{"report_id":"ee6a0e71-c47c-44bb-9194-792fc19694e5","version":6,"status":"done","tags":[],"date":"2025-12-19T05:58:45Z","url":{"schema":"http","addr":"deudafix.pro/","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"final":{"url":{"schema":"https","addr":"deudafix.pro/","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"title":"Deudafix - Cancela el 100% de tus Deudas por Ley","dom":{"size":121285,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17456)","md5":"89ce344c58dadf787cfb3e92d7f83a40","sha1":"05f5a1eae698d8d02b79c48f79e06ba55c99c6b3","sha256":"aadf8fc76533e3d9dc32ce2f4b669f24c4be684db3ccf2487e0639c86d2a301e","sha512":"ad96ea62aee70b63bba68fb0cd91850a0efbbb7c699051f1d85515c76408adf6ac881f59279cd693dc3007deb6a5a18c5cd55d1482f2c81ef18d465d4c409ff1","ssdeep":"1536:3uauRj3Xx/c64Jysq7vVqM4vpH8e3PwwwwCLxGpWHXSGZt9Mq7wwwww+wwwwStwL:c3vavj7GjH","tlshash":"6fc3e831360c396d691f9be8f7a1b72e622de190f92b906ca2bc117457c3d84ed679c0","dom_hash":"domhash83d8040d5138fb26b8cebf417b181ffb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"deudafix.pro/","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":0,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-23T05:58:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"deudafix.pro","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-12-19T05:58:47.325423Z","last_seen":"2025-12-19T05:58:47.325423Z","alert_count":16,"request_count":17,"received_data":905169,"sent_data":7816,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-14T22:17:32.87103Z","alert_count":0,"request_count":3,"received_data":1116045,"sent_data":1329,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-cookieyes.com","ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-22","domain_rank":9847,"first_seen":"2020-04-26T13:42:32Z","last_seen":"2025-12-15T01:20:40.463451Z","alert_count":0,"request_count":8,"received_data":101523,"sent_data":3742,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6acf28904537a4baa86a2c6e32875787","sha1":"4dcc311fa848ad615320f59c0e9ba87ae48d69c7","sha256":"e95416aa72be487952da0f5ca7b1f80960894e73120cec035718d3e4f459521c","sha512":"e462ebd5c6a889ef4a3a1fa45091442656ac6fa497ae9b4b79060c3173665150887650a4d81a5bb42db68f0b51eef74d237c1c27538b4619c7d50a20f7e308b3","ssdeep":"768:p1p7P9WErs/haRAu5V2CviGpcgA63tBG+B7cafRljjnTyo+R8Xc201stNN:ptcGA63tBFFsE","tlshash":"a2b2ea58b6e4b0b513d370b8603b550b73756929a445c0a4f268dcea6c7c9ce8637fbc","size":24647,"data":"","first_seen":"2025-12-19T05:58:55.516066Z","last_seen":"2025-12-19T05:58:55.516066Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d1b3083c94e1cc02a44ddfd03f99d72","sha1":"a9434e37c99bcda43d3e2b1b5a8ec65fa1ddad28","sha256":"ebb1874b5e701b94e15dccf3408b6beb9fa389dd53a2f15efac9388601cab8b1","sha512":"edb80b6354bec4949fd530c6aec72dc1222014d4dc78ef434d3bde8fc39acd0b43225e17fcb49881b9932b9732e54a8c04d07437b00b8286d94247fce63be374","ssdeep":"","tlshash":"76e0c0eb70521872619f85b633b5a1247153360d78091c33edfd88242e58587886669c","size":358,"data":"","first_seen":"2025-12-19T05:58:55.523324Z","last_seen":"2025-12-19T05:58:55.523324Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":true,"md5":"815f11a8c43935491624eb978e842244","sha1":"caf4d582298aec7c4da5f726435e0921fdf4462a","sha256":"ddee2ffac02bd4ecf31a4836deb37761fd309baf346e6054574d0fb666b2cf6d","sha512":"e2aac16119985007ae900a5e92daf479c13444bb5705775e4530d5d8cc7e86727cb667accdb607e1bc947f52e5b2fb65ee2af1cec1cbc7f74ff8458415e2351c","ssdeep":"","tlshash":"e4e0c0a51c096c131b7316b4127f930b344211062455db80f598d4403f1209b4026748","size":349,"data":"","first_seen":"2025-12-19T05:58:55.524101Z","last_seen":"2025-12-19T05:58:55.524101Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-M7G6PW5V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e09901900cd0cd2bee34a966b8d9c342","sha1":"f90fdf9f791c6cc4ad2cc39e80460a97765c7461","sha256":"7c30c9a480358d463b21048f696675740cb3c5fa1143cd10107c1879565c21d6","sha512":"bd39ba06304cda4525cfa0c6931acac9a0643cb905b3eb7f9fd4dc8465e704b13974c160dd657d55fde061bcad26ce718240b28a33bdca8e2f04600c4f1bcd90","ssdeep":"6144:aIeJK2bulKYXV1u99Yye5HDmHYmyBFz0ns87gWllV2bpRXJ:z4bu7l1mcAnsxWKpz","tlshash":"8b8419cdb3c6746a8392b478503f114ba17b6ad1f44cc895f186cce42e74aaa0267f7d","size":395081,"data":"","first_seen":"2025-12-19T05:58:55.522564Z","last_seen":"2025-12-19T05:58:55.522564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffac8d944f1f11e621f5d26710a8bf32","sha1":"0