{"report_id":"ec59cf03-52b7-4e13-baeb-5a10e0d77e93","version":0,"status":"done","tags":[],"date":"2026-09-16T19:19:22Z","url":{"schema":"http","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"title":"Checkout","dom":{"size":27994,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11709)","md5":"d39a1f3ed5b5be9f1e3115143f995418","sha1":"d34dc09e9e2ffa0eeadf581c4ce8a9445e420a2e","sha256":"660a501771623d849639073ee4668a35b48ea54eb1e510e0c8c7fc65a7b00f0e","sha512":"7aa2080dd684511b546889ef4240d2fdfcd054ca13a566edf356b66bcf9960a3b38578f02cdf03c40aef7fd9bf4adbf61daa8d5edaad5544ccb82aa173fe52d8","ssdeep":"768:9quH18FlmtERCqE6JS3f5NGqcQqcsqc/NNyr1l1E1B1h1P1I1f1U1b1+1f2h7tf5:D18eEVJS3f5NGq/qpqMg1l1E1B1h1P1h","tlshash":"eec2b8967912ec2ed5174e9d727eaf3911d8d22bc5278a34b2ecc1091f89cf95bc26c0","dom_hash":"domhash92e96525ba71e5043e1a3af4ca9d73f2","first_seen":"2026-09-16T18:58:16.345289Z","last_seen":"2026-09-16T19:19:25.073255Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":0,"asn":202412,"as":"Omegatech LTD","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-21T19:19:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"relaysession.com","ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"domain_registered":"2026-04-07","domain_rank":0,"first_seen":"2026-06-11T14:43:27.481906Z","last_seen":"2026-09-16T18:58:15.53456Z","alert_count":100,"request_count":20,"received_data":819133,"sent_data":10081,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"59b2fca46b9f55f1984461025347cddb","sha1":"bc331ca95a160ed3d218f518ebfbc56c8cbb336f","sha256":"cdc2c86c93fade903e8c34ca3b3f57b05fd2d08c1229b04954438c0fd4ca8cfb","sha512":"27e4d2f49fc04ce4b9bbf682be9523d24a0201a8484ce99d9cb91c91d3b07da49a21d2d6c198f0961761475d8dd0d4b29868b0cfddb69bf1f28ad8c54ee69d89","ssdeep":"","tlshash":"d11166b2c7220c225848504d1e6b42682070a12b190faf057b2ff64c5f8d62e81f21e9","size":897,"data":"","first_seen":"2026-07-21T05:41:52.499943Z","last_seen":"2026-09-16T19:19:25.084797Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-09-16T20:50:51.013479Z","times_seen":262436,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"430fead7a2cb813e76cf11db1e784344","sha1":"ad26eff69739414fd4eb127b4d1111d9a967c479","sha256":"39de5eaa25b260f35e6cf2d366e92d4a2ac58f1a19c3d02c57e3d6f2e90c58b9","sha512":"adde715bc50e26c706084489a745724290edce183c5a5b9dff72be5452c9416f8570e0bd2720a2115544a6b1d657e4fb5513a162f3594b6e716dd2c92d8a7db0","ssdeep":"","tlshash":"5d315d0afd2bfd546c30cdaf852f0f36aed4ed3280701169b28dca9c45128b7078e8a4","size":1859,"data":"","first_seen":"2026-09-16T18:58:16.383513Z","last_seen":"2026-09-16T19:19:25.086034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"5176f0fc0282a85acd7882f23a7ffde8","sha1":"af41b4cbb97364cad2be50f69d49f3b487533b0f","sha256":"89473655d5a74123d7db4cd46fbd02337b66160701bf1e5b06235b4e163d1856","sha512":"be09fca6c7e13dd37a4bb0df3a458f42424c28a7fe23c04be658fe2d352ddb413110cdc262433db0cd0006b735588d663c187bae815531785eed71ff52d9d3fe","ssdeep":"","tlshash":"7741c61e6c05de46dc7e3db9023e9d3a14cccd7b8650def8819ece181a469b627d98c0","size":1898,"data":"","first_seen":"2026-09-16T18:58:16.384707Z","last_seen":"2026-09-16T19:19:25.08671Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7e764f61c42d17cea3686dd4f996eeb9","sha1":"1013f57d6623f4c14bc9c91cf59cdba6787edfa4","sha256":"99ce188ad351b2218c921e7b274df439e3760ed89fffd7cf6dd0524f7fd0ad0d","sha512":"ab0798e858e0014464842b6b5aebe4ec008429a729bcf0e600471b24a1cec4831801949db6e181ca8341a02255e5c16e74b9ec8d5680a90075d064dc23111717","ssdeep":"","tlshash":"3e317be65519ccb5d74a2d2928fb1c3514f4b1dc01a6fb35fa2eea0e034ca3c59d1ad0","size":1527,"data":"","first_seen":"2026-09-16T18:58:16.385946Z","last_seen":"2026-09-16T19:19:25.087296Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"04e13f157ed1cf2a1bfb2a7e7bc75578","sha1":"ed9c83aeff92142ac65eeb51a0