{"report_id":"eb7105b0-841e-44bc-9a94-3fd6d61944bd","version":6,"status":"done","tags":[],"date":"2026-05-25T08:37:06Z","url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"199.101.134.237","port":0,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"title":"4shared - My 4shared by David miller","dom":{"size":51869,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (539)","md5":"3164cd40c6f9b6910ecacf25baae4ab3","sha1":"4e5938428b7e88f6f57f81ddeec9e57165bb0f40","sha256":"544f7a798ea4607bedf97af904db81699cbfde1f048bc0426bb3094d1b1f0ce6","sha512":"0edd413e83a725897bd9e35abb28c873e9c984d51d3cfc91c610ce5a9d4a47e17e4f4cba9b232933a06b9b52a1c6f330cccebf89f24f98ff82df9930eb2125da","ssdeep":"1536:ZhjQefgCGiMIvYxVuvav4Y/LrvCSVUCB8Lv7v5vfvqvWvbvNvVv8vlQNiP+weyvQ:jvgxVuCXMjBnCuDltE9QmqQ5ShjZoo","tlshash":"3d3343336890883b4197c0d1ba63ab1eb986e627c6569940b3ed0bd81fc7ed3ed1715c","dom_hash":"domhashc0b6d576a833fbe5e45287a6c4239b3a","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"199.101.134.237","port":0,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T08:37:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":8,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:41Z","timestamp":1779698201,"ip_dst":{"addr":"Client IP","port":40088,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:41.783478+0000\",\"flow_id\":586821551082697,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"74.117.178.90\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":40088,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"74.117.178.90\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":40088},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"www.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":6,\"bytes_toserver\":1179,\"bytes_toclient\":4805,\"start\":\"2026-05-25T08:36:41.412873+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:43Z","timestamp":1779698203,"ip_dst":{"addr":"Client IP","port":51650,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:43.489434+0000\",\"flow_id\":685638011308598,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"204.155.146.95\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":51650,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"204.155.146.95\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":51650},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"static.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1310,\"bytes_toclient\":4880,\"start\":\"2026-05-25T08:36:43.117302+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:43Z","timestamp":1779698203,"ip_dst":{"addr":"Client IP","port":51690,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:43.493198+0000\",\"flow_id\":1598387281185783,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"204.155.146.95\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":51690,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"204.155.146.95\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":51690},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"static.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1179,\"bytes_toclient\":4880,\"start\":\"2026-05-25T08:36:43.117751+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:43Z","timestamp":1779698203,"ip_dst":{"addr":"Client IP","port":51684,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:43.496485+0000\",\"flow_id\":505148453145498,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"204.155.146.95\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":51684,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"204.155.146.95\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":51684},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"static.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1179,\"bytes_toclient\":4880,\"start\":\"2026-05-25T08:36:43.117658+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:43Z","timestamp":1779698203,"ip_dst":{"addr":"Client IP","port":51670,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:43.500178+0000\",\"flow_id\":764319664687921,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"204.155.146.95\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":51670,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"204.155.146.95\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":51670},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"static.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1179,\"bytes_toclient\":4880,\"start\":\"2026-05-25T08:36:43.117553+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:43Z","timestamp":1779698203,"ip_dst":{"addr":"Client IP","port":51664,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:43.504673+0000\",\"flow_id\":1953787234994889,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"204.155.146.95\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":51664,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"204.155.146.95\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":51664},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"static.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1179,\"bytes_toclient\":4880,\"start\":\"2026-05-25T08:36:43.117449+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:43Z","timestamp":1779698203,"ip_dst":{"addr":"Client IP","port":51640,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:43.507956+0000\",\"flow_id\":1408096607652247,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"204.155.146.95\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":51640,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"204.155.146.95\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":51640},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"static.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"c4b2785a87896e19d37eee932070cb22\",\"string\":\"771,49199,0-65281-11-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1179,\"bytes_toclient\":4880,\"start\":\"2026-05-25T08:36:43.117143+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T08:36:44Z","timestamp":1779698204,"ip_dst":{"addr":"Client IP","port":50370,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"74.117.178.71","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"severity":"low","alert":"ETPRO INFO File Sharing Service SSL Certificate detected","source":"{\"timestamp\":\"2026-05-25T08:36:44.638681+0000\",\"flow_id\":1732508372438852,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"74.117.178.71\",\"src_port\":443,\"dest_ip\":\"172.18.0.53\",\"dest_port\":50370,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2806057,\"rev\":5,\"signature\":\"ETPRO INFO File Sharing Service SSL Certificate detected\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"74.117.178.71\",\"port\":443},\"target\":{\"ip\":\"172.18.0.53\",\"port\":50370},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2013_02_27\"],\"deployment\":[\"Perimeter\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"FileSharing\"],\"updated_at\":[\"2023_05_25\"]}},\"tls\":{\"subject\":\"CN=*.4shared.com\",\"issuerdn\":\"C=US, ST=Arizona, L=Scottsdale, O=GoDaddy.com, Inc., OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2\",\"serial\":\"61:83:D3:32:D0:FD:68:6E\",\"fingerprint\":\"dd:25:b6:b3:b7:9d:0b:e1:b6:91:17:ae:a5:f7:a1:b5:d9:3f:e5:33\",\"sni\":\"dc686.4shared.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2025-06-13T23:12:35\",\"notafter\":\"2026-07-15T23:12:35\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"699a80bdb17efe157c861f92c5bf5d1d\",\"string\":\"771,49199,0-65281-11\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":8,\"pkts_toclient\":7,\"bytes_toserver\":1309,\"bytes_toclient\":4839,\"start\":\"2026-05-25T08:36:44.266052+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"dc686.4shared.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"serv90.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":3,"received_data":131913,"sent_data":1650,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-05-24T22:41:50.23946Z","alert_count":0,"request_count":1,"received_data":1678,"sent_data":435,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.4shared.com","ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"domain_registered":"2005-01-11","domain_rank":32632,"first_seen":"2012-07-30T02:47:58Z","last_seen":"2026-05-12T17:10:56.269721Z","alert_count":0,"request_count":2,"received_data":53357,"sent_data":1141,"comment":"","tags":null,"fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-05-24T22:52:50.654314Z","alert_count":0,"request_count":1,"received_data":877644,"sent_data":494,"comment":"","tags":null,"fingerprints":null},{"fqdn":"static.4shared.com","ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"domain_registered":"2005-01-11","domain_rank":4013044,"first_seen":"2013-09-20T12:56:57Z","last_seen":"2026-05-12T17:10:55.174964Z","alert_count":0,"request_count":61,"received_data":538078,"sent_data":30196,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dc686.4shared.com","ip":{"addr":"74.117.178.71","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"domain_registered":"2005-01-11","domain_rank":0,"first_seen":"2025-11-19T12:29:41.619463Z","last_seen":"2025-11-19T12:29:41.619463Z","alert_count":1,"request_count":1,"received_data":10299,"sent_data":519,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-05-24T22:50:29.390198Z","alert_count":0,"request_count":2,"received_data":1678,"sent_data":1950,"comment":"","tags":null,"fingerprints":null},{"fqdn":"serv90.com","ip":{"addr":"212.124.125.242","port":443,"asn":47328,"as":"DigitalOne AG","country":"United States","country_code":"US"},"domain_registered":"2021-08-13","domain_rank":221638,"first_seen":"2021-08-16T08:46:27Z","last_seen":"2026-05-12T17:10:55.401011Z","alert_count":1,"request_count":1,"received_data":44617,"sent_data":410,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.jscount.com","ip":{"addr":"204.155.149.132","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"domain_registered":"2011-02-05","domain_rank":3254269,"first_seen":"2017-01-29T19:14:51Z","last_seen":"2026-05-11T04:42:28.007243Z","alert_count":0,"request_count":1,"received_data":214,"sent_data":527,"comment":"","tags":null,"fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Apache Tomcat","description":"Apache Tomcat is an open-source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and WebSocket technologies.","website":"https://tomcat.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","icon":"Apache Tomcat.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":17599,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-05-24T22:47:05.749853Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":655,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":1,"received_data":477507,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","size":876736,"data":"","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-10T20:23:00.490435Z","times_seen":13694,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/reloadBackground.4min.js?ver=1205405476","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9959f4b1b249dd5ca72640ed993671a4","sha1":"6d532c747c59eddd8932da08b2706a2698aca46e","sha256":"7f4c89007627ab3efa1f7abfebd96929a4641c8faf18f2832f51656d580aafd4","sha512":"00ae3ac5ce1574de0105e28c122ee0a6b3ee290e860ac17579cf0c1b5a83d8f724e01c33a44c02975ffc0ed996712875e74c93580c5268a364f77822e5bc4e8c","ssdeep":"","tlshash":"b901bd8a72b57643a5b2383124af7316503d28c799d1cd4490aaf493fd64564363388a","size":777,"data":"","first_seen":"2025-11-19T12:30:11.849995Z","last_seen":"2026-05-26T10:25:12.434548Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/AjaxSuggestion.4min.js?ver=-645108635","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"027505919f1ad0f9a6a0a90db4298143","sha1":"5c14b6abf3186989aa37d51e91a0ed77003917c9","sha256":"ddcb0f34ff07b5ceecc84904120764ba48c0edbc505d7afe2abfc9aaaa9543d8","sha512":"1b10f11b6f7b269eeb9e3c5104947c86a837f5abbb1cae273d904fa2d19cb3097733e68a001aa4cdaedce56c8e9a682787565cb9140f37c8e502173f58f2e225","ssdeep":"96:wDf2DbFXOeVRRlj5p8BseplZSBBMhWmFCJRcKbJmkadir6:AOvOdyo5FCh5adJ","tlshash":"55d1c8486d515eb39a7b2cb91c37319b9cf2ad2d7a04bc90b34f6421382cf4a64e7b44","size":6726,"data":"","first_seen":"2026-05-12T17:11:02.221132Z","last_seen":"2026-05-28T19:36:01.563756Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"685c96a54a5c28f59ec76c730da17a56","sha1":"2fe5085cb42c17f6eae34a35f26f6d648128aedd","sha256":"ea53f84beb62a3b907ea8db0cffb79d9d1c66120237dac13c4c20ab298021cfa","sha512":"6a54b632fa3e1e29247b1848310c8b3a46c03da46601c4511ae78ac218ac706f9e6e3859ae3c767cac60b11d118d0af4625bbe0e7b34446d127669ad5e1c9d53","ssdeep":"","tlshash":"39f0272578cb371a48f3a2789f6b8808203ae253810ed86e7d3d65e79fc0535d95298d","size":497,"data":"","first_seen":"2023-03-07T18:45:18Z","last_seen":"2026-05-28T19:36:01.658476Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/jquery/jquery-1.9.1.4min.js?ver=1965676176","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07ca9ee286692f0d4b3fb22ce37ffcb9","sha1":"ac38edec04218296da72f77a1e0a5f07465bd970","sha256":"dc54669f8c5682681a16736b723505b0fb484b2413ce0abaf5642a9ad6f16da8","sha512":"39e16385b90286eb8499fb1874271f8a0320533f8dd05147cf0afac16655e7351b57eb5ffc088324136505c23a23d8dfccb89f3f38d78c712908774b15b6e923","ssdeep":"1536:h0R5Xwpm49s5vmv+u9lzuKlFuDuYsygNg191UON2a64LTjo1Dyr4Ol7qWXYhW:h6XdQl98KlSRrlqWXYhW","tlshash":"b6a306eb72e2b03a47e7303871af6207f576a85a150c8594f19098f57c78d8891bbf2d","size":104703,"data":"","first_seen":"2023-10-21T11:14:45Z","last_seen":"2026-05-28T19:36:01.550448Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/bootstrap/js/bootstrap.min.js?ver=-2016413654","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"405bf7a7aba0f87e31be5348ee6df7b9","sha1":"5d343b99bf5f7a3af40bfc3f8d1a688e6a5a643f","sha256":"fa22061252d78824c9f2bdd6e4caeff6eed407ee5e275f1fdf1340b0dfccd152","sha512":"4074a207171565073bd501b56aa2f1606506b70cf4384a532b3092b7925b398a3703f30bcc0671c7ffbc531ff05e34ad65f4bf72161d2b13082f38382a78d024","ssdeep":"768:o2aky27UwlN1Ml91qNmCIejhqs8snmidC7FXfb48Gf3ZR7Q:JT7Qahq0evbe3ZxQ","tlshash":"18f29646b23031a107efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37045,"data":"","first_seen":"2023-06-03T15:56:42Z","last_seen":"2026-05-28T19:36:01.536496Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/batch/restBatch.4min.js?ver=-293660606","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9485207af2954cb7d49dcc68740fcbbc","sha1":"997b2a97500eda12c649f817c599015d0d32fb15","sha256":"3315f648e98add8541c1160b3d8b8f0f100bc43670bf5b36eb933d28736cb2f9","sha512":"9bee5df38c4c4b6e99b1c1bfdd2310435477d939d9495ce4928e0a0928d1b00e2140cc556de3d5370c5f79ecafb4d91be6a91864d21c86dd218ad5f076cc0a46","ssdeep":"","tlshash":"0f01614b32543497627b3074654f765462f796107f841c0060b4f0865eb4edd6cb7f9c","size":776,"data":"","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-03T18:50:05.340678Z","times_seen":238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/notifyBlock.4min.js?ver=-1728458541","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7948d0b5296ffbd5372b47c143892e85","sha1":"270c79a1b5a79ebe049f33e28734b3f4b4bd1a93","sha256":"901dc807c89af24880c17016e2a9effa7d2d2634c835a24c12a755552eac9539","sha512":"9fb24ca744f8405d8edd79b9d1c4738f24c6ae2b76481e7d7adb88ab4d868334231750aa53139479425e67b0fcaaa02e22cb2f606308800808b7be99ffb3a67e","ssdeep":"","tlshash":"56418c8de063f6f5e7bb247d190f81dafa774037194fe50c0b8bc581062c644aa236ca","size":2041,"data":"","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-07T18:50:59.233283Z","times_seen":468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"26d8240c4d6afcfb10d6a5893234ff7a","sha1":"41282c0af6c675ebca4a3cf8c942ad7d3e7a06f7","sha256":"7eb714ad28d5f23a40b16b8a77fdf9405971f04d4b4fe0b9e413c23bdea4761e","sha512":"4486f4644c38df26ea3a090b638a1153556d95e530e520fa4ed5064444a1267c42d846fff731169455481322be17dbfafd20edf6bf73bba334316e9da88f8653","ssdeep":"","tlshash":"4751037f54b240ff05526278e92f6334be605f278184e504fb0e39246f8e11a19bdb6d","size":2502,"data":"","first_seen":"2026-05-25T08:37:13.288944Z","last_seen":"2026-05-25T08:37:13.288944Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/fileCard.4min.js?ver=-1704360716","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54aeaefa58bece6b5e0ef2669c2a67bd","sha1":"685f33e7745a0f0c6be7647d6a7d7be311f81663","sha256":"a9a39e228914fa7b5ec686e512d0a87174a502894dfddd01cdcfc7318cfd00bd","sha512":"511bbcb69799987bd29792e4f10501c0b26902b6422c7bf8fa3dd50092be2b5ccedc6e033f873678ed9a322d262a5be250fb58dfd724c7fd0a60e9176b2d2d08","ssdeep":"","tlshash":"4481e008a2fc28b9e5bb209564d71307f2264e337656dce540ea587bc8376c045ebe9e","size":4054,"data":"","first_seen":"2026-05-12T17:11:02.283179Z","last_seen":"2026-05-26T10:25:12.379305Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.tipTip.4min.js?ver=424755820","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"679c56a052a38e49e53b89fddc763efa","sha1":"eef0745ac0ac2a35f973d1ecd9ac87128f6a12a6","sha256":"fd263bd59e2f16a166c3125fc89cd179ca63c693913f58b1a51540c7de077be9","sha512":"05748cd407947cfedcb50a794dd1bb34ba23b8a933b2dcb5adfb01ef29674542851b50521df39d76d990e1c422fb7c1b10fdcccbe182c684d070cd7cdc045a2f","ssdeep":"","tlshash":"9151415be940713f12e33872951f510a147aed368e07f111b6c8c5881cbb5da56abf39","size":3144,"data":"","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.366344Z","times_seen":897,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ccf1223448fd6ad36e7c219fa4276e03","sha1":"9617628d20db129d1be24b0d444f800ae35b63b3","sha256":"2bc26b8e3accfaeb61965f7e510a2b649b5a9998cf6a8a7140a3f806522cf864","sha512":"6499c60dde8cf801f3bfbaea4ae4d755cec3f3e59799819ce60db4fa6ee9e1b3910cf27d05e7792cfde1219aef3d856bce1419a01915374df3ba6e68d4dc2fbc","ssdeep":"","tlshash":"24d023c915571cb044f312ccc77f750171456111504b5d2155d553849f10f1f875c910","size":221,"data":"","first_seen":"2026-01-07T15:45:26.273889Z","last_seen":"2026-05-28T19:36:01.662186Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/bottomSheets/bottomsheets.4min.js?ver=314671084","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d7d143959c717b38b509912b950232a","sha1":"ddf2dc5c1e77aed384673e11ac526262328cf873","sha256":"4df7a0902f8252042e1b776ede01f53e606daa1db801848923b70d84caf5eab6","sha512":"76a90ab1ca0dc950bf65f3f3d29763aaf18df6999f2a45b4645526554cf8525c0a51759aea74730d7ba0f975eab1aa58b000b676e0ea40544cf7e666bbb96a1a","ssdeep":"","tlshash":"dfe0d85cb0a03c1ce133b4e01707c205ee976d3797843f44894d90a04439cc91467ebd","size":365,"data":"","first_seen":"2026-05-12T17:11:02.288537Z","last_seen":"2026-05-28T19:36:01.649814Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/authScripts.4min.js?ver=-190652857","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cd871326e070ed1fa0a2042f3ca89f7","sha1":"ead9afdad61e9446c0ebbaeaa128d64ad75c4da3","sha256":"39ee27ac53aaed85fd8892e185ebab7d2cfe058786341ecd62ccbf74a5ddbc0c","sha512":"726d9073bd2225e684bee494d268e806b6ff6959a4a2af59edb6eb8a10cf1c1e4e7434c90fd5a5554ce080c621cfc9e2eba3054174a5d80a65e47b415219fd05","ssdeep":"96:l/8xMaMGwvFM+45uyPu+42hLOn6Vej0Ub7SWdFmXfXfYvXfeq0Ed1LK5wcjl:JSR+48yG+4G7c5TdFKfwvGBE3LKWcjl","tlshash":"c2c1534af3c57d2751eb2a35521f05a5936e1c6398c68d58d130bc81293cd8e867ff8e","size":5721,"data":"","first_seen":"2026-05-12T17:11:02.214676Z","last_seen":"2026-05-26T10:25:12.395468Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/jquery/jquery-migrate-1.2.1.4min.js?ver=-1518983214","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7002d7b9f814beb67c374068a9c2d","sha1":"b862ef19fa8a99ace7041d9d030c4f9714a3ee7e","sha256":"f3008cbee89048d1d95e5897276fb4879f6d8d0d64c45ab5c197e9f52eb37537","sha512":"6427854cb6a3b5d70da82959f93816ccba17895559d781c7e312578bf9621640360f28c7e406d767721c745364b49d8220b9cb7405b3543c67154d168bd52734","ssdeep":"192:heTHfxGIdyh95DLjZ815lltO0sZYSNTi68:0TH5GIsh95DZ81BtO0sZYSN58","tlshash":"92f1a5d973c679b41ffe31b8753b824bb3b215991508a494e09c8da62c7cc4d903af2d","size":7497,"data":"","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.363447Z","times_seen":934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.localStorage.4min.js?ver=-1535072197","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7c0a209a995a99bdceee2902297cfd4","sha1":"a503217b936b8f0fcdf795c220c8864170118c29","sha256":"bb361e5bfcefa2e1e58c969d66d9c68f8b5238058fc8ad1d91c1c9486d138eb5","sha512":"a64dc708d23f914a7499f9dce5f45746f553f9e8e25894a088d88ae288a8ae75199244ec10acf72d62608098a591ff6c88d4a0f2d334e63f35ac7e2d6a6ae9e6","ssdeep":"","tlshash":"ef51fe8b2151253881a2e024b93f7312657ef8a6b589447cf1b0accdfeac9094036f7e","size":2521,"data":"","first_seen":"2025-08-07T10:58:18.513779Z","last_seen":"2026-05-28T19:36:01.565257Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/account/AccountFacade.4min.js?ver=-1421559949","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c37908708660d0825e20cfd5a27aafb6","sha1":"83475ebcd7adb018950d563e04e10b178c5e882b","sha256":"34bb93993792c4f60f350c7845e77da3facbdce6aabd29f012ae5762eef08d82","sha512":"48b369cca385bdd87c145285cd296c97c80dc039096007be5f413cb992fcefaa09491a1d0be0e9dd516f16fa3ea1d9709a79c35d5685e167d54f36d271b9c151","ssdeep":"384:H0yUJdIlHWAs6bCpsTi2iOFtDfg5SHejiaiBi52D+oxj0ii6sm6ixqlRQNx3MNF8:pN7WjOFtDfg5rjivk52D+oxjXrklyNxH","tlshash":"cc92b64a730416669ba934a4317f245fa295ceb38e44cc5d51c8fbad28f49f004ffe6a","size":20860,"data":"","first_seen":"2025-02-11T06:39:25.312126Z","last_seen":"2026-05-26T10:25:12.379829Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/utils.4min.js?ver=1202740634","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"18457cb4ca2077620f7b937e34bcf1d9","sha1":"6b566c18ef439e2ffc2a2107295cdc2313f41eb5","sha256":"0c4c4f252adcce5e50e5414eb7aac128c17567f86cd31fce0b54422c0a166283","sha512":"5f01c36ef3f8961ac775605192ccf08154ef8a5b8d9dc5a7eee544ddf9ee4884df9c5cb00686f3f6c7d572409c133727caa3ef4a9fc228743a37e32abf4bacbb","ssdeep":"384:n2b2j2K2c2hblaynWuU/cBCW98va+o1WtnRSjx78CIv+bIoeZCIdBXJVEn2IMgKK:sbla+U+CW98va+o1wQdId0cyL2+T","tlshash":"b8c2954878f63412956370ba5bef904872769923614ce991bccd9a803fe062945fffec","size":27920,"data":"","first_seen":"2026-05-12T17:11:02.271838Z","last_seen":"2026-05-28T19:36:01.531094Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/folderView.4min.js?ver=2118468839","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46afe80b8e738fe3de5576f7b3092b66","sha1":"979d80b36f4eda94499016792fbbf5398d38fde0","sha256":"5f76429275822294d65f59e68a903700d28b4e764aa83c5a6b755703695f7b08","sha512":"4750919b22a269f94017960881bc9d7f246280a4f49f49f93c058d334ae2efdc404889849f8aec394adecc457d78009955b4f52eb2167b8fd4ce48a7b462866a","ssdeep":"192:xGO2AvE6T9MhH0srh4vBkEAR128xBnQwr8QXzSzCRgBoM3riSOKa4yh5JluFKx:xG32srhnE7WNTz6Y/z","tlshash":"05f1888eb8f62018a0b775aa67ef01486b266503110dce58fe9c6ed09f045e477f3a6d","size":7486,"data":"","first_seen":"2026-05-25T08:37:13.255533Z","last_seen":"2026-05-25T08:37:13.255533Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.timeago.4min.js?ver=1007035806","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36094f61f2f53c59692e0308ba58a7b","sha1":"d9312f18de6f89f670629c32aa8b674c325b1533","sha256":"76ee97cf85d939703d6bfc40ac8b26c1fcf7575f5d0a891fb53170b24f34a4ab","sha512":"a895729a1b74d14ad75ce085ec9e7bba56911a3fdc50d9eebbc00ade6001e6a805c04809be750530e4b42bcc72b70d75e3f357a8808bdce6c9a6960553fc36d4","ssdeep":"","tlshash":"f5416548719f2150576331f0c3bf0185f362de7391d56528c2cae522bd79e9c51abe68","size":2333,"data":"","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-03T18:50:05.320473Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd8a876f9a01e8ee0a3d876b05ed7c15","sha1":"254af2a0f237c79fcbd4f51254e4a375d7e2a4a9","sha256":"b8904ef32d1fda93e70eb5061e485e067672632eb8b4f5c132fbcbd4beb6e63b","sha512":"21c380e720679ab17e7a50319e0d5d7fe05b51b2d46b3f5a437b230e553269455dd4aae4188a94356e12a97989a6f82f937febf501f1e011067487cd35c92e8f","ssdeep":"","tlshash":"5be0619e343458a696a795f733b3051d7451270c6854b9639dbd8558180145504afaec","size":401,"data":"","first_seen":"2025-02-11T06:39:25.378217Z","last_seen":"2026-05-28T19:36:01.664332Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"af7f9e25cea790f20f20d7b2e0e91697","sha1":"10afd1201ec1010b32c311caec81aeb61136cf0d","sha256":"a7582d02ebf4c7a47ef3f191e38fb7a45c29d30e118e7e498d45d47971a74275","sha512":"d388a4c6fac6c6e3db752c31d5182dc77d7d635746a72d3f451054e31d8074354a44a403b8ad066418e51c876edd554a8f79d3ef001a146d17d202ec1e3e90cb","ssdeep":"","tlshash":"1eb01254d403470309bf150540f9b444360000000004700452491c003c29f7a39c12c0","size":90,"data":"","first_seen":"2023-03-07T18:45:18Z","last_seen":"2026-05-28T19:36:01.669263Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18dddc2d903838e454b85d5e250da4d4","sha1":"17e99776afabd1a841334c7677926e88d3600d2e","sha256":"8bb89c66acc84f500c431f356347812ab20e1ba2a219aa3a12094af675ffd974","sha512":"24f4a9b42b1129f43e06f7202cf7f2bcc911f128bc2fdc87a086ef00e48f4d7b1fb94feb7ce3a7f7b06c798b000b3430201bd5b2f25a74a489a4e0bca3c3f1ec","ssdeep":"","tlshash":"af11b76888b66829207b20aacfab3b50f452f0130112c0413c6e67ac5f990a7d762dcc","size":1095,"data":"","first_seen":"2023-12-25T22:44:57Z","last_seen":"2026-05-26T10:25:12.499939Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serv90.com/ab47fe78.js","fqdn":"serv90.com","domain":"serv90.com","tld":"com"},"ip":{"addr":"212.124.125.242","port":443,"asn":47328,"as":"DigitalOne AG","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7ebacf5718ec5263605f0b554776691","sha1":"7c8645303d677ebafd9e51b9ec200e3f807f99b0","sha256":"52b162c1b7915af6b5e8cd28c930bd2c3bbc8c486e19fc285e20f8cf9b9ea976","sha512":"b60de0a799d3d996602a204081b02923db1cdf350e3edadfe207976c489f37093e637b500320db11872195861c7b7447405b0e37dd437331b1ad9160c80d3e35","ssdeep":"768:hs0P7HXfiMZJNOGzvkok0CYNVogh/xfmH3bBX9dwDGU0m:hjLiS/pCYLogrOX19dwDvR","tlshash":"fb1319dcb6a2b06543636074403f920ff23a6876684c9094f299d9e17cb8d9e163bf7c","size":44444,"data":"","first_seen":"2026-04-25T09:48:07.23067Z","last_seen":"2026-06-12T20:59:39.380602Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/PopupModule.4min.js?ver=-1677196418","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6686e619e51ab6836ddfd7799ba3951f","sha1":"0237035cc08e60d0cc790f4a210299a5ac45afed","sha256":"3e858ce6a723e9e21f65e191088a445081e3cd1697d379706458494bae385870","sha512":"9c17a4db6bc19656303bc048aade770ffafae46639a7d04b9c86ece4e6e992eeab1836a9d9a00677da4b71e2b64474550ade9fded3b888657e0155b976d1e579","ssdeep":"","tlshash":"65517519a1b4e72306ff7e1e905f133635518c37c98b4c11108ac1fa5db4e896d72f8a","size":2930,"data":"","first_seen":"2024-06-03T11:41:05Z","last_seen":"2026-05-28T19:36:01.651473Z","times_seen":66,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24ef84d50d1d5cb2292ab5e6180eecd","sha1":"bca3b78ddd965797073eb7f67a2d3a48d05012b0","sha256":"bfe44fd8d0e5b27bf41121842c449322c8c5fb3de660f0177bb63a6e637f6ae5","sha512":"b25f7581a729d8eac59fcb551d6366600597ec6fc285d3dd9b70bf33507c29cc08de01fd2f13ccd46689ba7570c662180c9ccca9a45fbdaacd752ea61f4ccc14","ssdeep":"","tlshash":"9a1154b30a14b0394f7209f1e2ffcbb5f862702cf15849e8a505dac42e69dc7ce05595","size":978,"data":"","first_seen":"2026-05-19T05:08:35.298641Z","last_seen":"2026-05-28T03:27:30.569022Z","times_seen":642,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2fbb84447faeeb5651fa159d4ddf50c","sha1":"e07b0c5cd6998d81c8e8e22c4887e6d842ea91a5","sha256":"90bb9b5a808089e34eadcc8795a23c6b16fe131ca255e92d7a7932098b4af21c","sha512":"7a073b21d9c3bf073d050d2ca8632800ea6c1d462258c0ebf500d692c8688ae88d8cf9a160088b42a9965942ad79f9e09051f0a31d1b331d40bd4cd374a17b6d","ssdeep":"","tlshash":"6dc08c20004184f5cc570031b19083963814602158213ee4a00e4629e720e3029afdc8","size":147,"data":"","first_seen":"2023-06-03T15:56:42Z","last_seen":"2026-05-28T19:36:01.670306Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"945696032646e8adf008146f30009452","sha1":"ed10014c95bfa687aecbcfb417ac4375c39b0138","sha256":"95a39b5c990f3b7b4770eacdc936f4133bc245883b21f9491da4476b2d6396a9","sha512":"8d42c53e9f3c75b19cb722374de018be82b11cf92d7af5f5078cbc7184647467d3576d73423ede438e679