a68d32f19f76e42da1b3a417b46df01c786bd7b","sha256":"251cc3a164276cc915f09096229b4458937b895ea5e3f867b2183b5dab99159e","sha512":"2d92ec1e70b7303b27e813e28eea6321ce28cba8d6cae7cd4e776a271058b7e685f5bdcadb72d69b79d4bd733ccdca37ef0048cc870a14ba58c1463167523a56","ssdeep":"","tlshash":"7de061da1c154578579c01dad3fae7cc72f630a71140b152d1c9cc48360cfd74409aec","size":386,"data":"","first_seen":"2025-12-19T05:58:55.524935Z","last_seen":"2025-12-19T05:58:55.524935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/~flock.js","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-04-04T09:18:44.019507Z","times_seen":5575,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/index-CE5MrwXf.js","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cdf38bc4b87a1e15e7ef18227429176","sha1":"42e2bba896edeffe87f5c3b09dd0d58c42b5c980","sha256":"5ffec7410a663d128af259c882dd25ec0d43976a2c46b982167a02fb0c6b294f","sha512":"5b3b6c185f3dadfbad83bb70d0ba6f2c3b5bf535ba7a6c7cc2a429f765ca0329d973dd9332ac7a0677feee5a390696462e66ba8c5604e7f19f7cdb12b2f1305c","ssdeep":"6144:i94TuJoPebQT87t0klNlGKRERiYBObr6NHxSriUzC64Gjmhx3BoC4cNYq5PBAGVZ:XP1oRlNlGKZZbr6NHUuQYofcNY54d","tlshash":"61b47c847095b66a6fb706e1507f900bb23d1a15b41e84a0f02cdc7a36b8956b277ffc","size":501238,"data":"","first_seen":"2025-12-19T05:58:55.519691Z","last_seen":"2025-12-19T05:58:55.519691Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-693956694\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"531bbfee393ff2dd9e2b7e185f3f1b9a","sha1":"85a941ef54b42384cfad866f8edd75018a1e7cac","sha256":"5ac6d8a5d92546b2107742aef21ffe38fd6735d0d9cf67a8f5b54b13ad4b05ec","sha512":"1de2a7905bac0784c5a2466dca7163489333b5c9a6c6c4ac92eae3eb06280b0524884406065e167b2ae93d56d39bdac29678ace66d8b845d6cf352b2fad26918","ssdeep":"6144:NIeJ+2bulKYXV1u99Yye5HDmHYmyBFzfnsyRuLjmWllxep4pt:ucbu7l1mcDnsy6SWspK","tlshash":"328429cd73c674269396a478403f118ba57b29e2f44cc895f189cce42e74aaa4277f7c","size":390004,"data":"","first_seen":"2025-12-19T05:58:55.51128Z","last_seen":"2025-12-19T05:58:55.51128Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/banner.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a61eacae5b6b032c01fb1070fe66f23","sha1":"1540b57bc2c225e172431430c398975f5dafe633","sha256":"c5c82f9e485719646e236a80461397ba16cab0ed10a054cadd298a9663c7b2a7","sha512":"1f490b065ea2dadceaafba06c4ce19ff295170d0057f011237b179e26dc059830e39c859c172b1793e4815467b3c687c1a7da0d64b3b9c5f9bd52667275556f7","ssdeep":"384:tqdXeq3q/6dpB3HJdVqCLgT4RoLtwoX6KQiWpi0RcyHRxpKaqAoaEkDX7WTZCoYI:tYHk6b1HJdVq6gMR1okiWU8THZKylb52","tlshash":"04b20768b088f4fc63d112fa20b78316bb301d45780bd150ab1ca9692d65eeb7396f5f","size":24360,"data":"","first_seen":"2025-12-19T05:58:55.510202Z","last_seen":"2025-12-19T05:58:55.510202Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-15379358\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60aa0c6e78beb52a54605c237767379c","sha1":"c4533a7c7a9ceb0bc3f4fc1c4d2e7396d37a94da","sha256":"bf43b11409b9deefdd955432314294c369314fd4963639d83fd003bd4509b4f3","sha512":"6e1548a3d692d0e566778b02660442f5cb37e66c90423f1187141b19ac33266bf715f7abb5ba79fe9b1000b6d602751f91617471d9ed4dbffe67b6ad2c15ebe2","ssdeep":"6144:KIeJ92bulKYE1u99O5HDmHYmyBFzfns9RnWov2bypJQ7:jpbu7E1mYDnszW6pc","tlshash":"086407cdb3da74668393a478403f114ba17b6a91f84cc894f186cce42d74aaa4277f7d","size":329050,"data":"","first_seen":"2025-12-19T05:58:55.503844Z","last_seen":"2025-12-19T05:58:55.503844Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-3-CxKcxKze.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.968Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-3-CxKcxKze.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 35402\r\netag: \"e9aa7fd143fe2c4710f76e42b3743327\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b04aaffce495690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35402,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"e9aa7fd143fe2c4710f76e42b3743327","sha1":"996ea95e178773cd2c55f27b95ecde772b296d0d","sha256":"db83d7267b1102169c936454c26b16e5f8bd1280125c4cf293c6a9d6b4b7ff9e","sha512":"6ed53e02a69779e409664cc77e2290c341178ea08e4b918537fd74f962dc842dd28814d2ef34ef2228e750476f1d0d0e0eb1aaff76a133b0572e67bea58eade5","ssdeep":"768:GIBmWgoM7eLZ+g4jgUOZUz0Pos5gyALy0yX5K76HdzByb:G9jSVT4gk0P6hLRypKG9Byb","tlshash":"98f2e17bfe78f4c4c76a45b848e228ddb8baa7890de21db06cb431bae1d0db5541a141","first_seen":"2025-12-19T05:58:55.501279Z","last_seen":"2025-12