f65a4345bfd77680372a0ac7b379e5c3","sha1":"94f1669be6ee3d951621660d883e418acb5f71e9","sha256":"1867008a2a6ca1de656065c1dfce828356a5826fcdbe34a3668e2e51813d48b7","sha512":"337dc1fc57cf7a06d544d65cb0e6620d7a96a1d94cea09ae0c05a3d61d061eaa52b599efa6384588af56a0d4d4d93f9030498fa967d85f82d037165859669ec4","ssdeep":"192:+wrJG2AHVDFDlDFuDIUYokzdqSmKmqYAwuAjxHYrIJ/vbZzzGyUwta4X8LcVB3D:+wNG2AjrRwPqouAjxHYsJ/vbZzzG+Z/z","tlshash":"c042f6e8327c7e7316a136a601778510d62170632c0f5da4b38eddf668aaed16327f72","first_seen":"2026-05-05T09:25:57.965748Z","last_seen":"2026-08-26T11:06:16.159391Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/3tkiiddb0026.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.251Z","timestamp":1787742345251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /3tkiiddb0026.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 39627\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"3tkiiddb0026.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"c4d5002e724d1fb3c36aa0807fbbfba8\"\r\nlast-modified: Wed, 26 Aug 2026 00:05:17 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::6khxv-1787742345255-f9fb5fef96e6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":418007,"size_decoded":133216,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c4d5002e724d1fb3c36aa0807fbbfba8","sha1":"f0506834cdc3f71d964461b59c73965ce47c02cc","sha256":"c0e9e1598387f7e9c1086606ecd44bbbbdb43a665fde3bf870fa240d70081a1c","sha512":"ce5b19112eee870502e308e4d83049bbed39d6f5f64cef893c9fc0be4a5e05dc503bdbcfd2402a099bc2ab93bd58bdd4c78550785a7c7105d1de3d5056abcbdf","ssdeep":"6144:CDBcC3tGHfu3tUTg5XSc2WzfWCFpxnRpI+kai:CVQuDjFpxnRTkR","tlshash":"c694d6706bc0a84813a78fb7b35bb4d5fc6e085f3c59095bd201fda0799522aeaf1931","first_seen":"2026-08-26T09:41:00.292528Z","last_seen":"2026-08-26T11:06:16.161395Z","times_seen":3,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/footerLogo_valve_new.png","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.264Z","timestamp":1787742345264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/footerLogo_valve_new.png HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6864\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"footerLogo_valve_new.png\"\r\ncontent-type: image/png\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: \"5cba6abf67ac92684a4782b891a69c9d\"\r\nlast-modified: Wed, 26 Aug 2026 09:11:21 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::q7b9r-1787742345267-a0746bda9ef7\r\ncontent-length: 2285\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2285,"size_decoded":2809,"mime_type":"image/png","magic":"PNG image data, 184 x 52, 8-bit/color RGBA, non-interlaced","md5":"5cba6abf67ac92684a4782b891a69c9d","sha1":"d560912d1fecebbed7b18b1c472c70f70080bcee","sha256":"ff991cd769572478cdc67d22980851f2f4f028b009445f8e9251e84f0a2aa41c","sha512":"0393790799dd0b93b565c763fde339a6a66e462d72cb82ba8867c6c2fe19c10fd436d339a14287b7fd62c297dd2dd44cdcb8e6125e2eb2193c2c90281a360e2f","ssdeep":"","tlshash":"bf4139cec08ea41678fba99358546eec2a16d29bd8d158f00d98288d3561c7d57fc224","first_seen":"2025-10-15T17:17:10.867018Z","last_seen":"2026-08-27T22:12:29.233476Z","times_seen":1034,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.522Z","timestamp":1787742345522,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 291\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-123\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Wed, 26 Aug 2026 11:05:45 