a8a6dc9b4b5520613fab078e80303440bade7232e17","ssdeep":"","tlshash":"d8d0a728648109b4e472d471fd999752241991275131ee46604c9a654f20d2030899e9","size":228,"data":"","first_seen":"2023-03-07T18:45:18Z","last_seen":"2026-05-28T19:36:01.67083Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dc576dbaf937810bb5bc1055fbf59647","sha1":"d038ea24ab75d7374b367cc7e42e9ad3edd45882","sha256":"d5df46113fd37fa570c67eb048b578194b44284f8660998b7b5a10374610c5ed","sha512":"975a1536181761804d15d1839982775b28a34f17d77f508c98fed1471182f0174011d260da0d85e941ae3d33a49e2de19d04c636f25fe39d02bda519ba3f4d69","ssdeep":"","tlshash":"bf80044504d310c1451c750c515c5033144105c75514410d004c0d400041f10154035c","size":35,"data":"","first_seen":"2023-03-07T18:45:18Z","last_seen":"2026-05-28T19:36:01.671778Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/Events.4min.js?ver=-1265666699","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63fa73ea23bd87651ba6ff4602e34476","sha1":"0366c38363161f653f83ad42379d87e39402f095","sha256":"7fb6d7d26b26f0b60c9bfb2b75e95ff9a783f3e7ad02f7ada10749dc39eb1e9d","sha512":"d4ff243dfae33e0b08be98fc512eff77cd3a890885bbd264ad3c4903ec2f9759ae6c0be2bafdc9ab68dd790bf63ae740dab4719cb88b0e61422946467a7ad034","ssdeep":"","tlshash":"2011228d1a90257b54e9b7133f6a4283319bc3c3bc684745e300ddea2623f9c12d16d8","size":986,"data":"","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.38723Z","times_seen":921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/headerSearch.4min.js?ver=-448467807","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"48c1547a55d6c8e0dd78be7627b7c23b","sha1":"3ec6b6fd6f384ab02fda68b76226e326bc8bc620","sha256":"64d606535e1ef06c0083def312c469d17735aebd89457c018fad114d2b2bbec7","sha512":"870a1b5542bab240330374b2e1313af2c4c24c1b9a42f7787ca8e86ace899bc5e08ff5ad8866a3171f6812d3ff36f6cdc4e713324a9ac9fa8a1f67010209590e","ssdeep":"96:EfqfcAgujU7oAnTdx5f6i7Ii/74ElvxT/jAbeVMOwR:ECfcMjUEAnTd3f62UST/j0qLwR","tlshash":"4ed1091553406a29ddb731105c9f328eb6b4ef63c404bc81da9ef7522478eb670a369c","size":6722,"data":"","first_seen":"2025-09-21T15:13:50.846241Z","last_seen":"2026-05-28T19:36:01.59608Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/favicon.4min.js?ver=589791203","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7e9a60d9260be91d680cd87745b7faf","sha1":"ff1cef5cb0393f02f452dad54752698b833b31d5","sha256":"5340432ca1153b9bb336c89a71378c0668e2981def6f1ec832a184e0009e9d53","sha512":"8dad9c46459edee57cf8750c752e656a754c24e975fa50c4a8e8888e18568497e06c46b87058edaf8fa078e9ffe6ab53a70bcba5a93a6b60c53f9c7e8795c855","ssdeep":"","tlshash":"2131efea37c8815bf7c8285c348e5103d822a5a27d6cf94eb97e9cc49f34989403ca79","size":1737,"data":"","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.396498Z","times_seen":912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/headerNew.4min.js?ver=1935412084","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"532d830a7665218f76b8ac90cc3a69ea","sha1":"4c9c5426a9ea82e54fbd1e71c2f551b9b0bc5d5c","sha256":"0d7b0586a8ecde48c67e1d810f2ea32daed307640664952184f68e8c202eb1ac","sha512":"0d375d6bfc861516a8d127b75addb492fb6db5cfcd2542fd72a747945653a71cc9e65938397ec810ff27bb71e4f25b33cf325e1519ac46d0e9f01bf0d0274d71","ssdeep":"192:/w+67HxKovwKWHvnj4rcAYo74S8Fbkb9yUMN6lsqdF409QsIqs0WdcaUKdgU3wOk:l6C6ibkbUU9cPpdBwOiOAGasw13uG+ML","tlshash":"3b72654d7cf261aa04fbf57aebdf5488e2324007200adb19b99c16485fd552893efb4e","size":16411,"data":"","first_seen":"2026-05-12T17:11:02.287611Z","last_seen":"2026-05-28T19:36:01.648873Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/batch/addToMyAccount.4min.js?ver=1449118452","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e3cffe9681ad9afc4504b55d2eca69","sha1":"3d95c13ae73fc87edaf37cf9cac6664bd7a128e7","sha256":"52698df0838eff96d1e9bf7cef2dc56cb9c2362dfe1828d4670c92c9c9218476","sha512":"1e3bd2bfe13c6e8695d0c92b29dfc7135224ec0ee2e133c0f6a6998e10dc4241be4af045c6cbef20e34e43b8dfac323b9de0fba78d22afe739d520f5141e540d","ssdeep":"192:RKTHSHTxUhbmHocrtwIWQ7ZRQFhXpI8N8om:U7uxU95iWQ7HQFJpXN8om","tlshash":"9202008a360014d51fe77fb6a5fb3ace97239641e7404d6098cdb090ad782d89c67b8f","size":8372,"data":"","first_seen":"2026-05-12T17:11:02.258277Z","last_seen":"2026-05-26T10:25:12.380381Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1087113ecda5e9c09c3daaaae5607208","sha1":"bfc24b49658baac8d3a6ccca25f9a67c15ae7f21","sha256":"0232fce97c8350bb3f0f2c9579d960f53fd3350decd82bf6c85305378c55d1a8","sha512":"a1247268d1bd672d9ce2d41971f8bb8a2c7b0798e39e581200a018ee90398ab1bae0d728c93c7a0f8608d781073d5a9143a8f0f40617f05b8bb9c01dc3d19b13","ssdeep":"","tlshash":"a9e0f18e343818e693e3a5f733f3052c74663b0d6940f9639dbc805c280185504efaec","size":427,"data":"","first_seen":"2023-03-07T23:55:38Z","last_seen":"2026-05-28T19:36:01.672758Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"97f0676b2904c0124f59baf8403fea48","sha1":"a2a6bf9bb1724b73c80999b050c45f2dd9656548","sha256":"9f1c3d4bca476cb172889b9c8bcddd9ed43df146efa1635795c9cb13882496ab","sha512":"50fe5126398f593d49183a644cb01b110ff9f7d0eff438279b43c9e628351bd18b80d7f2b6135ab67aa35ceb78d33414c6f4e539490fb7f6e2b30348c884fa98","ssdeep":"","tlshash":"d9f07d1075a501f8c4604832fdf3172e613693339233bf50889ee9984816932f22affc","size":632,"data":"","first_seen":"2023-03-07T18:45:18Z","last_seen":"2026-05-28T19:36:01.675042Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.cookie.4min.js?ver=823523918","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","size":732,"data":"","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-06-19T20:13:16.264234Z","times_seen":1864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/timeago_i18n/jquery.timeago.en.4min.js?ver=748621410","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b52429e47b6d0a6d1d5a3deaa862c597","sha1":"3c95de2d1657d8513f8283320d6ec1f25af0ce68","sha256":"a1dcb8caed20ac4dcbec2a67c9d272197a9c9a04e535e9a2649e43dee038cc0d","sha512":"6398894a184ace0ce4be2ff494b3e433c53dfe115c2fb8cf4488578e055c5db8a9eab7cb9f0005154237702667ff2c369f0fb719c186dd8ba4491b93858d85c5","ssdeep":"","tlshash":"dc90028304a5134a00a1540025500021c05c64a9116264010500611c72841419efc598","size":42,"data":"","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-03T18:50:05.372109Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/bottomSheets/BS_openInApp.4min.js?ver=-1318807999","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"22e863d8a270545c16d8fce2b9d2f538","sha1":"f10d63f7d393d7ae60de3f8e63ec317199bf32f2","sha256":"936e0bb46c489e91aa2b28921db2cc58bc8abd989b209b77bf4dd5c74186451c","sha512":"3d2de1e7b5b2885436c8ec8dfeb1294c5f094bc092f605edb25477a9124d2af2a3cfe028c27660031458846b8e5e716981c0bccf0800e947739d908de9d47397","ssdeep":"","tlshash":"b431e4aea475348d20d334725ab7a310fe224e3359c56f540679c8f10d7d94e149fa1c","size":1839,"data":"","first_seen":"2026-05-25T08:37:13.263139Z","last_seen":"2026-05-26T10:25:12.431034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-L27DQL6RCD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4e1adc133adba6e1ab4c34d088b0018d","sha1":"61419060beb5e34ba365c91ae33ec4f9974d4df1","sha256":"364c3efd1198bead4436def239c986bd436a9cb13e316a21a1c73f7891ca61f1","sha512":"41db3db25e17e58f5700cb5e442682c48d9fcffc72f8d53a2018ae6caf5eba9627660d1fd4a6d3ae1ea17fe6d38efafefdb556bd5707fa1a419a149ef0d0d670","ssdeep":"6144:1V5pDlqsYVfuC0AnCVjJhjx3dXRFqGFCWWQ4gM7V2fb:3VYVfuC0AujJTQQykb","tlshash":"a6a4e8ceb3d674625296f478903f018ba57b28e2b44cc8a9f189cce42d7469a4177f7c","size":476903,"data":"","first_seen":"2026-05-25T08:37:13.191937Z","last_seen":"2026-05-25T08:37:13.191937Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/bottomSheets/BS_signIn.4min.js?ver=-1384269618","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"326fd8c78befe0415c417e1991e236a2","sha1":"042a30aa7c04f63aee272f3cf986d4d327dc5cac","sha256":"817a291b55062e125d3350d4dfeaa4105175e58547970046d378915fb1d49956","sha512":"f0ada3b59310906f6f7c3d114bf77eed190708df96bbc599b9098878ef58279af8c9e806ffb4125d3ea8804970b8630dbd9f71a9282b74a94a85d476a22b9272","ssdeep":"192:sLatCEGftQPi42nrml4x1tJuQnkoPhQGYaODXq9SbWaRbaea2LsR1beLW6XXrZaq:IEGftVa0hu4RgKO7Z2Za","tlshash":"6482300e69e319020477f0ba4f571010f63a14273489fe68be8d4750afd6b5e97b7a8e","size":17651,"data":"","first_seen":"2026-05-12T17:11:02.237319Z","last_seen":"2026-05-28T19:36:01.548886Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"static.4shared.com/js/AjaxSuggestion.4min.js?ver=-645108635","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.030Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/AjaxSuggestion.4min.js?ver=-645108635 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1a46\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6726,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6726), with no line terminators","md5":"027505919f1ad0f9a6a0a90db4298143","sha1":"5c14b6abf3186989aa37d51e91a0ed77003917c9","sha256":"ddcb0f34ff07b5ceecc84904120764ba48c0edbc505d7afe2abfc9aaaa9543d8","sha512":"1b10f11b6f7b269eeb9e3c5104947c86a837f5abbb1cae273d904fa2d19cb3097733e68a001aa4cdaedce56c8e9a682787565cb9140f37c8e502173f58f2e225","ssdeep":"96:wDf2DbFXOeVRRlj5p8BseplZSBBMhWmFCJRcKbJmkadir6:AOvOdyo5FCh5adJ","tlshash":"55d1c8486d515eb39a7b2cb91c37319b9cf2ad2d7a04bc90b34f6421382cf4a64e7b44","first_seen":"2026-05-12T17:11:02.221132Z","last_seen":"2026-05-28T19:36:01.563756Z","times_seen":4,"resource_available":true,"data":null}},"time_used":826,"timings":{"blocked":465,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/bottomSheets/bottomsheets.4min.js?ver=314671084","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/bottomSheets/bottomsheets.4min.js?ver=314671084 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"16d\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":365,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (365), with no line terminators","md5":"2d7d143959c717b38b509912b950232a","sha1":"ddf2dc5c1e77aed384673e11ac526262328cf873","sha256":"4df7a0902f8252042e1b776ede01f53e606daa1db801848923b70d84caf5eab6","sha512":"76a90ab1ca0dc950bf65f3f3d29763aaf18df6999f2a45b4645526554cf8525c0a51759aea74730d7ba0f975eab1aa58b000b676e0ea40544cf7e666bbb96a1a","ssdeep":"","tlshash":"dfe0d85cb0a03c1ce133b4e01707c205ee976d3797843f44894d90a04439cc91467ebd","first_seen":"2026-05-12T17:11:02.288537Z","last_seen":"2026-05-28T19:36:01.649814Z","times_seen":4,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":462,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/notifyBlock.4min.js?ver=-1728458541","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/notifyBlock.4min.js?ver=-1728458541 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"7f9\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2041), with no line terminators","md5":"7948d0b5296ffbd5372b47c143892e85","sha1":"270c79a1b5a79ebe049f33e28734b3f4b4bd1a93","sha256":"901dc807c89af24880c17016e2a9effa7d2d2634c835a24c12a755552eac9539","sha512":"9fb24ca744f8405d8edd79b9d1c4738f24c6ae2b76481e7d7adb88ab4d868334231750aa53139479425e67b0fcaaa02e22cb2f606308800808b7be99ffb3a67e","ssdeep":"","tlshash":"56418c8de063f6f5e7bb247d190f81dafa774037194fe50c0b8bc581062c644aa236ca","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-07T18:50:59.233283Z","times_seen":468,"resource_available":true,"data":null}},"time_used":852,"timings":{"blocked":452,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/noavatar.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/noavatar.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerNew.4min.css?ver=1999692565\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"2bb\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":699,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81945818f5ad4a5ca23138ae2e03d0f9","sha1":"af772b8786617539e0f592a7f8913ee7bcd56087","sha256":"ceacaab7d265f067e150ca5cf404c0e6b7c71bb5c8ee0f28039ebfc0d4c75442","sha512":"473aae1237584a9df5b6e3fb08e905010ce55420481a82e0c512d8f6e8726c9ca3218d570295cf36924b194d9f8268299df6c1da15f0d1377fdcbe25a4427f8c","ssdeep":"","tlshash":"90017b9972cde274fe9853a1893d78a5424091ed6387c8a0fbe12314e4146db3d50ecb","first_seen":"2024-08-19T17:09:43.265762Z","last_seen":"2026-05-26T10:25:12.387283Z","times_seen":16,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icons/icon-planet.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icons/icon-planet.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"59d\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1437,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10dc08d7290332ceb93b40d9c62b2e90","sha1":"5d9856dfd036cd1871d1bc236c3be632b3366f27","sha256":"d42f93c3893de5cb1586636065d3c6954c6095ea22c0b19866ea412b86c12495","sha512":"7dea14f1426485423c38c07c916c769ded1639baf4f5a9a2d55bc3172a678dc2ede1774cd3490ebb1bc80207b09d666a493273ac8d4ad6a1e20c47fd4f31ee35","ssdeep":"","tlshash":"4e2178f6cbd476d0e106e7b694217160365b34f6730b4f59c2603fc5a1220a78e8ecd4","first_seen":"2026-05-12T17:11:02.303878Z","last_seen":"2026-05-28T19:36:01.606446Z","times_seen":4,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icons/icon-logo-x.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icons/icon-logo-x.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"209\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54b1c88456fb78f04e5bf566948c062a","sha1":"f9b3e1df0d5323599ad34ee55661b2e11461ee92","sha256":"7e705287eb40fa18269e30720a51622ee4bfcb77e4df565897bb3a89a7e67e46","sha512":"6a859420ba409eb960421acf7f8145b3cea4e12f3b980d7ccaaec04d115cb1fae1147b2bf17795a5b31fddc495ba0284da28665b22a36310f0d8153f15cef098","ssdeep":"","tlshash":"28f0c0e4a698d24587440f15327faa16503f70e44b0dca19b3e427456c180d95c242d8","first_seen":"2026-05-12T17:11:02.253407Z","last_seen":"2026-05-28T19:36:01.595063Z","times_seen":4,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icons/icon-logo-android.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icons/icon-logo-android.