-19T05:58:55.501279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/favicon.svg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"fb9cfa37079aa5436f861da440de8954\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9b04ab00eee55690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1193,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fb9cfa37079aa5436f861da440de8954","sha1":"312e4c7a124954cdc7d069e227e03d8aeb2532e9","sha256":"c3964a874e3082e2f4bf7a04a28987beba6dc4338d95fff89d935746120b7bee","sha512":"ca7eefb13c5796b958b26df714c4d9022a1ed6bb6d8ffbeeec4c3b2a2230b74e5bf1cd3b4ed995077431cfd33d953f88afbf567976c7f9239fe7112666043071","ssdeep":"","tlshash":"372154cc27b1cdac9a885bdb6f1970ed3c0774269da44c15c286672d5885adf0e050c3","first_seen":"2025-12-19T05:58:55.502202Z","last_seen":"2025-12-19T05:58:55.502202Z","times_seen":1,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-5-ChLtZgJr.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-5-ChLtZgJr.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=DC-15379358\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"14:1E:23:68:0E:D0:A1:C7:ED:6A:FE:20:1B:06:FE:F9:83:B2:99:F5","sha256":"61:AF:E1:FE:D1:A6:4C:C2:5B:60:60:94:B3:7F:5C:5D:34:BE:8E:AB:21:42:8A:97:07:E7:8A:B7:2C:91:5D:0D"}}},"request":{"raw":"GET /gtag/js?id=DC-15379358\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\nexpires: Fri, 19 Dec 2025 05:58:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 19 Dec 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 115555\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":329050,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"60aa0c6e78beb52a54605c237767379c","sha1":"c4533a7c7a9ceb0bc3f4fc1c4d2e7396d37a94da","sha256":"bf43b11409b9deefdd955432314294c369314fd4963639d83fd003bd4509b4f3","sha512":"6e1548a3d692d0e566778b02660442f5cb37e66c90423f1187141b19ac33266bf715f7abb5ba79fe9b1000b6d602751f91617471d9ed4dbffe67b6ad2c15ebe2","ssdeep":"6144:KIeJ92bulKYE1u99O5HDmHYmyBFzfns9RnWov2bypJQ7:jpbu7E1mYDnszW6pc","tlshash":"086407cdb3da74668393a478403f114ba17b6a91f84cc894f186cce42d74aaa4277f7d","first_seen":"2025-12-19T05:58:55.503844Z","last_seen":"2025-12-19T05:58:55.503844Z","times_seen":1,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-4-BsWfuAGM.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-4-BsWfuAGM.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26317\r\netag: \"65be7739bb45cf6f76df09fa8caadb30\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b04aaffce4d5690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26317,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"65be7739bb45cf6f76df09fa8caadb30","sha1":"3ebd63c545ad3d481535635dacced82de214f879","sha256":"5bdf4c448d2b1a20a59a80ad9c2c8fb240b48c3a280f5bd91b3f0a019738189e","sha512":"6cb8b8f16b7eb38fe86dc6985e62f2a163ab2e07e461203dc71db9819f5ebe25b21c62a0fc27b5aafcde1371846e64260b741807a99b3fe15e6f44cb9126882c","ssdeep":"768:GQngpTQA0A3cvC4j/KZh+0d8btBh7w0AY3I:GQngpT464jSZwqetg0AY3I","tlshash":"d0c2e12c677c85669b2c60b3396feaab57e48501ec04d8f5bac412268143db4eecc0f8","first_seen":"2025-12-19T05:58:55.504838Z","last_seen":"2025-12-19T05:58:55.504838Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/assets/images/revisit.svg","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /assets/images/revisit.svg HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nage: 531597\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 15 Mar 2022 04:40:47 GMT\r\netag: W/\"923-5da3a668dacc0\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=36000, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9b04ab03dcec56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2339,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71c20bb07e1387c0fecd7a521af9803d","sha1":"470d91c6500d67e26f2ef4e4d0699ea1b2c8fc03","sha256":"ed7c487f915432d9464e2af0a83002ee93596e86e076f3c917e439e5b844d08b","sha512":"fee5058dae5f928037bec9efec25d8b2c06bda85a31bd99a6df954a75b3a08446158e1441bd3fbf37f40a6efc6cabe4e5037444fd61feea3055d5b19025cd557","ssdeep":"","tlshash":"714165f1919ce2e13e02ebb2d235897d71176cf5f76c87888250dd66901406e4ccafd2","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-04-04T09:13:42.308988Z","times_seen":32566,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/deudafix-logo-POyixZNC.svg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/deudafix-logo-POyixZNC.svg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