432be8696e43ed","sha256":"d8489181d33c5a9c891369c7786b7f7c2a450c8089c5974c583509273dbcede9","sha512":"cf07e4aa0c5661e52d447544ddc84431f37e4ec83d31a74e40c9b3681c03cc4267b228c0e6e2d37c5e7a9e3656c27c7833f32b51125092fb9162434d8fe82955","ssdeep":"96:LZNaA8FubONwHzvCY8F/nU07Gs8EMUwIMvpgMo2KrugNz:foFubONwHbCY4/nEAUZqug5","tlshash":"fc91014ef915d44ecad60f1f3a7e7c3327e08a2a075311794ca9c2180697df5aae76c1","size":4573,"data":"","first_seen":"2026-09-16T18:58:16.386961Z","last_seen":"2026-09-16T19:19:25.087973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":true,"md5":"1b81322353215afe82f29aa087f74821","sha1":"6d8b5d8c1e0ce484a686438a78c49efb4f99dc72","sha256":"7fcb11e17b91e18de17a91aa32242b1aa0021fe71a57c0287bde49a66b732d05","sha512":"1dc26f32720da8fcc12b4ee176a2c81c8de959bf43d9c47fdc63273247c60478aae697b29ffeee42a57a84a2644cbcfb0596f3d3bdae2939acbbbaf740164ee8","ssdeep":"","tlshash":"d431db5d3412dd6eeb8a2d54213e6c3d40dee76a4985deb1c298cd1082a24fc6783bc0","size":1532,"data":"","first_seen":"2026-09-16T18:58:16.387881Z","last_seen":"2026-09-16T19:19:25.088596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/turbopack-025xglzrdeefu.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0399569fc8a1cb5cf1465130571720e1","sha1":"5953549f28a6e179a7be60e2f4ac0a3879c6076d","sha256":"27c704fed15c45f2874de36ffa1bd1ff4a0366e4fd04cf6cccb1d6e984f8c4c8","sha512":"df777b187743f1e42b0e6bff16cb5a666e97758a4c7a698619bd3694f3b5ac8392dcfb0a382f2be8bb33b06cc2aa29b22f9e01ff5e4d952e14ac2937cd805176","ssdeep":"192:14gM9BC8nEsgdLUEGOheYG/lO4jTNWn+S3sBT4fCT3cXXqroor2:14gM9tQg/lrW+ssqCTMKA","tlshash":"6a22c8da37a6f07343af90e7906f4004f17984a9145d541cd3aca8eb2c394ae85e7f76","size":10580,"data":"","first_seen":"2026-04-11T11:50:17.64415Z","last_seen":"2026-09-16T19:19:25.080552Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0_b~x.6tnok...js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"e65bcef28863f0d239038919e2e6e2f7","sha1":"717493888e7524bc285a7ecf735f74663ab7af6b","sha256":"6f8a314eb5b954968fbbac836c9d912749db226e2670bce62a43011b2646d724","sha512":"4056be2ddfcda58c4bd9c924b1daab4360ef321ba1aa8bd5ee60a801c7c0928868cdb2fb1b98b54dfaa7638be758c30528faafb415fe9f87904a3c58ab9486d1","ssdeep":"","tlshash":"f47164c9b2e2f8bb83675091403f205bf27e0ce1481e9594e7a564ebb96065d81f2f68","size":3551,"data":"","first_seen":"2026-05-09T23:27:51.106594Z","last_seen":"2026-09-16T19:19:25.082706Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0pqt~8bl3ukh4.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"c621d697f789f9a625e80384da50359c","sha1":"21b6e9613cc917a5fa984be427364d03e5757cbc","sha256":"5261101892e2476e4346e19e86fd5f19cbcf7c765ff76e92eb9cefcc86b6db6a","sha512":"59a0ad4d3270e18ccc1178b7a1c8902793a70e88a518f01ce894d1d3335251953289630dcaa26b4c6d9a3b6bb5563b8845d5fabfc521878c382c7d2a56957ffa","ssdeep":"384:p7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:BN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"4513e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9f754d88da6befa5","size":44414,"data":"","first_seen":"2026-03-18T18:55:57.705164Z","last_seen":"2026-09-16T19:19:25.082211Z","times_seen":15275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/03~lfzrwmtqyt.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c8f1b7bbc5a8c183182bee7146a27a8","sha1":"1706063bdd672663e6a39a241cf68b0270a16578","sha256":"74ff936456476a765be99d009316c32e141378b3d1207d656822b5ca7514f7cb","sha512":"f35c6417a56307ffee296bf7ba7612c686c22e96853356711403654fa27c8f13d146c39c9cf5974f40d9ff6b746a3aa5b0115f6d1e1afa62aa53e930c95982bb","ssdeep":"768:RH5xBQvoQyQT7THGSuS0DkUKg+qRENuq5l+x:RaR3PqWY","tlshash":"51d27345b151beacf52b0ad8a22fd44ca22e7b59cd5fc874b6bc28112f444e83b53bc5","size":29654,"data":"","first_seen":"2026-09-16T18:58:16.367396Z","last_seen":"2026-09-16T19:19:25.083853Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","size":54646,"data":"","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-16T19:19:25.083352Z","times_seen":16733,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0gscbv2oo_ix7.