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":291,"size_decoded":595,"mime_type":"image/png","magic":"PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced","md5":"a2796187c58c7e948159e37d6990ecc2","sha1":"4209cd85add507247f9ce5a87a8c9095b54ee417","sha256":"23341256db7f44b1f3811880fa2bae6b7748bbf6b62c544a162e38cf0d5c5082","sha512":"5ef103b8398507495c2708df8fcd82bdb763b1d580aaaa6cacfb805614764277c19e8ece5d890a8aafc004fc8c25e3ab2e67d6fbf373c432a9a0d7c36fa0890f","ssdeep":"","tlshash":"83d0ebf3a3e86d79fb52fe97d10180e0465fcaeb6004877889c3880447a81f880f2996","first_seen":"2023-04-24T20:00:45Z","last_seen":"2026-08-27T22:12:29.260491Z","times_seen":7562,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":158,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/images/blue_body_top.jpg?v=2","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.510Z","timestamp":1787742345510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/images/blue_body_top.jpg?v=2 HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/jpeg\r\nContent-Length: 50887\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-c6c7\"\r\nAccess-Control-Allow-Origin: *\r\nAccept-Ranges: bytes\r\nDate: Wed, 26 Aug 2026 11:05:45 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50887,"size_decoded":51154,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=690, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=2038], baseline, precision 8, 1600x690, components 3","md5":"9b4b2ebbb01be5c4cfe1fcbdd9da0ef0","sha1":"8d17a27b2268930b4ec86c56f9cd0c73ce18ff7c","sha256":"aeacbf69f083c220da60b8994c08cf8cd1505a62a0df5a7c0a9aa4f258bab1e7","sha512":"0a15b6e53c85e193baa7618ab0ff50afe764e613b9d02eada43da6ba23efb7a845e2a39561f935ec5247d4fbcadad1390be91ad10ef913e502ba68879ced53d2","ssdeep":"1536:lqA5Kl4nn9bogS73BTeo7xk884jtUUit4cs114:44nn9bRSzBeU84uL4w","tlshash":"0b336e26fe1c1fd1c5c978331900edb39a354f684b932a96fd7c320a7766d86982439b","first_seen":"2023-05-21T17:27:57Z","last_seen":"2026-08-26T11:06:16.163814Z","times_seen":72,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":20,"connect":1,"send":0,"wait":149,"receive":9,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"help.steampowered.com/public/shared/images/popups/btn_arrow_down_padded.png","fqdn":"help.steampowered.com","domain":"steampowered.com","tld":"com"},"ip":{"addr":"23.44.45.16","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.523Z","timestamp":1787742345523,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"help.steampowered.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 12 Aug 2026 21:05:40 GMT","end":"Tue, 10 Nov 2026 21:05:39 GMT"},"fingerprint":{"sha1":"D5:21:D1:64:38:13:3F:58:03:D2:E4:93:EF:7C:F4:B5:36:80:3C:6D","sha256":"D8:22:BB:FB:09:FD:98:A1:84:64:1D:E5:9F:C5:32:96:94:F2:FD:08:75:9B:53:6D:3D:83:63:A2:A3:32:15:91"}}},"request":{"raw":"GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1\r\nHost: help.steampowered.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nContent-Length: 161\r\nLast-Modified: Fri, 22 Nov 2024 19:11:30 GMT\r\nETag: \"6740d762-a1\"\r\nStrict-Transport-Security: max-age=63072000; includeSubdomains; preload\r\nAccept-Ranges: bytes\r\nDate: Wed, 26 Aug 2026 11:05:45 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":161,"size_decoded":464,"mime_type":"image/png","magic":"PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced","md5":"f2dae37acac6b9d5a91caf1885c2f7d0","sha1":"5f80fdde9f702a1d7589bc5faf88c14066e26c32","sha256":"93b1fbe4f6245b62bfd4c8c3347abe0fe67ed711315e59bfadaebc9873d8d9b5","sha512":"8d7ff7133ab97d81985c50fa8fd93916b42b1ce812af21bc732dcae45d59b9154fcc965857235d925c471db191dfb79c0753c70c7a4d5b0285b908e396216805","ssdeep":"","tlshash":"95c08cc1bb64ed58dad20363a596802084a30a844a53836ca9a6c875023aa01c8d1f46","first_seen":"2023-04-05T18:00:53Z","last_seen":"2026-08-26T21:42:36.325022Z","times_seen":3682,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":-1,"dns":7,"connect":1,"send":0,"wait":146,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/help.css","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.233Z","timestamp":1787742345233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/help.css HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38796\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"help.css\"\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"9a23dbe1f2fc8277cf5621a55782570f\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::qcshb-1787742345236-179689c150bd\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81273,"size_decoded":18765,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9a23dbe1f2fc8277cf5621a55782570f","sha1":"db4e4e0396a5b589cfeaa47b368fe37ed9a1d186","sha256":"29a462e61266614f9c9db8c406b231c76f582d5709f3d07d965b4fefcf75938b","sha512":"ad8b36176e7906c549a2538fb1a4f7b54e98b71bf958266ad788fd1cdac42c56246795abf0ae199588d1f778006dacd2580c06fb36679f14b985b7e0c88295ea","ssdeep":"1536:0NoTZuRPU6US1omeWjMUcGzV3hJTxd+dMpUeV1wJMYN/iIQq48E37L6jNrK:1TZCGmeWnV6dMpUeV1wJ7C8ErLulK","tlshash":"b483616b77101c4ab12fa0a9ef95ebb6671f44d3af1e4ea6b850756cd34c1901333ac8","first_seen":"2026-03-24T23:27:54.096128Z","last_seen":"2026-08-26T11:06:16.165244Z","times_seen":9,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id8341.com/index_files/shipping.js","fqdn":"id8341.com","domain":"id8341.com","tld":"com"},"ip":{"addr":"64.29.17.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://id8341.com/","date":"2026-08-26T11:05:45.244Z","timestamp":1787742345244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.id8341.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 20 Aug 2026 17:52:35 GMT","end":"Wed, 18 Nov 2026 17:52:34 GMT"},"fingerprint":{"sha1":"86:50:FF:FB:81:1D:0C:78:CF:75:85:1A:9E:A7:93:7B:E1:4E:5D:C5","sha256":"06:C0:45:B1:CB:73:88:F8:73:53:1F:A8:C5:0B:B2:22:3E:F4:BA:08:94:A8:40:2B:BA:6E:D4:B7:D4:E5:35:28"}}},"request":{"raw":"GET /index_files/shipping.js HTTP/1.1\r\nHost: id8341.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://id8341.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\nage: 38796\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"shipping.js\"\r\ncontent-encoding: br\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 26 Aug 2026 11:05:45 GMT\r\netag: W/\"68101a352dae0184238f221b3250b8fa\"\r\nlast-modified: Wed, 26 Aug 2026 00:19:08 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bm2ht-1787742345248-055e2a72d58e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":3866,"size_decoded":1469,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"68101a352dae0184238f221b3250b8fa","sha1":"ba43eacad47807112c9403e972b9ea5bd11e8fc4","sha256":"91f15c60a42c895a4003d869927da7066a715c672ff494cb0ddf29026d4807aa","sha512":"b6efbfa6d47669d96c8dd33f7e6d98fab8b90a323fe9083cbbe464af351431352c947ac49628ec8aeac5b5ed16f4b8647f5fbed2d251d176b1ae9c94d1056e6f","ssdeep":"","tlshash":"c9813000aaf516597e2d33b1587db3175a5827e03b8f0872f07c7395ba90e25fe3a502","first_seen":"2024-12-31T17:07:45.18009Z","last_seen":"2026-08-26T11:06:16.165736Z","times_seen":47,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-26","alert":"Sinkholed","trigger":"id8341.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-26","alert":"Phishing Block","trigger":"id8341.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}