"cc7323dba24e9343cc3aa76927c8d76a\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9b04aaffae3a5690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6544,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cc7323dba24e9343cc3aa76927c8d76a","sha1":"657ca42fd0e8576ed8c0cc9c526f8eaf2b0c1d2b","sha256":"978f51ddd632a1e6624d55df8114b06b5dec70f71c48501e0af8d052217292ab","sha512":"ef32820b1b5c0697455f83b2a99a8419706e5d402f198d287a21f50981ad656a4fd38698b22d00eeb3b7986cc2f2b0ff066396eedb1c9839392546bc6f6e21a5","ssdeep":"96:Z5MaInoLve7r8U03qfJKuFS6t5dN790mzbTV6RnbfGXi1znl3uMsIlWRiZah6:jMaInzr8U2ChTtB90qV61VIIlWRYah6","tlshash":"7bd160ee2f314ec81cc482d57a452594bf1fe07e96474294e051dfb178c8c2eac88d97","first_seen":"2025-12-19T05:58:55.506453Z","last_seen":"2025-12-19T05:58:55.506453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-1-CKIVn1qD.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-1-CKIVn1qD.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 36909\r\netag: \"884495f672570e98363e101283870b96\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b04aaffbe465690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":36909,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"884495f672570e98363e101283870b96","sha1":"feeec393d9b430eab2b5b63f7aba6d300d6de2a3","sha256":"e1549445b6efa4b8a6b6a7af5e0416c7d158a90283cd10f2bc1796afa6b17fbd","sha512":"581aa277c46d2a51374a8f5c4ab8bd0f9289c8b716ee054f6d9dc891dc94278e03d5ebeb1adde5379438ae97935e6d370cb906396ff3cd4bfbc34653d7be3bbc","ssdeep":"768:GOHjVv1CdYu4W54lSqUPhdCxBbhLyHOLvZur4E:GwdSqUPOBLyHOLfE","tlshash":"6bf2e11a54e73f4cbbcff53b121495357cc8c72952aea82f6502474b3241974cae876c","first_seen":"2025-12-19T05:58:55.507378Z","last_seen":"2025-12-19T05:58:55.507378Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-2-CG-lx6KG.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-2-CG-lx6KG.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 32032\r\netag: \"aea61f231745742eab251341a1969acb\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b04aaffce475690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32032,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"aea61f231745742eab251341a1969acb","sha1":"052ee91af696931705ad319f2b613c5b5801835e","sha256":"a09593b86b3b8aac544cb0683da71d2ec2e9c9779deae117d01072c59dbed19e","sha512":"6776fba2abacf4a971f159aa605d8271baa7aeacddf1905a04b4ec24b146f6ddcc11100184b73e163bcbf5aef0d42ae29c22804d397237c622362381a61a1ad4","ssdeep":"768:GhdHLCduneDyWR8IA1nyDGWKgeXSODBHrMgXLB19HwD6OFZkuul:GhdHIueGtRnxWKgeXBNHrMUpmLVul","tlshash":"1fe2e0efc11994022f01bb30a96463aeb8ef59d96bd0407d49587d44c7e0d32a1ee16d","first_seen":"2025-12-19T05:58:55.508275Z","last_seen":"2025-12-19T05:58:55.508275Z","times_seen":1,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/hero-couple-CX4jEt5X.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/hero-couple-CX4jEt5X.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 118043\r\netag: \"fa4333e607514c34617d0abbf64fd18a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b04aafffe715690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":118043,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1536x1024, components 3","md5":"fa4333e607514c34617d0abbf64fd18a","sha1":"f766f7bbcbe681167a8e20bc1327b1b98e6a17ed","sha256":"ae9519e80b5f602d442423292620c6bf71fe7c5d40808c894dd8e97c882ff2c2","sha512":"17322b4fcc327d7a45f9b533d71afe0ae91346ab32de3ee4046bdaa6d5bb20b2c05b71a9f26923da0524e777d57c846f97b0f3c573209933deec99dcdcdd94c8","ssdeep":"3072:3mBUmuBXAs5w1m8qahuzvfVw/euG6R1eeyAA8TJ9iyV:3myXN5f8qzvfGhG6Seq4ZV","tlshash":"e2b312637aa1f814b75f42a8a6188ba63f8425bf5668341e4723e7118c7077434afdf3","first_seen":"2025-12-19T05:58:55.509254Z","last_seen":"2025-12-19T05:58:55.509254Z","times_seen":1,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/banner.