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"af74401786b2944bec3b130bf4f1c588","sha1":"0108b48542a3e22974050c5cb4414ab55c43c8e2","sha256":"2493f8c663e9e72e38b0836962e5b0ccadbcb9f7205c4436441e2536f323fcac","sha512":"59b307529d9fe7078612d4f1870e1b02baec34d73315e690eefc6f116553f1fd27e8b26e59385dfdefc88a909c8afbfc63d6d7e1c3dc9f64af910b5b7526d367","ssdeep":"384:5+yy8JQrtg6KaFpg5UG2er6eJ2p1cHBYjYvK4MjBRxOM+kYLoO8NfwE6kUd2cNJu:5+FncHBqn4MjYM+PoTH6kUdJHR+zt","tlshash":"a3e2d6a571d5f49117a354a8803f100bf23d1c7a296cb4b0a3e2ccea79a059de533fda","size":32497,"data":"","first_seen":"2026-03-25T22:01:16.132032Z","last_seen":"2026-09-16T19:19:25.079447Z","times_seen":195,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/17cpjww0~eyv6.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"554e74c6a9e20fbe59784c8389880415","sha1":"6fc11566a456cba82d682a492151da4b1839214b","sha256":"bfdbe0996165cd5905e033d995722199ee117c880bb6ed9a92a1fd394d611bbf","sha512":"303845a49f020c164ba2a3b3758a6fe3b32938669fd085ca0a085d5cce992bc9bde5d4d90294df24f41f29c15c407ac87099a22e65452911222737cbc0049a0a","ssdeep":"768:hguLhHJNPkOsCH71yZdATNEzzZLKm+lmf0m0at3v5aCMOLnKaBtl5N2afBi7FW48:hlLhHJNPkOsMIMTziX3v5aCMYJsFW0uD","tlshash":"fe03b461a28131260e8353da14290309afbe79b4178c545fb76c5ee72d52cca4bbeff1","size":39770,"data":"","first_seen":"2026-07-21T05:41:52.498768Z","last_seen":"2026-09-16T19:19:25.081042Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0bogtdbh.dcu1.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"73551c8c5dfd5a1d5348f3fe6b9cf120","sha1":"5a8899b602455f2eb47f93689f08744ffddaa987","sha256":"92a7b5909e8576a3744c0ddb933f5844dbb907f11ed87ea01d6a988349752e85","sha512":"9da27d7c285cd9bb18ab1fc73784fe4ecceacfbb91506b16d6ee67c06b4f429a33ce11d4fd3e5955aecf6461906323c8928714e70ebd394def0d32a1f387d08e","ssdeep":"3072:hFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:hFLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"6b24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227537,"data":"","first_seen":"2026-04-01T13:08:39.495899Z","last_seen":"2026-09-16T19:19:25.076107Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0e-wrhqh4h3r5.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2b948c38709ec123e4b532b853d9a60","sha1":"b6c7bbdf533d9e6949f6010ea0895c8c1adddc8b","sha256":"3ed1f4eefaa8cb71b85ef1a3847204d4bbb7668871602877d2c6867b1b79910c","sha512":"1e1c487d98148a71fa8a14d1539aecfb8e990bff1d8a075193008523add78693eae3113a2b48aba5c9a1bb0524178aed8e06df6024e2e81799657c1f77a7b68e","ssdeep":"3072:awCwD5IY3pHnoOcyNA4tuXgSFbwZHS75B:awCwD5IY3pHoOcGAqWgZZHyB","tlshash":"b1d3e7f935d1f4820bab50a6c03f0006f22c4d77189e6860e3e5ddda756465de1b3faa","size":140798,"data":"","first_seen":"2026-03-22T12:28:35.128875Z","last_seen":"2026-09-16T19:19:25.079998Z","times_seen":784,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"relaysession.com/_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.893Z","timestamp":1789586331893,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2 HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/_next/static/chunks/089j75p2le2eq.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:52 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 24576\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"6000-1a0a9d543c8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24576,"size_decoded":24875,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-09-16T20:45:24.059211Z","times_seen":12350,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:52.064Z","timestamp":1789586332064,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nCookie: locale=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:52 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25931,"size_decoded":26248,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-09-16T20:44:07.610704Z","times_seen":46050,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0bogtdbh.dcu1.