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"43e\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1086,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9ce391b73944f115a0966bb67329495","sha1":"48626ad154d27c1d406279ac2fbd2bada6be4add","sha256":"cfbe86dd3f99821e3eebe909e418c5f6d9a982ce2b50fbb6cb846b7b3d5e5a9f","sha512":"90f5d10e45a8d43e807530d3a9c8b5d32f85c0d8525f5991606fe5e3998fdc44b8ea708a3951e7c5e46e2410d8f99a0fc06e32c8f9f88f5140520596419bc634","ssdeep":"","tlshash":"fc11d06cadd942c895148b43c955002aea5a70bef98ee3dd41c81fc51c0d90a869cdd0","first_seen":"2026-05-12T17:11:02.211014Z","last_seen":"2026-05-28T19:36:01.608462Z","times_seen":4,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/pageDownload1/d1NewDesktop.4min.css?ver=1005570218","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/pageDownload1/d1NewDesktop.4min.css?ver=1005570218 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3016\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12310,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (12310), with no line terminators","md5":"63ea6b6d98cea6a60a732dce27d3835f","sha1":"f6ac27d8422f03b9babbef62d2cbcf2ca6e12bb6","sha256":"7ddb13cc2eb99d91da573007afb72ac808f238c87325d3b8b28d7d41c0c92357","sha512":"f23d85766894203df46ecb8128272b16996445c083903a8e758a159d76a947d7efea1fa70bb7d2dd77623699d951eb70d268631cb621e90bebe867a1b437ed14","ssdeep":"192:DX49MVyhqhkDFxNDraxP4PnrF4v9RkxwJZKUuk:DX4/jFxZrePErFgawLK/k","tlshash":"57428932f17e2f287527e2157fc1ad8d3039d73397629b9ee2907729c6a98c1242974c","first_seen":"2026-05-25T08:37:13.185433Z","last_seen":"2026-05-26T10:25:12.453251Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1517,"timings":{"blocked":515,"dns":149,"connect":122,"send":0,"wait":470,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/headerNew.4min.css?ver=1999692565","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/headerNew.4min.css?ver=1999692565 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"56c6\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22214,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22214), with no line terminators","md5":"2dc14cab710a86a0e8f0963801029560","sha1":"0ef8fe742d674608a93f12b11309833a9d882871","sha256":"a5f683ab730c5654e5b09c822dd5e8ceb3132d2a70e3834f1eef9895b1bc8df9","sha512":"2d5777f8cfaeb94b9124b68f66d06ac78a0d60469dc328caf2f0be804db48c6e50476a33c69883a188c80fdfdfeb0db3b7c65a6bc9a69eb3d5b6240384b86957","ssdeep":"384:aSpbNi3/FsHgzaPzIDfH6CjOQ0tND3shNmnQ51trfHxkCu67t:aSp8/WefH6CjODLqnjDHxN5t","tlshash":"06a2d92199aa323e753bc262f5927e8d70248003ea531b2ff766543ec5d685a377b348","first_seen":"2026-05-12T17:11:02.252476Z","last_seen":"2026-05-28T19:36:01.534438Z","times_seen":4,"resource_available":false,"data":null}},"time_used":841,"timings":{"blocked":481,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/Events.4min.js?ver=-1265666699","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/Events.4min.js?ver=-1265666699 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"3da\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":986,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (986), with no line terminators","md5":"63fa73ea23bd87651ba6ff4602e34476","sha1":"0366c38363161f653f83ad42379d87e39402f095","sha256":"7fb6d7d26b26f0b60c9bfb2b75e95ff9a783f3e7ad02f7ada10749dc39eb1e9d","sha512":"d4ff243dfae33e0b08be98fc512eff77cd3a890885bbd264ad3c4903ec2f9759ae6c0be2bafdc9ab68dd790bf63ae740dab4719cb88b0e61422946467a7ad034","ssdeep":"","tlshash":"2011228d1a90257b54e9b7133f6a4283319bc3c3bc684745e300ddea2623f9c12d16d8","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.38723Z","times_seen":921,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":471,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-L27DQL6RCD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /gtag/js?id=G-L27DQL6RCD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\nexpires: Mon, 25 May 2026 08:36:43 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157691\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476903,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"4e1adc133adba6e1ab4c34d088b0018d","sha1":"61419060beb5e34ba365c91ae33ec4f9974d4df1","sha256":"364c3efd1198bead4436def239c986bd436a9cb13e316a21a1c73f7891ca61f1","sha512":"41db3db25e17e58f5700cb5e442682c48d9fcffc72f8d53a2018ae6caf5eba9627660d1fd4a6d3ae1ea17fe6d38efafefdb556bd5707fa1a419a149ef0d0d670","ssdeep":"6144:1V5pDlqsYVfuC0AnCVjJhjx3dXRFqGFCWWQ4gM7V2fb:3VYVfuC0AujJTQQykb","tlshash":"a6a4e8ceb3d674625296f478903f018ba57b28e2b44cc8a9f189cce42d7469a4177f7c","first_seen":"2026-05-25T08:37:13.191937Z","last_seen":"2026-05-25T08:37:13.191937Z","times_seen":1,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":1,"connect":8,"send":0,"wait":27,"receive":28,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/PopupModule.4min.js?ver=-1677196418","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/PopupModule.4min.js?ver=-1677196418 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"b72\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2930,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2930), with no line terminators","md5":"6686e619e51ab6836ddfd7799ba3951f","sha1":"0237035cc08e60d0cc790f4a210299a5ac45afed","sha256":"3e858ce6a723e9e21f65e191088a445081e3cd1697d379706458494bae385870","sha512":"9c17a4db6bc19656303bc048aade770ffafae46639a7d04b9c86ece4e6e992eeab1836a9d9a00677da4b71e2b64474550ade9fded3b888657e0155b976d1e579","ssdeep":"","tlshash":"65517519a1b4e72306ff7e1e905f133635518c37c98b4c11108ac1fa5db4e896d72f8a","first_seen":"2024-06-03T11:41:05Z","last_seen":"2026-05-28T19:36:01.651473Z","times_seen":66,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":457,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.4shared.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 150499\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-20T01:51:12.234287Z","times_seen":194268,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/headerNew.4min.js?ver=1935412084","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/headerNew.4min.js?ver=1935412084 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"401b\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16411,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (417)","md5":"532d830a7665218f76b8ac90cc3a69ea","sha1":"4c9c5426a9ea82e54fbd1e71c2f551b9b0bc5d5c","sha256":"0d7b0586a8ecde48c67e1d810f2ea32daed307640664952184f68e8c202eb1ac","sha512":"0d375d6bfc861516a8d127b75addb492fb6db5cfcd2542fd72a747945653a71cc9e65938397ec810ff27bb71e4f25b33cf325e1519ac46d0e9f01bf0d0274d71","ssdeep":"192:/w+67HxKovwKWHvnj4rcAYo74S8Fbkb9yUMN6lsqdF409QsIqs0WdcaUKdgU3wOk:l6C6ibkbUU9cPpdBwOiOAGasw13uG+ML","tlshash":"3b72654d7cf261aa04fbf57aebdf5488e2324007200adb19b99c16485fd552893efb4e","first_seen":"2026-05-12T17:11:02.287611Z","last_seen":"2026-05-28T19:36:01.648873Z","times_seen":4,"resource_available":true,"data":null}},"time_used":838,"timings":{"blocked":477,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/utils.4min.js?ver=1202740634","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/utils.4min.js?ver=1202740634 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6d10\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27920,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1373)","md5":"18457cb4ca2077620f7b937e34bcf1d9","sha1":"6b566c18ef439e2ffc2a2107295cdc2313f41eb5","sha256":"0c4c4f252adcce5e50e5414eb7aac128c17567f86cd31fce0b54422c0a166283","sha512":"5f01c36ef3f8961ac775605192ccf08154ef8a5b8d9dc5a7eee544ddf9ee4884df9c5cb00686f3f6c7d572409c133727caa3ef4a9fc228743a37e32abf4bacbb","ssdeep":"384:n2b2j2K2c2hblaynWuU/cBCW98va+o1WtnRSjx78CIv+bIoeZCIdBXJVEn2IMgKK:sbla+U+CW98va+o1wQdId0cyL2+T","tlshash":"b8c2954878f63412956370ba5bef904872769923614ce991bccd9a803fe062945fffec","first_seen":"2026-05-12T17:11:02.271838Z","last_seen":"2026-05-28T19:36:01.531094Z","times_seen":4,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":470,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/notifyBlock.4min.css?ver=-1408296607","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/notifyBlock.4min.css?ver=-1408296607 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"319\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":793,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (793), with no line terminators","md5":"eec88d33c055df11c6005d87d4c017b2","sha1":"478daf6d51b0b440ea18a88e1160f2c4e5799acf","sha256":"9e98cf9dc880dcbd895b50ddcc371ea91a92fb578a0d8c36afd6be9508e5323c","sha512":"60069ff60670be526c77e3a5a4fba535d69d841a28eeb66e0f30bc157d51fd3ead8e751eafe470188ce09dabba986aaee06e44b538e2aae4754dc28fd78616e9","ssdeep":"","tlshash":"2201f138e103a90b7617a22cb181dfeef17b8422e336532c6fc7b231da490ed5a36144","first_seen":"2023-04-23T08:11:04Z","last_seen":"2026-06-03T18:50:05.363479Z","times_seen":401,"resource_available":false,"data":null}},"time_used":853,"timings":{"blocked":454,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/icon-report-white.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/icon-report-white.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"1aa\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":426,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d0c05daa1ffe219dce2d59d659d3cc28","sha1":"ec4501591ff7202c6071796a1ce8e2d02d64477e","sha256":"5a64e0de5d9bde6d8ce0eb275a566a9198a65682dbdad678fbf341c31c0b0673","sha512":"b4784d45207295bc77f78f48741af70c23ef65044f06d2792a4aa80c869c8a52e0e80d17c501d2f6f43040eccbf29d55f769e051f3b672f677e1c23eb4bf8309","ssdeep":"","tlshash":"31e0abe8c29c96a48a504208b72ef41cc4a760e10a1e81fce481831bbc1809b0c6fdc4","first_seen":"2026-01-27T10:06:11.91511Z","last_seen":"2026-05-25T08:37:13.200756Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/Icon-download.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/Icon-download.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"181\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":385,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c2d66cb627400774eb018548513077f","sha1":"f2e6580d142f8e8665a04a500da3ea3588103f58","sha256":"29420cc6be08706255e93da4a94ee25555e920978773d7fa7c7d3fbb2c26d75f","sha512":"fafb665e07015407be76316eb6f5b4479952610cd7bb6187e0ed8eaf1b8f5a28368ea3f7fc8ead40c37bd3cba379362b71e5f2438205167a203a4408bbbcdbc7","ssdeep":"","tlshash":"15e068bacdc8079068619ee0f31aa201347d21fe1648c339b8a4bb51ec84f2e6b409d4","first_seen":"2025-11-25T14:41:15.599979Z","last_seen":"2026-05-26T10:25:12.412815Z","times_seen":10,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/icon-sorting.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/icon-sorting.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"161\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":353,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c03e7f1945dcbf102f6827d37ac81f05","sha1":"8b097b755f312a89bef7db581735286480178ee4","sha256":"a75c5686d1a630e269be60510b4f283ad13fa3917672135187f5331a95aa8b9f","sha512":"c34ed71c4d8f573b5c7765247fb601e43d9dc011fd4d73bff482c98dfb50088ac8af3039ada8fd83ae31da46c35cfc1e4242a2b2c3bc06ff5c67557a0e764d2b","ssdeep":"","tlshash":"93e04f5c534d5934ab16c708fb197479417f91a14709b6548882763119a49bf2c3fafc","first_seen":"2026-01-27T10:06:11.897158Z","last_seen":"2026-05-25T08:37:13.204407Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dc686.4shared.com/img/tnoV4vPYge/19e5e434740/QuickBooks_Payroll_Live_Chat_S?thumbnailSize=s","fqdn":"dc686.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.71","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /img/tnoV4vPYge/19e5e434740/QuickBooks_Payroll_Live_Chat_S?thumbnailSize=s HTTP/1.1\r\nHost: dc686.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: 686\r\nAccess-Control-Allow-Origin: *\r\nX-4s: 1\r\nAccept-Ranges: bytes\r\nDate: Mon, 25 May 2026 08:32:08 GMT\r\ncache-control: public, max-age=31536000\r\nETag: 2743\r\nContent-Type: image/jpeg;charset=UTF-8\r\nContent-Length: 10051\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10051,"size_decoded":0,"mime_type":"image/jpeg; charset=UTF-8","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 185x240, components 3","md5":"70b320f9227dd0380b8f7127f797a706","sha1":"4b47b5b2d1ab79cc55df4ed19622433c67c48132","sha256":"cd90f11b35556ea344f4555cfbdb8a54686f274ab3b30f26ef29195839339abd","sha512":"08c9bd8dd1a3b30dc6030ad6a7a4b1b37bbd126b2313f2fe54d4da804477af2d49223aab273d99a8615ea6fb32ee0cea61d9204b452ec4b57b07d2dcbb0d7408","ssdeep":"192:mPeF0rxziMqb9INSUOS61NPWtRKnw+EL1lxgRhlO:gJ92Me9IIUJGs08L1lwlO","tlshash":"fc229f13959dc611e74280e5bd8b1822b8cf6245f9db3a3118144bf9b46ee78fd42139","first_seen":"2026-05-25T08:37:13.206211Z","last_seen":"2026-05-25T08:37:13.206211Z","times_seen":1,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":384,"dns":55,"connect":120,"send":0,"wait":144,"receive":2,"ssl":250},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"dc686.4shared.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/bootstrap/js/bootstrap.min.js?ver=-2016413654","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.022Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/plugins/bootstrap/js/bootstrap.min.js?ver=-2016413654 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"90b5\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37045,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"405bf7a7aba0f87e31be5348ee6df7b9","sha1":"5d343b99bf5f7a3af40bfc3f8d1a688e6a5a643f","sha256":"fa22061252d78824c9f2bdd6e4caeff6eed407ee5e275f1fdf1340b0dfccd152","sha512":"4074a207171565073bd501b56aa2f1606506b70cf4384a532b3092b7925b398a3703f30bcc0671c7ffbc531ff05e34ad65f4bf72161d2b13082f38382a78d024","ssdeep":"768:o2aky27UwlN1Ml91qNmCIejhqs8snmidC7FXfb48Gf3ZR7Q:JT7Qahq0evbe3ZxQ","tlshash":"18f29646b23031a107efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-06-03T15:56:42Z","last_seen":"2026-05-28T19:36:01.536496Z","times_seen":78,"resource_available":true,"data":null}},"time_used":832,"timings":{"blocked":470,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/batch/restBatch.4min.js?ver=-293660606","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/batch/restBatch.4min.js?ver=-293660606 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"308\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":776,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (776), with no line terminators","md5":"9485207af2954cb7d49dcc68740fcbbc","sha1":"997b2a97500eda12c649f817c599015d0d32fb15","sha256":"3315f648e98add8541c1160b3d8b8f0f100bc43670bf5b36eb933d28736cb2f9","sha512":"9bee5df38c4c4b6e99b1c1bfdd2310435477d939d9495ce4928e0a0928d1b00e2140cc556de3d5370c5f79ecafb4d91be6a91864d21c86dd218ad5f076cc0a46","ssdeep":"","tlshash":"0f01614b32543497627b3074654f765462f796107f841c0060b4f0865eb4edd6cb7f9c","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-03T18:50:05.340678Z","times_seen":238,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":456,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/Logo.