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /client_data/0464f8f4c2ad1ec050092238/banner.js HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7833\r\nserver: cloudflare\r\naccept-ranges: bytes\r\nlast-modified: Fri, 12 Dec 2025 09:17:38 GMT\r\netag: \"5f28-645bdbb8dba79-gzip\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\ncf-cache-status: HIT\r\ncf-ray: 9b04ab013b3c56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24360,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24360), with no line terminators","md5":"2a61eacae5b6b032c01fb1070fe66f23","sha1":"1540b57bc2c225e172431430c398975f5dafe633","sha256":"c5c82f9e485719646e236a80461397ba16cab0ed10a054cadd298a9663c7b2a7","sha512":"1f490b065ea2dadceaafba06c4ce19ff295170d0057f011237b179e26dc059830e39c859c172b1793e4815467b3c687c1a7da0d64b3b9c5f9bd52667275556f7","ssdeep":"384:tqdXeq3q/6dpB3HJdVqCLgT4RoLtwoX6KQiWpi0RcyHRxpKaqAoaEkDX7WTZCoYI:tYHk6b1HJdVq6gMR1okiWU8THZKylb52","tlshash":"04b20768b088f4fc63d112fa20b78316bb301d45780bd150ab1ca9692d65eeb7396f5f","first_seen":"2025-12-19T05:58:55.510202Z","last_seen":"2025-12-19T05:58:55.510202Z","times_seen":1,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-693956694\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"14:1E:23:68:0E:D0:A1:C7:ED:6A:FE:20:1B:06:FE:F9:83:B2:99:F5","sha256":"61:AF:E1:FE:D1:A6:4C:C2:5B:60:60:94:B3:7F:5C:5D:34:BE:8E:AB:21:42:8A:97:07:E7:8A:B7:2C:91:5D:0D"}}},"request":{"raw":"GET /gtag/js?id=AW-693956694\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\nexpires: Fri, 19 Dec 2025 05:58:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 19 Dec 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 131713\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":390004,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"531bbfee393ff2dd9e2b7e185f3f1b9a","sha1":"85a941ef54b42384cfad866f8edd75018a1e7cac","sha256":"5ac6d8a5d92546b2107742aef21ffe38fd6735d0d9cf67a8f5b54b13ad4b05ec","sha512":"1de2a7905bac0784c5a2466dca7163489333b5c9a6c6c4ac92eae3eb06280b0524884406065e167b2ae93d56d39bdac29678ace66d8b845d6cf352b2fad26918","ssdeep":"6144:NIeJ+2bulKYXV1u99Yye5HDmHYmyBFzfnsyRuLjmWllxep4pt:ucbu7l1mcDnsy6SWspK","tlshash":"328429cd73c674269396a478403f118ba57b29e2f44cc895f189cce42e74aaa4277f7c","first_seen":"2025-12-19T05:58:55.51128Z","last_seen":"2025-12-19T05:58:55.51128Z","times_seen":1,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-6-CluIf8fe.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-6-CluIf8fe.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-6-CluIf8fe.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-6-CluIf8fe.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25335\r\netag: \"dd154c0a612a661178e7b7e119723948\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b04ab000e785690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25335,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"dd154c0a612a661178e7b7e119723948","sha1":"5ae1833e007868bc958eba81d1db9b137cb24210","sha256":"99cc4fb0015cdca8efe9302b4111f227645ee65dee9910fc1cb77df1b81b1b2c","sha512":"020f9f4fcb337c5dece0b93739d51cdc13d381006b637e39718c1f2a6c2e6c46e4347337a9abefc7bee46b7a19e90a48d03033f3c055bc373383d8ab7f5bf243","ssdeep":"768:GUBJuygZLTKL+kbPC9Drmp5qmWdW81knk/l2WEx:GUEZvKIZJW0XlEx","tlshash":"7cb2e1a63d223142bb7409f851811d37970a9f0abfa4747f2f539bc97241cb74998acd","first_seen":"2025-12-19T05:58:55.512039Z","last_seen":"2025-12-19T05:58:55.512039Z","times_seen":1,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/IcFuKw09.json","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /client_data/0464f8f4c2ad1ec050092238/IcFuKw09.json HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nOrigin: https://deudafix.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Dec 2025 09:17:38 GMT\r\netag: W/\"2c-645bdbb8daad9\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9b04ab01fbbd56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8e3453dcf492a5ece3a7a2c96448204d","sha1":"898331286067e950b0ac52a312197f40d547d8d8","sha256":"de84f599782a5139c0e7517cd2693d04cd159945dc8acd99efc05829f521830b","sha512":"351173bd3b421f491c24be3c98a4501b6d577aaac1580264b6edf06d46f9d30482dbd5caf97521d0e16bcb045c301371bbf5110db52dc3cc8191928fae502437","ssdeep":"","tlshash":"df9004710d043c5140f7c7c40751c74d4071335547f755104c53c01511530711c055cc","first_seen":"2025-12-19T05:58:55.513Z","last_seen":"2025-12-19T05:58:55.513Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/audit-table/Ju5jEDaM.json","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /client_data/0464f8f4c2ad1ec050092238/audit-table/Ju5jEDaM.json HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nOrigin: https://deudafix.