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.568Z","timestamp":1789586331568,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/0bogtdbh.dcu1.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"378d1-1a0a9d543ca\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227537,"size_decoded":71391,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"73551c8c5dfd5a1d5348f3fe6b9cf120","sha1":"5a8899b602455f2eb47f93689f08744ffddaa987","sha256":"92a7b5909e8576a3744c0ddb933f5844dbb907f11ed87ea01d6a988349752e85","sha512":"9da27d7c285cd9bb18ab1fc73784fe4ecceacfbb91506b16d6ee67c06b4f429a33ce11d4fd3e5955aecf6461906323c8928714e70ebd394def0d32a1f387d08e","ssdeep":"3072:hFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwdH++z:hFLtKOfGWYpyI9vGzD58nwdH++z","tlshash":"6b24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-04-01T13:08:39.495899Z","last_seen":"2026-09-16T19:19:25.076107Z","times_seen":273,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":192,"receive":99,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:52.125Z","timestamp":1789586332125,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2 HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://relaysession.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: locale=en\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:52 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 24576\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"6000-1a0a9d543c8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24576,"size_decoded":24875,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-09-16T20:45:24.059211Z","times_seen":12350,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/?_rsc=p37cr","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:52.190Z","timestamp":1789586332190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /?_rsc=p37cr HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://relaysession.com/\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /\r\nnext-router-prefetch: 1\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:52 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1259,"size_decoded":1098,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (392)","md5":"52c3faf61cab0927e86b88f5bb083ab8","sha1":"db04641e2013a7d71b0c95f481ce54d3ffd8bf80","sha256":"61e54b69e2262e75478f81b3bfd5df1de06ada381697957555216bb3366e80f8","sha512":"16762288451289bc73cd892c9f8806699aaa3bc5bd2c4b48b0f1dd6da8a1879d1d6173d938ffaa8714ed2290808136ccca18b5d39cf8ec5e009621417b6e1b6e","ssdeep":"","tlshash":"f421e0368e01fc5b6eb6888c445fa7266b9d8b3756741ca5c18e8d2c078a07b0f8a1e0","first_seen":"2026-09-16T19:19:25.076858Z","last_seen":"2026-09-16T19:19:25.076858Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.562Z","timestamp":1789586331562,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2 HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://relaysession.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 24576\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"6000-1a0a9d543c8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24576,"size_decoded":24875,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-09-16T20:45:24.059211Z","times_seen":12350,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/favicon.ico?favicon.0x3dzn~oxb6tn.ico","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:52.066Z","timestamp":1789586332066,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /favicon.ico?favicon.0x3dzn~oxb6tn.ico HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nCookie: locale=en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:52 