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/Logo.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerNew.4min.css?ver=1999692565\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"e67\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3687,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d1dbb06c1fe0e1bda454e80c6ebb2b20","sha1":"d832b11ec5f9475375e9fedf08689160e809da0d","sha256":"a895637d6dd82e0bb6eaa68acef4bb823241535067c41a82787f268149211715","sha512":"1081bcf80b81e148de270d18d59128ab45c78f5bac2c6ef5d4c2a7aede2e021cd2952933608ebbefb5dd52d7b29823fb6af8494fe22bf50271b90f16ecda4beb","ssdeep":"","tlshash":"9d7163e6738cf200d804b3f86e4d907a7c2a1df7aba19328c7133d52e9150be5a55c98","first_seen":"2025-09-21T15:13:50.837307Z","last_seen":"2026-05-28T19:36:01.577496Z","times_seen":22,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/Icon-close.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/Icon-close.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/bottomSheets.4min.css?ver=-477151684\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 250\r\netag: \"fa\"\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1769debe5f3e26e5e78555639eb4f13","sha1":"21f88421be7ce0eebf3cf4d169b319bc9869d458","sha256":"90b5bb5da975be1a9f4913d6d736f518b5da37bede15e36b705e0bd2167ce31b","sha512":"60303be9707185828ce4032f4a5e46700f944943b2f3148431cb43566a94925940b5166d18aacd12f036acb338c70e6ff1771d7751624ccf3e5167ce579be456","ssdeep":"","tlshash":"c6d095f6d33c7920f915c011f3987112405900f3270c8dd4d4016070bc209573d371e8","first_seen":"2025-11-25T14:41:15.581886Z","last_seen":"2026-05-26T10:25:12.393619Z","times_seen":12,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/icon-radio-on.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/icon-radio-on.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"111\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":273,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93ddfef62cd4789d2ca5dcdb7fbe9c4d","sha1":"77d15a0673f58eef6c86fa188c8a6f5c7a3d2569","sha256":"cfd4245dbf3be25a62f8d41f0e1d6814beac4e30f9b08261a46ba46ce97cb95a","sha512":"ae415a5e1a18add95b54b838518cd5b51653f4292bf212d36c5694b49a7ba58d6cd6637a83ee8b732d579a6bab965d5f02fa083d28c112bd739cff312d9beb34","ssdeep":"","tlshash":"8fd02b28013ded04a510c414636f3071516f21631b3d572cb0802831e40a7d73d213fc","first_seen":"2026-01-27T10:06:11.956384Z","last_seen":"2026-05-25T08:37:13.213272Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/pageDownload1/d1New.4min.css?ver=-1149682665 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"8f59\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36697,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36697), with no line terminators","md5":"d6f4740c20e38baa544497219ffedbe5","sha1":"b51a51a473730752014c3bc16f1b51e9ed772ede","sha256":"ac86562822f0d9ff8adb0ab74e7c1d3a7d9cb4dbd3b88fa11a30e8485ba0f4e7","sha512":"eb99ee25ebd766356fd41355ea0014255ba9131111b22f83335e3a10481e99e82a5092f5eff200119d2d433be690d530af7f95117289bea1059d8a58dba527c7","ssdeep":"384:1BH/74FJ+5n52IOQOmVGQXgHGli9y8A5vXdN7srl9hXVJvDlLLenpYoXdgd9529R:vT5525KliON7y9hbZLLxfE/Xpv","tlshash":"2ef2e672947e255d7137e162b9c46a4d7018c003eb635f4fe6ad7a7ac8ca8c6317a38c","first_seen":"2026-05-25T08:37:13.2154Z","last_seen":"2026-05-26T10:25:12.473724Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1153,"timings":{"blocked":510,"dns":150,"connect":120,"send":0,"wait":120,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/jquery/jquery-1.9.1.4min.js?ver=1965676176","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/jquery/jquery-1.9.1.4min.js?ver=1965676176 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"198ff\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":104703,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39976)","md5":"07ca9ee286692f0d4b3fb22ce37ffcb9","sha1":"ac38edec04218296da72f77a1e0a5f07465bd970","sha256":"dc54669f8c5682681a16736b723505b0fb484b2413ce0abaf5642a9ad6f16da8","sha512":"39e16385b90286eb8499fb1874271f8a0320533f8dd05147cf0afac16655e7351b57eb5ffc088324136505c23a23d8dfccb89f3f38d78c712908774b15b6e923","ssdeep":"1536:h0R5Xwpm49s5vmv+u9lzuKlFuDuYsygNg191UON2a64LTjo1Dyr4Ol7qWXYhW:h6XdQl98KlSRrlqWXYhW","tlshash":"b6a306eb72e2b03a47e7303871af6207f576a85a150c8594f19098f57c78d8891bbf2d","first_seen":"2023-10-21T11:14:45Z","last_seen":"2026-05-28T19:36:01.550448Z","times_seen":98,"resource_available":true,"data":null}},"time_used":1527,"timings":{"blocked":520,"dns":153,"connect":123,"send":0,"wait":462,"receive":0,"ssl":257},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/themes/account/icons.4min.css?ver=745154683","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/themes/account/icons.4min.css?ver=745154683 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"8ee4\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36580,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (36580), with no line terminators","md5":"2e52f7f30bf518140375c64677985c19","sha1":"6e4ed6ac50799fcf2a6cf6ba059efdda63a988e4","sha256":"29ec161aa57a850d2b9f3e9c51c046fdb084abe8a8967a09e519a03126d991aa","sha512":"ec7eec3414a15558436f7668338ea4fd0732e8faff81c41f3225bd07a26969f2c5cad2c36c20b16a76ddf579493dd9ddf81f1bf54e07e2990e50a166f525b050","ssdeep":"384:jDJCrttey0h2PfMOTgWEp9+rufg2aR39gpLJ/rhwa9:jDYtN0hc7NE6u7H9","tlshash":"a9f26d8948954237fb6fad3233663a44453fb0c2d9708bfd64ebb5b4d591288a0f6cd4","first_seen":"2026-01-07T15:45:26.11806Z","last_seen":"2026-05-26T10:25:12.454305Z","times_seen":15,"resource_available":false,"data":null}},"time_used":731,"timings":{"blocked":490,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/headerAndFooterResponsive.4min.css?ver=768287826 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"82f4\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33524,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33524), with no line terminators","md5":"d9b5d7bfa49ba034f1fcc71232a16467","sha1":"c12fca84d655227c52ce13fb307699b2aca1c34b","sha256":"e472404f52cad0d8686f7e1b473f2d26753c5b11c8d2c92268b6e7f62b802ed2","sha512":"13bdb9c9ef44ca15704fb949e9d92b796eee580ef238ce3bb7db1acd938e78fe304f70a5ced6b4d3746134ecb226897543384771e0bdf5ee82e174d579765f72","ssdeep":"384:DWQiZVU2TlhVw9Y0Mp0NkO8hplZo15K2FRZ4lMm8qXVJ4LJoyKP+dc:LkZRwO+NknbK86KT7OoyPS","tlshash":"c6e2c8a6e59d211f711bc676b4d27fcd702a8002da130b7eb5ae7275c2c60d92733789","first_seen":"2026-05-12T17:11:02.286321Z","last_seen":"2026-05-28T19:36:01.642879Z","times_seen":4,"resource_available":false,"data":null}},"time_used":725,"timings":{"blocked":484,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/headerSearch.4min.js?ver=-448467807","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/headerSearch.4min.js?ver=-448467807 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1a42\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6722,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6722), with no line terminators","md5":"48c1547a55d6c8e0dd78be7627b7c23b","sha1":"3ec6b6fd6f384ab02fda68b76226e326bc8bc620","sha256":"64d606535e1ef06c0083def312c469d17735aebd89457c018fad114d2b2bbec7","sha512":"870a1b5542bab240330374b2e1313af2c4c24c1b9a42f7787ca8e86ace899bc5e08ff5ad8866a3171f6812d3ff36f6cdc4e713324a9ac9fa8a1f67010209590e","ssdeep":"96:EfqfcAgujU7oAnTdx5f6i7Ii/74ElvxT/jAbeVMOwR:ECfcMjUEAnTd3f62UST/j0qLwR","tlshash":"4ed1091553406a29ddb731105c9f328eb6b4ef63c404bc81da9ef7522478eb670a369c","first_seen":"2025-09-21T15:13:50.846241Z","last_seen":"2026-05-28T19:36:01.59608Z","times_seen":23,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":474,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icons/icon-logo-huawei.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icons/icon-logo-huawei.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"a96\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2710,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e03298bcb9534c43a1556bfd2ad31dd","sha1":"464fa6f04c36986730ae4785e7a3cf93d5ba2042","sha256":"9a14bd5c0c1d07aa6cfb601faffa877244e336cd695a576f152e78631b692d83","sha512":"c6a1ad9eadcf8ee9c1d12a3c8e8a2d9c6e08fd1886933c8c9305f64d7c8e5e24a5a72b4728e6d17f104b227c42e25e75ff33445b3ab920152d69ed0dd24ab3bb","ssdeep":"","tlshash":"9351f1f562dcf1e4b509ebd584466872be6b28f8bb29c7484580bfd172a04670cccdc8","first_seen":"2026-05-12T17:11:02.276874Z","last_seen":"2026-05-28T19:36:01.641507Z","times_seen":4,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icons/icon-logo-apple.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.311Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icons/icon-logo-apple.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"3c1\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":961,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f24ccb378a1639ba61f310436ffa6ee8","sha1":"e97d50cdf31b3190cbd691a8a64d260b826cc278","sha256":"965dac560f1028670f05ffa8d0dcaf748e3e406bd3351ddb0c48cb0fa7c1a09f","sha512":"c32227606ec2b4cf46155a9eaa4167a08ed45cc4170d89830eb455f7149984470c86cfed4e939d74d8c63d89ae52a3fefbf049c91c1d16e9fdea8d3f5ca33233","ssdeep":"","tlshash":"cb1110e552d83bd9d153db71ca96d5317cab10fa6fc89f844250384af88416254089c5","first_seen":"2026-05-12T17:11:02.268652Z","last_seen":"2026-05-28T19:36:01.590116Z","times_seen":4,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/favicon.4min.js?ver=589791203","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/plugins/favicon.4min.js?ver=589791203 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"6c9\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1737,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1737), with no line terminators","md5":"b7e9a60d9260be91d680cd87745b7faf","sha1":"ff1cef5cb0393f02f452dad54752698b833b31d5","sha256":"5340432ca1153b9bb336c89a71378c0668e2981def6f1ec832a184e0009e9d53","sha512":"8dad9c46459edee57cf8750c752e656a754c24e975fa50c4a8e8888e18568497e06c46b87058edaf8fa078e9ffe6ab53a70bcba5a93a6b60c53f9c7e8795c855","ssdeep":"","tlshash":"2131efea37c8815bf7c8285c348e5103d822a5a27d6cf94eb97e9cc49f34989403ca79","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.396498Z","times_seen":912,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":469,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/icon-radio-off.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/icon-radio-off.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 212\r\netag: \"d4\"\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":212,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2915f7337bfcc21d7059df291697a3f1","sha1":"f3d21016aaafb5fdc72882621c2bbd657444d365","sha256":"a810d219932d272c48a28e70ae8c3e11e048002ce363f6dd1b3cd257473dda81","sha512":"854fa01fbbde79e31ef8ba13928ceb0ed81fa5c2919860388ee747bc589fc7942611687a2fcbcdd744c6573ce6ffedc29351e4e82f3e8185ae6ded6204b0fde3","ssdeep":"","tlshash":"bcd0223c523ded24a624c424e36a3028802e60634b1edb3ce0c02431e4557e73c262fc","first_seen":"2026-01-27T10:06:11.941161Z","last_seen":"2026-05-25T08:37:13.229482Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icons/icon-logo-fb.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icons/icon-logo-fb.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 210\r\netag: \"d2\"\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":210,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c6e895897ae5b448f08be1e212330c89","sha1":"0cbe86446cb05ebfa8a18b5793a5e5fd7566b763","sha256":"7066423e21106b992a364e1d80e97aba4985329095e472846e8264bbab9eac0d","sha512":"3e5a35dde65b45a21299c871a17a11b7add4270c210bf9606a4c3d87ff0dd7c6a8df2472451444f597e6bd5b44352c6e66df89bb068512171e1e0207653d2027","ssdeep":"","tlshash":"5bd023f8da1da60047358165869d7136003670e1574c045ef74031067544fe76c249fc","first_seen":"2026-05-12T17:11:02.27359Z","last_seen":"2026-05-28T19:36:01.607382Z","times_seen":4,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:58 GMT","end":"Thu, 30 Jul 2026 15:53:57 GMT"},"fingerprint":{"sha1":"3D:2F:68:CA:7D:7E:91:9E:9A:F6:55:25:90:92:2C:70:DF:61:E1:AA","sha256":"17:D0:A6:F1:72:DB:CB:B5:FD:37:15:CC:95:48:17:63:D5:77:2E:57:FC:4D:6A:36:5B:D9:8A:76:6B:1B:54:5E"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 25 May 2026 08:36:43 GMT\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":978,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (978), with no line terminators","md5":"f24ef84d50d1d5cb2292ab5e6180eecd","sha1":"bca3b78ddd965797073eb7f67a2d3a48d05012b0","sha256":"bfe44fd8d0e5b27bf41121842c449322c8c5fb3de660f0177bb63a6e637f6ae5","sha512":"b25f7581a729d8eac59fcb551d6366600597ec6fc285d3dd9b70bf33507c29cc08de01fd2f13ccd46689ba7570c662180c9ccca9a45fbdaacd752ea61f4ccc14","ssdeep":"","tlshash":"9a1154b30a14b0394f7209f1e2ffcbb5f862702cf15849e8a505dac42e69dc7ce05595","first_seen":"2026-05-19T05:08:35.298641Z","last_seen":"2026-05-28T03:27:30.569022Z","times_seen":642,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":14,"connect":8,"send":0,"wait":20,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.4shared.