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Dec 2025 09:17:38 GMT\r\netag: W/\"e80-645bdbb8dba79\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9b04ab035ca856a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3712,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ebd3f596c0931f422295f201841113c7","sha1":"6290f12850fd9a68bfaeaa83c590df173cbf804d","sha256":"a908ac6cd399471fecf4df54e42b810ade4fdc6220883441d4abd61e128769b0","sha512":"016707ce2f2733abb4bc449943a8bdfaeb1a12540fc3f087e8ebf0b083004a5fb809bb247a1ce6c60846c4e4b1719efc69c936687647a8239b66c805751735d1","ssdeep":"","tlshash":"017100abfa1cb46802f703562d969bed473802644594881e2c6a743c03c6ea7cf377a7","first_seen":"2025-12-19T05:58:55.513865Z","last_seen":"2025-12-19T05:58:55.513865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/index-BaNLw__D.css","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/index-BaNLw__D.css HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"304b8d2967d82d8501022c5d125e6498\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9b04aafd2c705690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68188,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"304b8d2967d82d8501022c5d125e6498","sha1":"07ecfb8599c819524af4a260b8f31c2da6af01b4","sha256":"6ff42037abad31796084caed85f2959940682ace6fe9e3b60f2e025d638c26d9","sha512":"8e2565e53332be40e7edf66ff89085568cd6eb99723d9fdd4957ba861240602612501d6f212acd33ab3f93b66fe981e4c1ec16bdba54a075b32ed5e8c5964bcb","ssdeep":"1536:fhgwYSk6JTUH+aG+V0378VQZkt5FyCWc8:fhgmksUeaG+V0378VQZkt5Fqc8","tlshash":"3a63851eb919a17e3c2790e8c3ccb9ec611af0c0de3a05b97e9a41216ad37f61db7514","first_seen":"2025-12-19T05:58:55.514735Z","last_seen":"2025-12-19T05:58:55.514735Z","times_seen":1,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/~flock.js","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9b04aafd2c715690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-04-04T09:18:44.019507Z","times_seen":5575,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /client_data/0464f8f4c2ad1ec050092238/script.js HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8623\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Dec 2025 09:17:38 GMT\r\netag: \"6047-645bdbb8dca19-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\ncf-cache-status: HIT\r\ncf-ray: 9b04aafee9ac56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24647,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (24647), with no line terminators","md5":"6acf28904537a4baa86a2c6e32875787","sha1":"4dcc311fa848ad615320f59c0e9ba87ae48d69c7","sha256":"e95416aa72be487952da0f5ca7b1f80960894e73120cec035718d3e4f459521c","sha512":"e462ebd5c6a889ef4a3a1fa45091442656ac6fa497ae9b4b79060c3173665150887650a4d81a5bb42db68f0b51eef74d237c1c27538b4619c7d50a20f7e308b3","ssdeep":"768:p1p7P9WErs/haRAu5V2CviGpcgA63tBG+B7cafRljjnTyo+R8Xc201stNN:ptcGA63tBFFsE","tlshash":"a2b2ea58b6e4b0b513d370b8603b550b73756929a445c0a4f268dcea6c7c9ce8637fbc","first_seen":"2025-12-19T05:58:55.516066Z","last_seen":"2025-12-19T05:58:55.516066Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":71,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/hero-couple-CX4jEt5X.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/hero-couple-CX4jEt5X.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/avatar-5-ChLtZgJr.jpg","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/avatar-5-ChLtZgJr.jpg HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23831\r\netag: \"ce17e3a40028e81ed5a2d0d52d603cb0\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nserver: cloudflare\r\ncf-ray: 9b04ab000e765690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x512, components 3","md5":"ce17e3a40028e81ed5a2d0d52d603cb0","sha1":"e472311366e8fe0007e47d86477533cc73e7b54e","sha256":"bf2c3288102d6b45d40162e90d546a9107d07d9fead1cb083032091a0587b24a","sha512":"dc0cda0d13505bed892ce274eb2535ffe624a88ac6a51faf2e4a51445f8acbd25e68d45b138f7ae46141a0fa20d3ccbc72434d7cf851d7f7033c39cffb28b1c3","ssdeep":"384:GRwlGuND9Bx7E9RyXR41ohyqGZiff5ckf18jlMT8WS+yfRtamXpE5WJQ:G2suND9DXXR41ohyKfqk98jlo8WSL3d0","tlshash":"09b2e10664ff6458af03ca993470a7bbac819809796b007667528f19c41fefc624d3df","first_seen":"2025-12-19T05:58:55.516913Z","last_seen":"2025-12-19T05:58:55.516913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/config/qaNydW8a.json","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /client_data/0464f8f4c2ad1ec050092238/config/qaNydW8a.json HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nOrigin: https://deudafix.