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-nextjs-cache: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25931,"size_decoded":26248,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"c30c7d42707a47a3f4591831641e50dc","sha1":"9ecfcc8f0ead0bf3d2d7c39e084b88f41cc89a2e","sha256":"2b8ad2d33455a8f736fc3a8ebf8f0bdea8848ad4c0db48a2833bd0f9cd775932","sha512":"7053e0f76e92179fb5154e2665d81897736bdcc22b002b0a3f8e212f27ef80f56224adaa09972848a20c66b064d16eafa732140461071ad70b6193c33dd517e0","ssdeep":"384:ryveIpvjGAUdJ/RN0d2q3OTirIDpXofYPj68Xg5RNy7yyTLb4v0:bIAJdhwYqZ8pYYPjSy7j3j","tlshash":"11c28e9b2b7e2015c908257641aeddfb011b5d4b28b4a20025fa3eb7b4b3735091fa7f","first_seen":"2023-04-30T22:57:19Z","last_seen":"2026-09-16T20:44:07.610704Z","times_seen":46050,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/privacy?_rsc=1r34m","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:52.188Z","timestamp":1789586332188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /privacy?_rsc=1r34m HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://relaysession.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:52 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190,"size_decoded":528,"mime_type":"text/x-component","magic":"ASCII text","md5":"454ee91c0b9291a6164321d7662cbe81","sha1":"b9a19d42515f37553e9bd3660f824a5404181c5f","sha256":"e04c535032a18a053a2f404e4a2a05311c9a961d4dc8d21d9c631e7fe8d083d6","sha512":"0c5a6313caa6ce0f221f37914c55a52f5d0a7b2e49c699eb2b781e3baf3d9cf5fe524b6622f9fbc4931eb7fe56de3863f89ba552628d7176448963770d4c960b","ssdeep":"","tlshash":"cfc0122b4545197a08be10d1d03ea8572a4d993717d86cf0c0911d2a7bf717157d31d6","first_seen":"2026-09-16T18:58:16.347465Z","last_seen":"2026-09-16T19:19:25.078071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/089j75p2le2eq.css","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.564Z","timestamp":1789586331564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/089j75p2le2eq.css HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"b1ce-1a0a9d543cb\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45518,"size_decoded":8578,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (38862)","md5":"ec794ebc0d83278690c376d65259fd63","sha1":"bc3f90a75d1e373c685c473948722ebeb2c33336","sha256":"c2569c8a50c7e26281234b18ddf3fcc671a9b84207ce3382f6b8426dc9e99b3f","sha512":"7b7ce26b9f4a8e264c34d0b7b01a6e9fccca2e2d1ab0f47a18be0a311831691fd4ec9ac5ead84ccf422e9112b8cc55ff94ce68b3944e359ea1c4cb788000571a","ssdeep":"768:iGilfwq7GtwJhRkqMP8UfvmQ3p5Cz6FfpLk3jsTrAnbs0:iRlfwLwJhRkqMP8Ufvmb8f/Anbs0","tlshash":"d813c820f21ac83bfd2398f5b6ecbc8c751d6164ce65a7e9f91136025bc72f21a52b14","first_seen":"2026-09-16T18:58:16.371127Z","last_seen":"2026-09-16T19:19:25.078761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":95,"send":0,"wait":99,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0gscbv2oo_ix7.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.565Z","timestamp":1789586331565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/0gscbv2oo_ix7.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"7ef1-1a0a9d543cb\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32497,"size_decoded":9752,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29063)","md5":"af74401786b2944bec3b130bf4f1c588","sha1":"0108b48542a3e22974050c5cb4414ab55c43c8e2","sha256":"2493f8c663e9e72e38b0836962e5b0ccadbcb9f7205c4436441e2536f323fcac","sha512":"59b307529d9fe7078612d4f1870e1b02baec34d73315e690eefc6f116553f1fd27e8b26e59385dfdefc88a909c8afbfc63d6d7e1c3dc9f64af910b5b7526d367","ssdeep":"384:5+yy8JQrtg6KaFpg5UG2er6eJ2p1cHBYjYvK4MjBRxOM+kYLoO8NfwE6kUd2cNJu:5+FncHBqn4MjYM+PoTH6kUdJHR+zt","tlshash":"a3e2d6a571d5f49117a354a8803f100bf23d1c7a296cb4b0a3e2ccea79a059de533fda","first_seen":"2026-03-25T22:01:16.132032Z","last_seen":"2026-09-16T19:19:25.079447Z","times_seen":195,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":95,"send":0,"wait":99,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0e-wrhqh4h3r5.