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 150499\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-20T01:51:12.234287Z","times_seen":194268,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.cookie.4min.js?ver=823523918","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/plugins/jquery.cookie.4min.js?ver=823523918 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"2dc\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":732,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (732), with no line terminators","md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-06-19T20:13:16.264234Z","times_seen":1864,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":467,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/timeago_i18n/jquery.timeago.en.4min.js?ver=748621410","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/plugins/timeago_i18n/jquery.timeago.en.4min.js?ver=748621410 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 42\r\netag: \"2a\"\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"b52429e47b6d0a6d1d5a3deaa862c597","sha1":"3c95de2d1657d8513f8283320d6ec1f25af0ce68","sha256":"a1dcb8caed20ac4dcbec2a67c9d272197a9c9a04e535e9a2649e43dee038cc0d","sha512":"6398894a184ace0ce4be2ff494b3e433c53dfe115c2fb8cf4488578e055c5db8a9eab7cb9f0005154237702667ff2c369f0fb719c186dd8ba4491b93858d85c5","ssdeep":"","tlshash":"dc90028304a5134a00a1540025500021c05c64a9116264010500611c72841419efc598","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-03T18:50:05.372109Z","times_seen":236,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":465,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/bottomSheets/BS_signIn.4min.js?ver=-1384269618","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/bottomSheets/BS_signIn.4min.js?ver=-1384269618 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"44f3\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17651,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"326fd8c78befe0415c417e1991e236a2","sha1":"042a30aa7c04f63aee272f3cf986d4d327dc5cac","sha256":"817a291b55062e125d3350d4dfeaa4105175e58547970046d378915fb1d49956","sha512":"f0ada3b59310906f6f7c3d114bf77eed190708df96bbc599b9098878ef58279af8c9e806ffb4125d3ea8804970b8630dbd9f71a9282b74a94a85d476a22b9272","ssdeep":"192:sLatCEGftQPi42nrml4x1tJuQnkoPhQGYaODXq9SbWaRbaea2LsR1beLW6XXrZaq:IEGftVa0hu4RgKO7Z2Za","tlshash":"6482300e69e319020477f0ba4f571010f63a14273489fe68be8d4750afd6b5e97b7a8e","first_seen":"2026-05-12T17:11:02.237319Z","last_seen":"2026-05-28T19:36:01.548886Z","times_seen":4,"resource_available":true,"data":null}},"time_used":823,"timings":{"blocked":461,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/icon-search-blue.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/icon-search-blue.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerNew.4min.css?ver=1999692565\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"151\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":337,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"05fe3008c8ea6208f7310b512f5be0f4","sha1":"902c99f1b3934ec4a707ebdb7ebbd83e1310ef32","sha256":"ed8b4d8d9547d426686b5a0a37a8b088b8bd05230e84488b05f52b8c18b8e898","sha512":"8f2a43b99712843473301c746ff1d05d1e5678d72df8f248ef169c4304b26ba704daa94dd48743a66987a44d2a546a5af95a10c3b38c5b1b3cd9b20e26bcc9ef","ssdeep":"","tlshash":"34e026b45158ad20c0088338cb6cf1e8312f29ea338c8118e9a430356594ddb5c29add","first_seen":"2025-11-25T14:41:15.604921Z","last_seen":"2026-05-26T10:25:12.432725Z","times_seen":11,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/icons/44/PDF.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /icons/44/PDF.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/themes/account/icons.4min.css?ver=745154683\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"cdb\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3291,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ddaa888aeea941fd032c7d61e4afc59","sha1":"d1028db3601d33b329f23986b965c3b4b3d5a649","sha256":"21041e9b3fa77f5c951c0401796a9857a723ff354f74c9971271613e6140c1c4","sha512":"c40fd3682444fd85bd552c381b109b5257147001b5ea3529ffc0d43fa69adf7c938f62fb1a7cc73c38e887a3ba6a437e07caf354f9dc53d54c732fac5b9bc48b","ssdeep":"","tlshash":"9f61544bbf4f89bdd14eabf01a03dc1c9825656e1b23f42fc58915d2cb80a5ec4b6e52","first_seen":"2025-11-19T12:30:11.937592Z","last_seen":"2026-05-26T10:25:12.407513Z","times_seen":13,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icon_footer_language_dropdown.png?4591820861","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icon_footer_language_dropdown.png?4591820861 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1148\r\netag: \"47c\"\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 14 x 8, 8-bit/color RGBA, non-interlaced","md5":"e00c9e11638a35026bd1d49cfcec5d82","sha1":"9feb9b5c7cce0dd9d2b3797a68bf904850000644","sha256":"cf64910ed6f835acf0575c7d264a7f1d9c2535790d7cd46dca1f0ff4623725d9","sha512":"a258a33bfa8d7039f3b22c3a0a422796e5384235439f10c7ffeefe04dc301a93ce99b92d7307662ba665b7cce0039f7e7bf241277f844bdcccbf120896dcc96e","ssdeep":"","tlshash":"9321634daae42ac2d18dcd7b44fb302bca0259c0c8d4f1aabc8fd4474db41f501a95c7","first_seen":"2023-05-11T12:38:25Z","last_seen":"2026-05-28T19:36:01.654404Z","times_seen":78,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-L27DQL6RCD\u0026gtm=45je65k1v9168596065za200zd9168596065\u0026_p=1779698204062\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=42140962.1779698204\u0026frm=0\u0026pscdl=noapi\u0026rcb=19\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616985~115938466~115938468\u0026sid=1779698204\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.4shared.com%2Ffolder%2FKrb2-tLj%2F_online.html\u0026dt=4shared%20-%20My%204shared%20by%20David%20miller\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.transport_type=beacon\u0026ep.locale=en\u0026tfd=3003","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-L27DQL6RCD\u0026gtm=45je65k1v9168596065za200zd9168596065\u0026_p=1779698204062\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGA\u0026cid=42140962.1779698204\u0026frm=0\u0026pscdl=noapi\u0026rcb=19\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616985~115938466~115938468\u0026sid=1779698204\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.4shared.com%2Ffolder%2FKrb2-tLj%2F_online.html\u0026dt=4shared%20-%20My%204shared%20by%20David%20miller\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.transport_type=beacon\u0026ep.locale=en\u0026tfd=3003 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.4shared.com/\r\nOrigin: https://www.4shared.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://www.4shared.com\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":67,"dns":0,"connect":24,"send":0,"wait":30,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.timeago.4min.js?ver=1007035806","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/plugins/jquery.timeago.4min.js?ver=1007035806 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"91d\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2333,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2333), with no line terminators","md5":"b36094f61f2f53c59692e0308ba58a7b","sha1":"d9312f18de6f89f670629c32aa8b674c325b1533","sha256":"76ee97cf85d939703d6bfc40ac8b26c1fcf7575f5d0a891fb53170b24f34a4ab","sha512":"a895729a1b74d14ad75ce085ec9e7bba56911a3fdc50d9eebbc00ade6001e6a805c04809be750530e4b42bcc72b70d75e3f357a8808bdce6c9a6960553fc36d4","ssdeep":"","tlshash":"f5416548719f2150576331f0c3bf0185f362de7391d56528c2cae522bd79e9c51abe68","first_seen":"2023-03-11T22:13:39Z","last_seen":"2026-06-03T18:50:05.320473Z","times_seen":241,"resource_available":true,"data":null}},"time_used":829,"timings":{"blocked":466,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"serv90.com/ab47fe78.js","fqdn":"serv90.com","domain":"serv90.com","tld":"com"},"ip":{"addr":"212.124.125.242","port":443,"asn":47328,"as":"DigitalOne AG","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"serv90.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 29 Mar 2026 08:13:24 GMT","end":"Sat, 27 Jun 2026 08:13:23 GMT"},"fingerprint":{"sha1":"48:34:FF:30:2D:61:69:EF:B7:5F:C2:9E:A7:A5:83:75:BE:CC:8C:96","sha256":"88:77:60:35:E6:E3:F5:76:5A:57:C6:B8:3A:90:F8:3C:BB:FD:C1:E9:C1:7A:30:3D:20:75:2D:C3:18:B3:71:B3"}}},"request":{"raw":"GET /ab47fe78.js HTTP/1.1\r\nHost: serv90.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 \r\naccept-ranges: bytes\r\netag: \"0c7ebacf5718ec5263605f0b554776691\"\r\ncontent-type: text/javascript\r\ncontent-length: 44444\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":44444,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (608)","md5":"c7ebacf5718ec5263605f0b554776691","sha1":"7c8645303d677ebafd9e51b9ec200e3f807f99b0","sha256":"52b162c1b7915af6b5e8cd28c930bd2c3bbc8c486e19fc285e20f8cf9b9ea976","sha512":"b60de0a799d3d996602a204081b02923db1cdf350e3edadfe207976c489f37093e637b500320db11872195861c7b7447405b0e37dd437331b1ad9160c80d3e35","ssdeep":"768:hs0P7HXfiMZJNOGzvkok0CYNVogh/xfmH3bBX9dwDGU0m:hjLiS/pCYLogrOX19dwDvR","tlshash":"fb1319dcb6a2b06543636074403f920ff23a6876684c9094f299d9e17cb8d9e163bf7c","first_seen":"2026-04-25T09:48:07.23067Z","last_seen":"2026-06-12T20:59:39.380602Z","times_seen":15,"resource_available":true,"data":null}},"time_used":594,"timings":{"blocked":-1,"dns":125,"connect":90,"send":0,"wait":101,"receive":177,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"serv90.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.jscount.com/a/4/28b1a41b/z?ref=\u0026url=https%3A//www.4shared.com/folder/Krb2-tLj/_online.html\u0026rand=0.7655856772442763","fqdn":"www.jscount.com","domain":"jscount.com","tld":"com"},"ip":{"addr":"204.155.149.132","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"jscount.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Apr 2026 06:19:15 GMT","end":"Sat, 04 Jul 2026 06:19:14 GMT"},"fingerprint":{"sha1":"66:CB:F1:62:0A:F3:D1:9D:80:44:06:2D:9C:B3:C5:05:44:79:12:3D","sha256":"89:66:EA:74:F9:BA:18:BE:CA:BF:78:0D:7D:13:3C:4A:45:C9:EB:B0:C7:AD:00:A8:41:F3:43:47:2F:73:3D:27"}}},"request":{"raw":"GET /a/4/28b1a41b/z?ref=\u0026url=https%3A//www.4shared.com/folder/Krb2-tLj/_online.html\u0026rand=0.7655856772442763 HTTP/1.1\r\nHost: www.jscount.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/gif\r\nserver: Apache-Coyote/1.1\r\nsrvf: 204.155.149.132\r\nsrvb: 10.1.3.43:8080\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"Apache Tomcat","description":"Apache Tomcat is an open-source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and WebSocket technologies.","website":"https://tomcat.apache.org","common_platform_enumeration":"cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*","icon":"Apache Tomcat.svg","categories":["Web servers"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"07fff40b5dd495aca2ac4e1c3fbc60aa","sha1":"e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4","sha256":"a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7","sha512":"49b8daf1f5ba868bc8c6b224c787a75025ca36513ef8633d1d8f34e48ee0b578f466fcc104a7bed553404ddc5f9faff3fef5f894b31cd57f32245e550fad656a","ssdeep":"","tlshash":"55900003caa0800bc2a2c0300a080320ab80a23002080b0e80ac32a8ec2a2a20c00000","first_seen":"2023-04-05T13:33:10Z","last_seen":"2026-06-20T01:53:02.630517Z","times_seen":38055,"resource_available":true,"data":null}},"time_used":892,"timings":{"blocked":372,"dns":14,"connect":123,"send":0,"wait":125,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/Icon-share.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/Icon-share.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"8a1\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2209,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f3644f851b64379f8c8e40932fa5e74a","sha1":"81f2dc1cf8953c8f94866de4b9260a4caae5f7a9","sha256":"fa2dc84bdc2f216197cf07197eef07212311c7f7f2ea0d0e6d903f8efb94aab2","sha512":"9a614fb28a5eb24eb72c119f95737781ee45f0afdeb347e91e1a04afdf2d47a2a1a830b701622a3b93a2ebdb198300e66893e38adad2b90f0955d7ce2df94d62","ssdeep":"","tlshash":"db41d0fed5fe22c4820743d5b3502d647a5b28fd17ee8fd642708de4a4b9854a6c94e0","first_seen":"2025-11-25T14:41:15.647116Z","last_seen":"2026-05-26T10:25:12.383235Z","times_seen":10,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/favicon.ico","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/folder/Krb2-tLj/_online.html\r\nCookie: day1host=h; JSESSIONID=04164D003000D3A1AC5E9E0F815B44F3.dc329; _ga_L27DQL6RCD=GS2.1.s1779698204$o1$g0$t1779698204$j60$l0$h0; _ga=GA1.1.42140962.1779698204\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: 573\r\nAccept-Ranges: bytes\r\nETag: W/\"1150-1493818900000\"\r\nLast-Modified: Wed, 03 May 2017 13:41:40 GMT\r\nContent-Type: image/x-icon;charset=UTF-8\r\nContent-Length: 1150\r\nDate: Mon, 25 May 2026 08:36:44 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon; charset=UTF-8","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"3868e5a72e0e67d5835ec019ad73eae7","sha1":"5140f1662c47c393b276e656d35c5c45408b7128","sha256":"3e789ea36eb344f98c830f099cbda8fce03cc3618e2130d272e915a7f8ab2eb7","sha512":"8ed256b3acc673ed7ca1b43f166b745fa5996d59a6f89d0e4270b15f87b9c27c145d82312533ea11abda2b03488c99343f98552f40f7162b6fc80a08f7ad2b32","ssdeep":"","tlshash":"a42100569308078be508cdb408120788727bfeaf777a57199556f3913c7628a18ffa13","first_seen":"2023-05-11T12:38:25Z","last_seen":"2026-05-28T19:36:01.655432Z","times_seen":79,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-L27DQL6RCD\u0026gtm=45je65k1v9168596065za200zd9168596065\u0026_p=1779698204062\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGQ\u0026cid=42140962.1779698204\u0026frm=0\u0026pscdl=noapi\u0026rcb=19\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616985~115938466~115938468\u0026sid=1779698204\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.4shared.com%2Ffolder%2FKrb2-tLj%2F_online.html\u0026dt=4shared%20-%20My%204shared%20by%20David%20miller\u0026en=Folder_folder\u0026_ee=1\u0026ep.transport_type=beacon\u0026ep.locale=en\u0026ep.action=view\u0026ep.signed_in=false\u0026tfd=8025","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:49.