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Dec 2025 09:17:38 GMT\r\netag: W/\"9a08-645bdbb8dca19\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\ncf-ray: 9b04ab026c2a56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39432,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"11cbf2b6e2c40301d7538e4294023d3a","sha1":"b9d30c3d2979b0f990da1a29f39f24519eef8abf","sha256":"3ff5f993b48a879b65ca243f29e1dd60322fd31e1fa3da100d58db61e7363b0d","sha512":"d8e5abc9035ee809142a5fe1b441b0c413aead2ac41845919d963b0e476cb57658b35c56cc2855b9a784cfe4ff9e7e848a62d7f8fd1776e97bdf3ff60bb086f1","ssdeep":"384:JY7gKo/d+5JNjpBY/zO+gpBY/1CB6+7ErpcKpXybvyz82w2pCdHWeetoV8py5FL:ugKo/d+5JjiO7GC2EgtoV8py5FL","tlshash":"b103f973f41c71be651fb5dda262431f3422feaa9c6b225d7383d4bc83d49a50ac4282","first_seen":"2025-12-19T05:58:55.517929Z","last_seen":"2025-12-19T05:58:55.517929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/0464f8f4c2ad1ec050092238/translations/ofdKdbPA.json","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /client_data/0464f8f4c2ad1ec050092238/translations/ofdKdbPA.json HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nOrigin: https://deudafix.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 12 Dec 2025 09:17:38 GMT\r\netag: W/\"7d0-645bdbb8dca19\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: 9b04ab02ec7456a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"59739989b062fc1d0cdc41b3691ccc2a","sha1":"7132495e679f89cfecc4b613353d1c65096bb8ab","sha256":"93b1179485b31f6f4383aa81dc78a6171f231c562a8897ebc7f3e8fed25e1f8a","sha512":"aa2bd0e5621a8f4dc6adb8618ddc06945997a6e9858d7a9fd667671dc59131732e086f24035066486318ea8f0e05c16de00cc86d35df0aded3db95d88180c86e","ssdeep":"","tlshash":"5c410e39e594ed8903670366b7c2d38bb72691256438c867ba8d943e00c8fe68227dd3","first_seen":"2025-12-19T05:58:55.518831Z","last_seen":"2025-12-19T05:58:55.518831Z","times_seen":1,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/assets/index-CE5MrwXf.js","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET /assets/index-CE5MrwXf.js HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"2cdf38bc4b87a1e15e7ef18227429176\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9b04aafd2c6f5690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":501238,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"2cdf38bc4b87a1e15e7ef18227429176","sha1":"42e2bba896edeffe87f5c3b09dd0d58c42b5c980","sha256":"5ffec7410a663d128af259c882dd25ec0d43976a2c46b982167a02fb0c6b294f","sha512":"5b3b6c185f3dadfbad83bb70d0ba6f2c3b5bf535ba7a6c7cc2a429f765ca0329d973dd9332ac7a0677feee5a390696462e66ba8c5604e7f19f7cdb12b2f1305c","ssdeep":"6144:i94TuJoPebQT87t0klNlGKRERiYBObr6NHxSriUzC64Gjmhx3BoC4cNYq5PBAGVZ:XP1oRlNlGKZZbr6NHUuQYofcNY54d","tlshash":"61b47c847095b66a6fb706e1507f900bb23d1a15b41e84a0f02cdc7a36b8956b277ffc","first_seen":"2025-12-19T05:58:55.519691Z","last_seen":"2025-12-19T05:58:55.519691Z","times_seen":1,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/~api/analytics","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nContent-Type: application/json\r\nContent-Length: 333\r\nOrigin: https://deudafix.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cookieyes-consent=consentid:ZTJYYXZ1WmtkOVVyRWxFbUlUN2NKVGEzcW9yZFNPRW0,consent:,action:,necessary:,functional:,analytics:,performance:,advertisement:; session-id=2d7750d9-0215-468b-b642-42d6ea733d74\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":333,"data":"{\"timestamp\":\"2025-12-19T05:58:24.306Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"2d7750d9-0215-468b-b642-42d6ea733d74\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://deudafix.pro/\\\"}\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:25 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9b04ab01ff9c5690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f92965e2c8a7afb3c1b9a5c09a263636","sha1":"e9b450d14bc2363d292c84f17cfad5cfbd58a458","sha256":"11a6767d5674c7e45f7e00dc525762275b3a48491ad6045427d2609cc496c516","sha512":"25775ba3c567970fc3df3f8107f2a78a67c5619d54bfb37704423acceec253316949eee77b81100a01b91c742e475b4f6157dd2427a9f9fafd87a4078f2d65df","ssdeep":"","tlshash":"54300000000000000000c00c00000000000000000c0000000000000000000000000000","first_seen":"2023-04-09T18:20:08Z","last_seen":"2026-04-04T09:18:44.018509Z","times_seen":5710,"resource_available":true,"data":null}},"time_used":1116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-19","alert":"Sinkholed","trigger":"deudafix.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/assets/images/close.svg","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:24.