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.570Z","timestamp":1789586331570,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/0e-wrhqh4h3r5.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"225fe-1a0a9d543c6\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":140798,"size_decoded":38754,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d2b948c38709ec123e4b532b853d9a60","sha1":"b6c7bbdf533d9e6949f6010ea0895c8c1adddc8b","sha256":"3ed1f4eefaa8cb71b85ef1a3847204d4bbb7668871602877d2c6867b1b79910c","sha512":"1e1c487d98148a71fa8a14d1539aecfb8e990bff1d8a075193008523add78693eae3113a2b48aba5c9a1bb0524178aed8e06df6024e2e81799657c1f77a7b68e","ssdeep":"3072:awCwD5IY3pHnoOcyNA4tuXgSFbwZHS75B:awCwD5IY3pHoOcGAqWgZZHyB","tlshash":"b1d3e7f935d1f4820bab50a6c03f0006f22c4d77189e6860e3e5ddda756465de1b3faa","first_seen":"2026-03-22T12:28:35.128875Z","last_seen":"2026-09-16T19:19:25.079998Z","times_seen":784,"resource_available":true,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":195,"receive":93,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/turbopack-025xglzrdeefu.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.574Z","timestamp":1789586331574,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-025xglzrdeefu.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"2954-1a0a9d543c8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10580,"size_decoded":4523,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10580), with no line terminators","md5":"0399569fc8a1cb5cf1465130571720e1","sha1":"5953549f28a6e179a7be60e2f4ac0a3879c6076d","sha256":"27c704fed15c45f2874de36ffa1bd1ff4a0366e4fd04cf6cccb1d6e984f8c4c8","sha512":"df777b187743f1e42b0e6bff16cb5a666e97758a4c7a698619bd3694f3b5ac8392dcfb0a382f2be8bb33b06cc2aa29b22f9e01ff5e4d952e14ac2937cd805176","ssdeep":"192:14gM9BC8nEsgdLUEGOheYG/lO4jTNWn+S3sBT4fCT3cXXqroor2:14gM9tQg/lrW+ssqCTMKA","tlshash":"6a22c8da37a6f07343af90e7906f4004f17984a9145d541cd3aca8eb2c394ae85e7f76","first_seen":"2026-04-11T11:50:17.64415Z","last_seen":"2026-09-16T19:19:25.080552Z","times_seen":10,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/17cpjww0~eyv6.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.578Z","timestamp":1789586331578,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/17cpjww0~eyv6.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"9b5a-1a0a9d543ca\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39770,"size_decoded":12425,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30777)","md5":"554e74c6a9e20fbe59784c8389880415","sha1":"6fc11566a456cba82d682a492151da4b1839214b","sha256":"bfdbe0996165cd5905e033d995722199ee117c880bb6ed9a92a1fd394d611bbf","sha512":"303845a49f020c164ba2a3b3758a6fe3b32938669fd085ca0a085d5cce992bc9bde5d4d90294df24f41f29c15c407ac87099a22e65452911222737cbc0049a0a","ssdeep":"768:hguLhHJNPkOsCH71yZdATNEzzZLKm+lmf0m0at3v5aCMOLnKaBtl5N2afBi7FW48:hlLhHJNPkOsMIMTziX3v5aCMYJsFW0uD","tlshash":"fe03b461a28131260e8353da14290309afbe79b4178c545fb76c5ee72d52cca4bbeff1","first_seen":"2026-07-21T05:41:52.498768Z","last_seen":"2026-09-16T19:19:25.081042Z","times_seen":20,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/terms?_rsc=1r34m","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:52.186Z","timestamp":1789586332186,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /terms?_rsc=1r34m HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://relaysession.