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-L27DQL6RCD\u0026gtm=45je65k1v9168596065za200zd9168596065\u0026_p=1779698204062\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026_eu=AAAAAGQ\u0026cid=42140962.1779698204\u0026frm=0\u0026pscdl=noapi\u0026rcb=19\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616985~115938466~115938468\u0026sid=1779698204\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2Fwww.4shared.com%2Ffolder%2FKrb2-tLj%2F_online.html\u0026dt=4shared%20-%20My%204shared%20by%20David%20miller\u0026en=Folder_folder\u0026_ee=1\u0026ep.transport_type=beacon\u0026ep.locale=en\u0026ep.action=view\u0026ep.signed_in=false\u0026tfd=8025 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.4shared.com/\r\nOrigin: https://www.4shared.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://www.4shared.com\r\ndate: Mon, 25 May 2026 08:36:49 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-20T01:50:11.955642Z","times_seen":16564657,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/logo-4shared-128.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/logo-4shared-128.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerNew.4min.css?ver=1999692565\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"9a1\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2465,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20fe2e6b4c572adb5e6e994b7ec38700","sha1":"859840b82d27eb4b1477bde9d3c53de1da7997d2","sha256":"637c71e0496cf9f17c69e1edadd3af6bb514f950aeaa6584a7fe9036c1dd2613","sha512":"5051a021e8456f3739abcd105ff9a9ef66fb4aa2e95da9d42473da0b6375cf8a06a4bd369773873d5faa0a201eb07a35fb132b48cea44d54a1fc071c8687a777","ssdeep":"","tlshash":"aa517deda5ea8340a41743e8561ab1b037dee4ff210072b58264c471bd2d2de9fcdda5","first_seen":"2025-09-21T15:13:50.828086Z","last_seen":"2026-05-28T19:36:01.528439Z","times_seen":18,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.4shared.com/folder/Krb2-tLj/_online.html","fqdn":"www.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"74.117.178.90","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T08:36:41.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /folder/Krb2-tLj/_online.html HTTP/1.1\r\nHost: www.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: 329\r\nX-Robots-Tag: noindex\r\nSet-Cookie: day1host=h; Domain=.4shared.com; Expires=Tue, 26-May-2026 08:36:41 GMT; Path=/\nJSESSIONID=04164D003000D3A1AC5E9E0F815B44F3.dc329; Path=/; HttpOnly\r\nVary: *\r\nContent-Encoding: gzip\r\nContent-Type: text/html;charset=UTF-8\r\nContent-Language: en\r\nContent-Length: 11732\r\nDate: Mon, 25 May 2026 08:36:40 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery:1.9.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":51607,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (361), with CRLF, LF line terminators","md5":"210754257410a6674fcbabc3dec75d3d","sha1":"e62b53d6deaff0d8f71c681eefb291c6f70397d1","sha256":"8a05813ae356b321a15277562d279c66dd89a6b3749b73d6ce5a86d61ea37f39","sha512":"4ce23da2dd8560f05dd137b0c37ab87eaeee2f31004579cab933ce8146bb5b350919c2cfe9196b6b41beaaa60f4c7c8041d6bf2b084bde2e9193af04d564eb13","ssdeep":"1536:siXQtYzfTv2IvYwVuvav4t02rv5wOZPWjLv7v5vfvqvWvbvNvVv8vQQNQn+Q1yvt:kygwVuC4UjBnCuDltEoQRNFRShj+KG","tlshash":"a73344336890843b41a7c0d1ba63ab1ef986e627c656994073ec0bd81fd7ed3ed17198","first_seen":"2026-05-25T08:37:13.248622Z","last_seen":"2026-05-25T08:37:13.248622Z","times_seen":1,"resource_available":true,"data":null}},"time_used":2665,"timings":{"blocked":1262,"dns":14,"connect":120,"send":0,"wait":135,"receive":1,"ssl":1128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/jquery/jquery-migrate-1.2.1.4min.js?ver=-1518983214","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/jquery/jquery-migrate-1.2.1.4min.js?ver=-1518983214 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1d49\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7497,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7320)","md5":"96e7002d7b9f814beb67c374068a9c2d","sha1":"b862ef19fa8a99ace7041d9d030c4f9714a3ee7e","sha256":"f3008cbee89048d1d95e5897276fb4879f6d8d0d64c45ab5c197e9f52eb37537","sha512":"6427854cb6a3b5d70da82959f93816ccba17895559d781c7e312578bf9621640360f28c7e406d767721c745364b49d8220b9cb7405b3543c67154d168bd52734","ssdeep":"192:heTHfxGIdyh95DLjZ815lltO0sZYSNTi68:0TH5GIsh95DZ81BtO0sZYSN58","tlshash":"92f1a5d973c679b41ffe31b8753b824bb3b215991508a494e09c8da62c7cc4d903af2d","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.363447Z","times_seen":934,"resource_available":true,"data":null}},"time_used":1002,"timings":{"blocked":-1,"dns":149,"connect":122,"send":0,"wait":474,"receive":0,"ssl":254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/bottomSheets.4min.css?ver=-477151684","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/bottomSheets.4min.css?ver=-477151684 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"3cfa\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15610,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15610), with no line terminators","md5":"8ad64c9dd67dd977edca77121b602e15","sha1":"4c506ba71593909858845268cafc658b561173cf","sha256":"560e0301af328174b7e49d8baebbc5c8da85c107be431c3dfb8eb966a56bc367","sha512":"5728f48cc1a4ef4e22252922eab605167788fa42b4193b2f8e4bffd23d7d0dac4793caf2b8df7630b5e40aa525628419a562ba17ef99a08f5061377b7ebb0e06","ssdeep":"384:z3uiKLrWLjSKxz+Ca5qWH+nA3qfvry8pq:qiKeLjSKxI5qIgK","tlshash":"d1629636ad662529b33bd962a5c4a649303ac10796f33b0bd7daf935c0c29c6371e74c","first_seen":"2026-05-12T17:11:02.284323Z","last_seen":"2026-05-28T19:36:01.62403Z","times_seen":4,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":464,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/popup_n.4min.css?ver=-1713622631","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/popup_n.4min.css?ver=-1713622631 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"8c6\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2246), with no line terminators","md5":"2d400dca6afd7e37062f989a248ac8aa","sha1":"bc28c110640c0ae0bdb2b0e6766f4e5ee6f57a6c","sha256":"0b318284f0c6f62dbec46bf72d03267677df48ae8d733d19ad066c7856bab0b9","sha512":"859d8d3f8dc3ba14f17affbdac357b458bfbc89ae10c1052e9c5e480844bb93cc295621042d96d6256a81e432dab5340ce8a9487a1447e3c37686ae6d93305a0","ssdeep":"","tlshash":"7541663681d4b44b632ee761f7d367af612c911ae2634fbe3e482870d4b845a0275bdc","first_seen":"2026-05-12T17:11:02.290894Z","last_seen":"2026-05-28T19:36:01.567649Z","times_seen":4,"resource_available":false,"data":null}},"time_used":821,"timings":{"blocked":459,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\ncontent-security-policy-report-only: script-src 'unsafe-inline';report-uri https://csp.withgoogle.com/csp/script-inclusions/bcfae741e379a885f2ab2cf83ebe6d32\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 25 May 2026 08:36:43 GMT\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4c8ef72eb043b6205edde8d9e910787e","sha1":"fa8b1cd29ea6e9bd2113a33d10ab096306430f37","sha256":"0031e12119f0b0e9820611dc4e888b0decf9c9924e4b2bea291397e70105305a","sha512":"80bf1edac61df533f32176b490302e90a6213b72b5ea335092fa25128a4229cc7967e5c4cdc6cec06c923335260d0ecb779fad1b36a26ff616b4eb4465e34e7f","ssdeep":"384:89fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/O:8yjooYhREHPM5svvYaR7AIWP2ZZYQRVs","tlshash":"8c721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-19T23:44:13.889102Z","last_seen":"2026-06-19T22:56:05.092424Z","times_seen":4683,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":107,"dns":26,"connect":7,"send":0,"wait":18,"receive":0,"ssl":84},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/pageDownload1/thumbIconsAndColors.4min.css?ver=584488018","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/pageDownload1/thumbIconsAndColors.4min.css?ver=584488018 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2210\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8720,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (8720), with no line terminators","md5":"c0ea4531bf946cb4a2ba08f6ab0e82ab","sha1":"b2749164567db1d8565f658e640612c57f8ceb45","sha256":"38bc9765b8057763c7f0aa4bbb2f30e40d0ecc642ea104f7a42c9658b56318f9","sha512":"518c0c391a25d0fdaa1549da1ef482062b9f91872af3b517859b300bdc3bef28c9174cdb278a99158af17c861c4aa977f2d2d8f156fc9c4864db6924ab91dd8c","ssdeep":"192:/2RVJ8CBNkC4KaiZbuT2RVJ8CBNkC4KaiZbueeAVRd9EX90b/VBkpcTT/BlvIgjy:GQuRT7Qi9upL","tlshash":"2702c8d9ca5c18e4f843adb237a5a3e5992ff620e5116efce4bb01a8c60650770d1edc","first_seen":"2025-11-19T12:30:11.957777Z","last_seen":"2026-05-26T10:25:12.48923Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1521,"timings":{"blocked":518,"dns":150,"connect":122,"send":0,"wait":465,"receive":0,"ssl":256},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/folderView.4min.js?ver=2118468839","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/folderView.4min.js?ver=2118468839 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1d3e\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7486,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"46afe80b8e738fe3de5576f7b3092b66","sha1":"979d80b36f4eda94499016792fbbf5398d38fde0","sha256":"5f76429275822294d65f59e68a903700d28b4e764aa83c5a6b755703695f7b08","sha512":"4750919b22a269f94017960881bc9d7f246280a4f49f49f93c058d334ae2efdc404889849f8aec394adecc457d78009955b4f52eb2167b8fd4ce48a7b462866a","ssdeep":"192:xGO2AvE6T9MhH0srh4vBkEAR128xBnQwr8QXzSzCRgBoM3riSOKa4yh5JluFKx:xG32srhnE7WNTz6Y/z","tlshash":"05f1888eb8f62018a0b775aa67ef01486b266503110dce58fe9c6ed09f045e477f3a6d","first_seen":"2026-05-25T08:37:13.255533Z","last_seen":"2026-05-25T08:37:13.255533Z","times_seen":1,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":496,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/fileCard.4min.js?ver=-1704360716","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/fileCard.4min.js?ver=-1704360716 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"fd6\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4054,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4054), with no line terminators","md5":"54aeaefa58bece6b5e0ef2669c2a67bd","sha1":"685f33e7745a0f0c6be7647d6a7d7be311f81663","sha256":"a9a39e228914fa7b5ec686e512d0a87174a502894dfddd01cdcfc7318cfd00bd","sha512":"511bbcb69799987bd29792e4f10501c0b26902b6422c7bf8fa3dd50092be2b5ccedc6e033f873678ed9a322d262a5be250fb58dfd724c7fd0a60e9176b2d2d08","ssdeep":"","tlshash":"4481e008a2fc28b9e5bb209564d71307f2264e337656dce540ea587bc8376c045ebe9e","first_seen":"2026-05-12T17:11:02.283179Z","last_seen":"2026-05-26T10:25:12.379305Z","times_seen":3,"resource_available":true,"data":null}},"time_used":730,"timings":{"blocked":489,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/gridAndLibrary.4min.css?ver=904387394","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/gridAndLibrary.4min.css?ver=904387394 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"644f\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25679,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25679), with no line terminators","md5":"f75f5e4978ff5d282259214f1ae05f3e","sha1":"20d54797fff910380539f372a7a76710491ee850","sha256":"a81dc551121ad2f28e57eea8adf5adfbfcf83297c91949c366a6c7af9bf51e8b","sha512":"1bf50e34ef891bde7b4dd7c9ef6a7c06c42ede81bb10faca6e1c69b9981f48043ac72f0d774d101dd9972b1f8ef7950369ec962656105dc66f9efa258b555909","ssdeep":"192:HMum9QXP08X1OqmJ0yaT9tWxnmM+RCPxnEvdzg3RtukALQ3X6WNaylHh5LhpJA:q9OTX1OqFt6ECpnCOc1Q3X6WNayVLVA","tlshash":"44b263926564282f752bc97bf0613ae6f0195502f7728fb7f1da3e7ada9194e0032307","first_seen":"2026-05-12T17:11:02.235007Z","last_seen":"2026-05-28T19:36:01.620264Z","times_seen":4,"resource_available":false,"data":null}},"time_used":727,"timings":{"blocked":486,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/icon-folder-pub.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/icon-folder-pub.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"44b\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1099,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98114d40df5413d2fa94aa0802b45c3c","sha1":"8835fb6c5b7b43069f284b6d8affd5b8dd0aadb8","sha256":"fc320e44bfc80a51872d8b8de9b32d486c13e6be9c86347801d7585ffe4db4c0","sha512":"a1db6f50f2cc4ebcdf8fea9fdb74df31a1ef85b7560d9804d8e99be9b8015a987c007820b33203c0ae8331aa8c5f5899da5490e785fd561866a84528b6426adb","ssdeep":"","tlshash":"7611c0ea6128557b9614c6beeb3c41d2226795d82209423af2d0ff1a651c6d3dc29690","first_seen":"2026-01-27T10:06:11.929463Z","last_seen":"2026-05-25T08:37:13.260899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/reloadBackground.4min.js?ver=1205405476","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/reloadBackground.4min.js?ver=1205405476 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"309\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":777,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (777), with no line terminators","md5":"9959f4b1b249dd5ca72640ed993671a4","sha1":"6d532c747c59eddd8932da08b2706a2698aca46e","sha256":"7f4c89007627ab3efa1f7abfebd96929a4641c8faf18f2832f51656d580aafd4","sha512":"00ae3ac5ce1574de0105e28c122ee0a6b3ee290e860ac17579cf0c1b5a83d8f724e01c33a44c02975ffc0ed996712875e74c93580c5268a364f77822e5bc4e8c","ssdeep":"","tlshash":"b901bd8a72b57643a5b2383124af7316503d28c799d1cd4490aaf493fd64564363388a","first_seen":"2025-11-19T12:30:11.849995Z","last_seen":"2026-05-26T10:25:12.434548Z","times_seen":16,"resource_available":true,"data":null}},"time_used":728,"timings":{"blocked":487,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/bottomSheets/BS_openInApp.4min.js?ver=-1318807999","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/bottomSheets/BS_openInApp.4min.js?ver=-1318807999 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"72f\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1839,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1839), with no line terminators","md5":"22e863d8a270545c16d8fce2b9d2f538","sha1":"f10d63f7d393d7ae60de3f8e63ec317199bf32f2","sha256":"936e0bb46c489e91aa2b28921db2cc58bc8abd989b209b77bf4dd5c74186451c","sha512":"3d2de1e7b5b2885436c8ec8dfeb1294c5f094bc092f605edb25477a9124d2af2a3cfe028c27660031458846b8e5e716981c0bccf0800e947739d908de9d47397","ssdeep":"","tlshash":"b431e4aea475348d20d334725ab7a310fe224e3359c56f540679c8f10d7d94e149fa1c","first_seen":"2026-05-25T08:37:13.263139Z","last_seen":"2026-05-26T10:25:12.431034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":456,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/batch/addToMyAccount.4min.js?ver=1449118452","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/batch/addToMyAccount.4min.js?ver=1449118452 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"20b4\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8372), with no line terminators","md5":"90e3cffe9681ad9afc4504b55d2eca69","sha1":"3d95c13ae73fc87edaf37cf9cac6664bd7a128e7","sha256":"52698df0838eff96d1e9bf7cef2dc56cb9c2362dfe1828d4670c92c9c9218476","sha512":"1e3bd2bfe13c6e8695d0c92b29dfc7135224ec0ee2e133c0f6a6998e10dc4241be4af045c6cbef20e34e43b8dfac323b9de0fba78d22afe739d520f5141e540d","ssdeep":"192:RKTHSHTxUhbmHocrtwIWQ7ZRQFhXpI8N8om:U7uxU95iWQ7HQFJpXN8om","tlshash":"9202008a360014d51fe77fb6a5fb3ace97239641e7404d6098cdb090ad782d89c67b8f","first_seen":"2026-05-12T17:11:02.258277Z","last_seen":"2026-05-26T10:25:12.380381Z","times_seen":3,"resource_available":true,"data":null}},"time_used":817,"timings":{"blocked":455,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.20.