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 22:36:07 GMT","end":"Sat, 07 Feb 2026 23:35:52 GMT"},"fingerprint":{"sha1":"58:90:97:E2:A3:62:9E:00:E0:99:96:EE:74:2E:E9:20:48:9E:EE:31","sha256":"B9:DB:EB:35:08:74:7B:6C:36:AB:F7:FB:09:15:44:4D:E1:FE:76:EF:78:8B:14:6D:94:F9:BF:CF:9E:37:70:49"}}},"request":{"raw":"GET /assets/images/close.svg HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:24 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 15 Mar 2022 04:40:50 GMT\r\netag: \"541-5da3a66c769d4\"\r\naccess-control-allow-origin: *\r\ncache-control: max-age=36000, s-maxage=604800, proxy-revalidate\r\ncontent-encoding: gzip\r\nage: 79165\r\ncf-cache-status: HIT\r\ncf-ray: 9b04ab03eced56a3-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1345,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"463a29230026f25d47804e96c507f787","sha1":"f50e0eac87bb8f5cff8f7d8ccb5d72aedda7e78d","sha256":"a049e1abe441835a2bcf35258936072189a0a52d0000c4ed2094e59d2afd189b","sha512":"83f065b7b10e906ef8bf40dd907da4f0eb0f4c28ee2d8b44e418b15f1c06884a579957b2bc27418fac5759825d394819ff0ac48d784b9f05564b8edab25d9426","ssdeep":"","tlshash":"2c21e5fc520853f49d587e98a8623077954514bbbf9db8c8928c847788c53dd4ec8d58","first_seen":"2023-04-17T01:45:40Z","last_seen":"2026-04-04T09:13:42.312367Z","times_seen":42166,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"deudafix.pro/","fqdn":"deudafix.pro","domain":"deudafix.pro","tld":"pro"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-19T05:58:23.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deudafix.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 18 Dec 2025 11:21:38 GMT","end":"Wed, 18 Mar 2026 12:21:33 GMT"},"fingerprint":{"sha1":"3E:58:DE:1F:2D:BC:1F:44:8F:E1:3B:BC:B0:ED:78:3D:E4:C0:34:01","sha256":"21:B6:2E:22:6A:9C:A7:24:3B:40:23:17:08:77:D5:F9:3C:31:D0:25:C7:91:F6:7E:48:2C:C6:62:F2:78:FC:79"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: deudafix.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\netag: W/\"3045d5dc86cab3a440891495f5dad152\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9b04aafa3a895690-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3396,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"81cf387e32bebac24e0c7014f9275b45","sha1":"10fa29b43a41a98922277c886c18519c0712c42c","sha256":"bedfe5cee7d8e9d6eb5d38116a335b9cc79b6c114d1f2189ea41ac8971c1ba88","sha512":"adaab15a850dcc9242c287faffd62ac87937891c73a28f0b6ff6bd8f1b855351250c4714488eedb30690d72444288ba15e46fdeb607872818a86a6624000219f","ssdeep":"","tlshash":"046176935fd4de16b594813066f6f5078ca2920be605cc92fafc916c2f867c1c5eb348","first_seen":"2025-12-19T05:58:55.521673Z","last_seen":"2025-12-19T05:58:55.521673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":71,"dns":47,"connect":1,"send":0,"wait":333,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-M7G6PW5V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://deudafix.pro/","date":"2025-12-19T05:58:23.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 24 Nov 2025 08:38:53 GMT","end":"Mon, 16 Feb 2026 08:38:52 GMT"},"fingerprint":{"sha1":"14:1E:23:68:0E:D0:A1:C7:ED:6A:FE:20:1B:06:FE:F9:83:B2:99:F5","sha256":"61:AF:E1:FE:D1:A6:4C:C2:5B:60:60:94:B3:7F:5C:5D:34:BE:8E:AB:21:42:8A:97:07:E7:8A:B7:2C:91:5D:0D"}}},"request":{"raw":"GET /gtm.js?id=GTM-M7G6PW5V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://deudafix.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 19 Dec 2025 05:58:23 GMT\r\nexpires: Fri, 19 Dec 2025 05:58:23 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 19 Dec 2025 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 135579\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395081,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5340)","md5":"e09901900cd0cd2bee34a966b8d9c342","sha1":"f90fdf9f791c6cc4ad2cc39e80460a97765c7461","sha256":"7c30c9a480358d463b21048f696675740cb3c5fa1143cd10107c1879565c21d6","sha512":"bd39ba06304cda4525cfa0c6931acac9a0643cb905b3eb7f9fd4dc8465e704b13974c160dd657d55fde061bcad26ce718240b28a33bdca8e2f04600c4f1bcd90","ssdeep":"6144:aIeJK2bulKYXV1u99Yye5HDmHYmyBFz0ns87gWllV2bpRXJ:z4bu7l1mcAnsxWKpz","tlshash":"8b8419cdb3c6746a8392b478503f114ba17b6ad1f44cc895f186cce42e74aaa0267f7d","first_seen":"2025-12-19T05:58:55.522564Z","last_seen":"2025-12-19T05:58:55.522564Z","times_seen":1,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":64,"dns":6,"connect":7,"send":0,"wait":29,"receive":26,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}