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: locale=en\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:52 GMT\r\nContent-Type: text/x-component\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190,"size_decoded":528,"mime_type":"text/x-component","magic":"ASCII text","md5":"454ee91c0b9291a6164321d7662cbe81","sha1":"b9a19d42515f37553e9bd3660f824a5404181c5f","sha256":"e04c535032a18a053a2f404e4a2a05311c9a961d4dc8d21d9c631e7fe8d083d6","sha512":"0c5a6313caa6ce0f221f37914c55a52f5d0a7b2e49c699eb2b781e3baf3d9cf5fe524b6622f9fbc4931eb7fe56de3863f89ba552628d7176448963770d4c960b","ssdeep":"","tlshash":"cfc0122b4545197a08be10d1d03ea8572a4d993717d86cf0c0911d2a7bf717157d31d6","first_seen":"2026-09-16T18:58:16.347465Z","last_seen":"2026-09-16T19:19:25.078071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-16T19:18:50.868Z","timestamp":1789586330868,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\"\r\nX-Powered-By: Next.js\r\nCache-Control: private, no-cache, no-store, max-age=0, must-revalidate\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":31144,"size_decoded":9278,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11636)","md5":"c7444a8c01ec5f7c1184a2e6624c3271","sha1":"d15ac6d30fa526e1fa089297f0ef95b81454f5d3","sha256":"ece1f0dc652164d28b0bb85d387ff04c6fae85ab374e526ec96fe28f1a1c03e9","sha512":"e9943eefca4d75afb2f12fd19702df0d75441170e8b4cd984fde9d8630ae92f1ba1ba65833f9644815571794b38a6be45cd9e7778d9aa7b10787c5f9c9a09dd4","ssdeep":"768:LVOm1ek7mtERCqEEv83fhzqcCcZcMNNyr1l1E1B1h1P1I1f1U1b1+1f2h7tfoO:b1nSEZv83ftqdkHg1l1E1B1h1P1I1f1k","tlshash":"fbe2c7a57912ec2e96170f9d727eaf3d11edd21bc9178924b2acc1091fc9cf95b826c0","first_seen":"2026-09-16T18:58:16.351734Z","last_seen":"2026-09-16T19:19:25.081593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":12,"connect":95,"send":0,"wait":106,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0pqt~8bl3ukh4.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.567Z","timestamp":1789586331567,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/0pqt~8bl3ukh4.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"ad7e-1a0a9d543ca\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44414,"size_decoded":9614,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24405)","md5":"c621d697f789f9a625e80384da50359c","sha1":"21b6e9613cc917a5fa984be427364d03e5757cbc","sha256":"5261101892e2476e4346e19e86fd5f19cbcf7c765ff76e92eb9cefcc86b6db6a","sha512":"59a0ad4d3270e18ccc1178b7a1c8902793a70e88a518f01ce894d1d3335251953289630dcaa26b4c6d9a3b6bb5563b8845d5fabfc521878c382c7d2a56957ffa","ssdeep":"384:p7/A2dkTd93jBT0diRTRIpowbIBqjac/s+rPYjDExpCkKMny1V0U5+wQhKHAlwe4:BN8pcowkpc/s+zYXExp7ly1V0UVD","tlshash":"4513e7b132d4faa3539341e0e43f2016f2780d7520ad6470a7e89c9f754d88da6befa5","first_seen":"2026-03-18T18:55:57.705164Z","last_seen":"2026-09-16T19:19:25.082211Z","times_seen":15275,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":94,"send":0,"wait":100,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0_b~x.6tnok...js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.575Z","timestamp":1789586331575,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/0_b~x.6tnok...js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"ddf-1a0a9d543c8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3551,"size_decoded":1922,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3551), with no line terminators","md5":"e65bcef28863f0d239038919e2e6e2f7","sha1":"717493888e7524bc285a7ecf735f74663ab7af6b","sha256":"6f8a314eb5b954968fbbac836c9d912749db226e2670bce62a43011b2646d724","sha512":"4056be2ddfcda58c4bd9c924b1daab4360ef321ba1aa8bd5ee60a801c7c0928868cdb2fb1b98b54dfaa7638be758c30528faafb415fe9f87904a3c58ab9486d1","ssdeep":"","tlshash":"f47164c9b2e2f8bb83675091403f205bf27e0ce1481e9594e7a564ebb96065d81f2f68","first_seen":"2026-05-09T23:27:51.106594Z","last_seen":"2026-09-16T19:19:25.082706Z","times_seen":28,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/0d3shmwh5_nmn.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.577Z","timestamp":1789586331577,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/0d3shmwh5_nmn.