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /recaptcha/releases/Br0hYqpfWeFzYCAXLD4UuCIV/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.4shared.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 373621\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 24 May 2026 22:12:12 GMT\r\nexpires: Mon, 24 May 2027 22:12:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Sun, 10 May 2026 16:02:40 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 37472\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":876736,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"d366d31ca6e987930c60a63d8afe93b0","sha1":"4659d0e518cf75f849cf2173599a9d4dc3e660f0","sha256":"8a975b9c76ea9dbe7a07a093bbcff9b2bead51aff6d01e46e559b69c10752b7a","sha512":"3f273ffba93523671eb9fbadf8609342a75da98638e17f3ccbda27da72edbac0e4cc65406ef520cb42ce15efc49d0d45bda76ee2c1506c1eb41bb75f894dbfc5","ssdeep":"12288:Cb9ySj6RypHU0cqIfbUeFZViqKqPEAxmOHEiTx9bzm9lu:o93p00cBfbU0ZVNK6NxvEinO9lu","tlshash":"a6153cde7483b6e28222b9f990672009537dd5a6c468485f7159c4f02fb1c8e70bafb7","first_seen":"2026-05-14T17:52:43.858368Z","last_seen":"2026-06-10T20:23:00.490435Z","times_seen":13694,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":65,"dns":50,"connect":21,"send":0,"wait":23,"receive":102,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/tipTip.4min.css?ver=-1558254190","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/tipTip.4min.css?ver=-1558254190 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"511\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1297,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1297), with no line terminators","md5":"f0efaec11f6aaba955feb407bd200036","sha1":"b41422ae8848b16a8ff0f569d8b5a48738c0e1b8","sha256":"fec8bcf6ed7ac787e60e4b32a93063b8acf90ca2721b9a16642dedab403afdc5","sha512":"d9baf949f964ce952ca1ba65cf455754988529e49f3e72ec31841863954d50289add3cfb938b969c757fda24a7a37f7eb454f9c251bf9b20ec147e85ac1516f6","ssdeep":"","tlshash":"5521382f9574f69d9117fd0550c7aefe216ab6b27a83b67aa112dc008c51dcc2c0b64c","first_seen":"2023-04-12T23:09:24Z","last_seen":"2026-06-12T20:59:39.393474Z","times_seen":882,"resource_available":false,"data":null}},"time_used":839,"timings":{"blocked":479,"dns":0,"connect":0,"send":0,"wait":360,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.localStorage.4min.js?ver=-1535072197","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/plugins/jquery.localStorage.4min.js?ver=-1535072197 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"9d9\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2521,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2521), with no line terminators","md5":"c7c0a209a995a99bdceee2902297cfd4","sha1":"a503217b936b8f0fcdf795c220c8864170118c29","sha256":"bb361e5bfcefa2e1e58c969d66d9c68f8b5238058fc8ad1d91c1c9486d138eb5","sha512":"a64dc708d23f914a7499f9dce5f45746f553f9e8e25894a088d88ae288a8ae75199244ec10acf72d62608098a591ff6c88d4a0f2d334e63f35ac7e2d6a6ae9e6","ssdeep":"","tlshash":"ef51fe8b2151253881a2e024b93f7312657ef8a6b589447cf1b0accdfeac9094036f7e","first_seen":"2025-08-07T10:58:18.513779Z","last_seen":"2026-05-28T19:36:01.565257Z","times_seen":27,"resource_available":true,"data":null}},"time_used":830,"timings":{"blocked":468,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/plugins/jquery.tipTip.4min.js?ver=424755820","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/plugins/jquery.tipTip.4min.js?ver=424755820 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"c48\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3144,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3144), with no line terminators","md5":"679c56a052a38e49e53b89fddc763efa","sha1":"eef0745ac0ac2a35f973d1ecd9ac87128f6a12a6","sha256":"fd263bd59e2f16a166c3125fc89cd179ca63c693913f58b1a51540c7de077be9","sha512":"05748cd407947cfedcb50a794dd1bb34ba23b8a933b2dcb5adfb01ef29674542851b50521df39d76d990e1c422fb7c1b10fdcccbe182c684d070cd7cdc045a2f","ssdeep":"","tlshash":"9151415be940713f12e33872951f510a147aed368e07f111b6c8c5881cbb5da56abf39","first_seen":"2023-03-07T12:59:10Z","last_seen":"2026-06-12T20:59:39.366344Z","times_seen":897,"resource_available":true,"data":null}},"time_used":831,"timings":{"blocked":468,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/authScripts.4min.js?ver=-190652857","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:43.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/authScripts.4min.js?ver=-190652857 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"1659\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5721,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5721), with no line terminators","md5":"9cd871326e070ed1fa0a2042f3ca89f7","sha1":"ead9afdad61e9446c0ebbaeaa128d64ad75c4da3","sha256":"39ee27ac53aaed85fd8892e185ebab7d2cfe058786341ecd62ccbf74a5ddbc0c","sha512":"726d9073bd2225e684bee494d268e806b6ff6959a4a2af59edb6eb8a10cf1c1e4e7434c90fd5a5554ce080c621cfc9e2eba3054174a5d80a65e47b415219fd05","ssdeep":"96:l/8xMaMGwvFM+45uyPu+42hLOn6Vej0Ub7SWdFmXfXfYvXfeq0Ed1LK5wcjl:JSR+48yG+4G7c5TdFKfwvGBE3LKWcjl","tlshash":"c2c1534af3c57d2751eb2a35521f05a5936e1c6398c68d58d130bc81293cd8e867ff8e","first_seen":"2026-05-12T17:11:02.214676Z","last_seen":"2026-05-26T10:25:12.395468Z","times_seen":3,"resource_available":true,"data":null}},"time_used":853,"timings":{"blocked":454,"dns":0,"connect":0,"send":0,"wait":399,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/d1new/Icon-add.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/d1new/Icon-add.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/pageDownload1/d1New.4min.css?ver=-1149682665\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"109\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":265,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ef69b82a2a41682bb46e1e1f3ec83b7","sha1":"8506187f1d5b07a4609cfff2f37e90d886859ed5","sha256":"cf572c3ac3261127a9b64b6095a04329c6bde706c5283583ae21271a0e50b089","sha512":"f25d524413c79b0612408b5d31c757752e2eddb77e35b6630dd68d8870065a00544085049280cec19bc38d3d6ce8d4aa9871c51f1e6dabd7d8d5370bd4d9a832","ssdeep":"","tlshash":"14d02e2e82ac8914fb13c204fb58715d01af10d2038d6198e8802134ad18b2a3e3baec","first_seen":"2025-11-25T14:41:15.643538Z","last_seen":"2026-05-26T10:25:12.426115Z","times_seen":11,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/css/fileCard.4min.css?ver=-1554093508","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /css/fileCard.4min.css?ver=-1554093508 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\netag: W/\"2d3c\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11580,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (11580), with no line terminators","md5":"8a0de6c01f8e111606fd4df604c5e870","sha1":"43f6d8aef20fbb479ab3d3c5a4bee62c765532fd","sha256":"f2ec4603b5553f83883d8f67e2f3b4cb78e812e6f4285a4e5caea8c807f9841d","sha512":"8c47fb8666fb803cffa1d2f033d0ced0f3ed0dd1def8956f1e34cd22e7f7ee7519a1f31d91656a00ffd8ae662beedda05029db2cd6e4616b800ea31f428a5435","ssdeep":"192:PjBxuAc1vxgKzpJpO76KqKZOVmc2AOYjQ312c3caqM9EXZ:9s/xgKz1ANOVR2AOYjQ3PcaqM9kZ","tlshash":"4632d962d66f12bde236d40472d47b4d711ef0027b335a8b9a616b26c64fc8671ed2cc","first_seen":"2026-05-12T17:11:02.267693Z","last_seen":"2026-05-26T10:25:12.487757Z","times_seen":3,"resource_available":false,"data":null}},"time_used":733,"timings":{"blocked":492,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/footer_logo.png?7487956398","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/footer_logo.png?7487956398 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 1030\r\netag: \"406\"\r\ncache-control: max-age=31536000, public\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 27, 8-bit/color RGBA, non-interlaced","md5":"1d091b9d5ecbc6ebf23d972a54edc97d","sha1":"a460f1655b7c7b70f1cef522fc841f184492f180","sha256":"43164179829349a19890eaa72af202c03e326fc7c48ee8390d4e20b6e049f767","sha512":"beee074316b8ee1852eff3c7cd92b80a1f8a03cebb0a306b4d1f6799dcb60c8268df1b2af9021ad6ae70f5b8299f97d4dad95a6342052294a76e44589a0fed1c","ssdeep":"","tlshash":"9a11a8d2d9c654ff65286c52bdb14750d4b705a7562d455800408465cbcdcd980d6673","first_seen":"2023-05-11T12:38:25Z","last_seen":"2026-05-28T19:36:01.589502Z","times_seen":75,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-L27DQL6RCD\u0026cid=42140962.1779698204\u0026gtm=45je65k1v9168596065za200zd9168596065\u0026rcb=19\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938466~115938468\u0026z=1928702717","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.251.143.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:55:03 GMT","end":"Thu, 30 Jul 2026 15:55:02 GMT"},"fingerprint":{"sha1":"C8:15:3C:A4:DA:FB:D6:0A:64:E5:6D:CF:6D:11:5E:D5:17:F6:11:AF","sha256":"B8:4C:B0:A6:C4:D7:47:BF:35:F3:EF:71:13:5D:38:BA:A6:01:F8:9F:0C:52:1F:04:63:51:B5:BD:39:E6:FB:1E"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-L27DQL6RCD\u0026cid=42140962.1779698204\u0026gtm=45je65k1v9168596065za200zd9168596065\u0026rcb=19\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616985~115938466~115938468\u0026z=1928702717 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-20T01:50:34.224519Z","times_seen":955412,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":89,"dns":38,"connect":24,"send":0,"wait":35,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/images/icons/icon-logo-youtube.svg","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /images/icons/icon-logo-youtube.svg HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.4shared.com/css/headerAndFooterResponsive.4min.css?ver=768287826\r\nCookie: day1host=h\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:44 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\netag: W/\"2f1\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d332c0f8ceef11dec379a554c99bbf75","sha1":"8602bef63f8a4a4766cb489b8469f03350efea7d","sha256":"db60567818225998461f0cfc029ffee7d0071c7b94eeecb8c276654379e0d0d1","sha512":"15c493baa458256ddaaac49cffb8a57c521bbc2d746368129789f21ec8425cdb9edb6c3d71157160ec0ae2ddfecf51e07163e43a1b7afa1dac0ee64b73fb0419","ssdeep":"","tlshash":"6e01d5d795acf1c14147cbf0c93b4156355718f62a8c9a8d42f51d90f80485a9c88e99","first_seen":"2026-05-12T17:11:02.231563Z","last_seen":"2026-05-28T19:36:01.529579Z","times_seen":4,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.4shared.com/js/account/AccountFacade.4min.js?ver=-1421559949","fqdn":"static.4shared.com","domain":"4shared.com","tld":"com"},"ip":{"addr":"204.155.146.95","port":443,"asn":40824,"as":"WZ-US-40824","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:42.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.4shared.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Fri, 13 Jun 2025 23:12:35 GMT","end":"Wed, 15 Jul 2026 23:12:35 GMT"},"fingerprint":{"sha1":"DD:25:B6:B3:B7:9D:0B:E1:B6:91:17:AE:A5:F7:A1:B5:D9:3F:E5:33","sha256":"02:23:27:73:0B:1B:A6:46:38:1C:06:36:87:76:6D:F7:BD:CF:E0:91:C6:BC:4D:C0:D8:63:68:84:9A:32:A5:B7"}}},"request":{"raw":"GET /js/account/AccountFacade.4min.js?ver=-1421559949 HTTP/1.1\r\nHost: static.4shared.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.4shared.com/\r\nCookie: day1host=h\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 25 May 2026 08:36:43 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\netag: W/\"517c\"\r\ncache-control: max-age=31536000, public\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20860), with no line terminators","md5":"c37908708660d0825e20cfd5a27aafb6","sha1":"83475ebcd7adb018950d563e04e10b178c5e882b","sha256":"34bb93993792c4f60f350c7845e77da3facbdce6aabd29f012ae5762eef08d82","sha512":"48b369cca385bdd87c145285cd296c97c80dc039096007be5f413cb992fcefaa09491a1d0be0e9dd516f16fa3ea1d9709a79c35d5685e167d54f36d271b9c151","ssdeep":"384:H0yUJdIlHWAs6bCpsTi2iOFtDfg5SHejiaiBi52D+oxj0ii6sm6ixqlRQNx3MNF8:pN7WjOFtDfg5rjivk52D+oxjXrklyNxH","tlshash":"cc92b64a730416669ba934a4317f245fa295ceb38e44cc5d51c8fbad28f49f004ffe6a","first_seen":"2025-02-11T06:39:25.312126Z","last_seen":"2026-05-26T10:25:12.379829Z","times_seen":11,"resource_available":true,"data":null}},"time_used":1000,"timings":{"blocked":-1,"dns":147,"connect":122,"send":0,"wait":474,"receive":0,"ssl":255},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.4shared.com/folder/Krb2-tLj/_online.html","date":"2026-05-25T08:36:44.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.4shared.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:48:25 GMT\r\nexpires: Sun, 23 May 2027 14:48:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 150499\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-20T01:51:12.234287Z","times_seen":194268,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":99,"dns":11,"connect":7,"send":0,"wait":8,"receive":10,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}