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"d576-1a0a9d543c7\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54646,"size_decoded":13253,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644), with no line terminators","md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-16T19:19:25.083352Z","times_seen":16733,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/chunks/03~lfzrwmtqyt.js","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.579Z","timestamp":1789586331579,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/chunks/03~lfzrwmtqyt.js HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"73d6-1a0a9d543c8\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29654,"size_decoded":8168,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15916)","md5":"0c8f1b7bbc5a8c183182bee7146a27a8","sha1":"1706063bdd672663e6a39a241cf68b0270a16578","sha256":"74ff936456476a765be99d009316c32e141378b3d1207d656822b5ca7514f7cb","sha512":"f35c6417a56307ffee296bf7ba7612c686c22e96853356711403654fa27c8f13d146c39c9cf5974f40d9ff6b746a3aa5b0115f6d1e1afa62aa53e930c95982bb","ssdeep":"768:RH5xBQvoQyQT7THGSuS0DkUKg+qRENuq5l+x:RaR3PqWY","tlshash":"51d27345b151beacf52b0ad8a22fd44ca22e7b59cd5fc874b6bc28112f444e83b53bc5","first_seen":"2026-09-16T18:58:16.367396Z","last_seen":"2026-09-16T19:19:25.083853Z","times_seen":2,"resource_available":true,"data":null}},"time_used":376,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"relaysession.com/_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2","fqdn":"relaysession.com","domain":"relaysession.com","tld":"com"},"ip":{"addr":"91.92.241.145","port":443,"asn":0,"as":"","country":"Bulgaria","country_code":"BG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://relaysession.com/","date":"2026-09-16T19:18:51.891Z","timestamp":1789586331891,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"relaysession.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 07 Aug 2026 17:23:34 GMT","end":"Thu, 05 Nov 2026 17:23:33 GMT"},"fingerprint":{"sha1":"17:8C:4C:51:9A:E0:F4:12:29:00:36:32:67:94:24:01:0D:F7:D4:74","sha256":"33:5A:E9:BB:EF:D1:5F:AB:8A:CC:0B:C9:50:EA:E1:5A:FE:A3:4D:3F:5F:21:68:EE:1F:33:18:32:17:6E:D3:7A"}}},"request":{"raw":"GET /_next/static/media/a343f882a40d2cc9-s.p.0kho-wj7-y-w1.woff2 HTTP/1.1\r\nHost: relaysession.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://relaysession.com/_next/static/chunks/089j75p2le2eq.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.14.1\r\nDate: Wed, 16 Sep 2026 19:18:51 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 24576\r\nConnection: keep-alive\r\nCache-Control: public, max-age=31536000, immutable\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 16 Sep 2026 10:48:41 GMT\r\nETag: W/\"6000-1a0a9d543c8\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24576,"size_decoded":24875,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24576, version 1.0","md5":"101877a7a906c31436104fe33740ae44","sha1":"c8eafee863a53185ebfdad8cf43056163f8f14fd","sha256":"e310b55a7fd9677f5e3555e6c6c4d064fa1f1d24393f0ddbe217cea12a8c432f","sha512":"ddb63e29dc53744f580d5e7987fff58f15d21d7d309e7593f149b0e1b9441110634f65e18030063222ec453c87eb02c97911d04cd5583c24b97b865cea56c7a3","ssdeep":"384:pOYaf2PiYb+yo0SbnfthCinsB60rF8fiGI7aU+4LfLqb4ZKoml+tEr+JHVaM9SWb:85f2PrdwnVhCGsB62FgiGW7+mfmbkhsM","tlshash":"15b2e170b7a6b321e544b95b1de900f318c30621649ad3547f99b53ab72ff223a08d0f","first_seen":"2025-06-12T03:10:47.909544Z","last_seen":"2026-09-16T20:45:24.059211Z","times_seen":12350,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":54,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-16","alert":"Phishing Block","trigger":"relaysession.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-16","alert":"Sinkholed","trigger":"relaysession.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}