{"report_id":"f2dabeb3-7530-401a-92e8-a988159a1bd1","version":6,"status":"done","tags":[],"date":"2025-11-19T01:21:04Z","url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"title":"DHL - Tracking","dom":{"size":7553,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"88f74497cdd7c97498e83e7d9cd29830","sha1":"c221326b9f38f14f9581b6921fedd5ee0938201d","sha256":"5aa724f335a5bbc78166d8ca1a86ab1fbaccfd72d7bef555a099f9ef9aea7fa1","sha512":"9b17ab3c3cf56a6dd3e6c550e0bddd40da286edde27f9f7bad571570b038ad44b12f078cbb8b22b3fe550169d7f3800d88a78805e167d69249620d090bfced33","ssdeep":"192:BjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpK467:o+tI/y6yekn+f8QZRtpGKuBjdu+467","tlshash":"3ef18a90081a9400ab930cd273cf3e36ed4f51167186c8b6abfe58a8eee7d26925574d","dom_hash":"domhash08ae0081c1574fe7e013785c60b9d7d5","first_seen":"2025-11-19T01:21:11.871703Z","last_seen":"2025-11-19T01:21:11.871703Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":0,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"tags":["openphish"],"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-24T01:21:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-11-16T22:20:16.151448Z","alert_count":0,"request_count":7,"received_data":3502006,"sent_data":3346,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.socket.io","ip":{"addr":"3.167.2.5","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":199187,"first_seen":"2015-03-23T22:14:03Z","last_seen":"2025-11-18T15:30:36.528978Z","alert_count":0,"request_count":1,"received_data":44919,"sent_data":424,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"asjksakjl32.xyz","ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"domain_registered":"2025-11-17","domain_rank":0,"first_seen":"2025-11-19T01:21:05.879162Z","last_seen":"2025-11-19T01:21:05.879163Z","alert_count":28,"request_count":7,"received_data":150014,"sent_data":3485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-11-16T22:13:25.550079Z","alert_count":0,"request_count":1,"received_data":16179,"sent_data":525,"comment":"","tags":null,"fingerprints":null},{"fqdn":"freesvg.org","ip":{"addr":"172.67.198.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-04-17","domain_rank":253776,"first_seen":"2019-08-26T07:45:32Z","last_seen":"2025-11-08T12:12:26.069788Z","alert_count":0,"request_count":1,"received_data":46543,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-11-17T00:50:41.216664Z","alert_count":0,"request_count":3,"received_data":21344,"sent_data":1432,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]},{"fqdn":"www.dhl.com","ip":{"addr":"184.25.11.93","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"domain_registered":"1989-05-25","domain_rank":12081,"first_seen":"2012-07-02T16:21:37Z","last_seen":"2025-11-17T03:41:16.756743Z","alert_count":0,"request_count":3,"received_data":1371,"sent_data":1499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-11-16T22:20:15.656981Z","alert_count":0,"request_count":4,"received_data":92577,"sent_data":2526,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"98e786c772a64d2074635754b29c5b8d","sha1":"58a5cef7581bf049a56e2f34fa6e58a6d527ba61","sha256":"3e0a60ed6865f40e9ca3b78a5172f461cb82d8a68b62f6557f4b638c13c6c48f","sha512":"d9594e74ff2811906e5ee32515de39d170bae34ce5c179e40420c6bc3635caefe5d5cbfbaa58dc8ac29b783677206789beb135f76f2293ce9f26e241227b4daa","ssdeep":"","tlshash":"b841c39978af3121947721fa9e4b5a8a1120a4273a94cca43e5dc2406f81996cdff3cc","size":2175,"data":"","first_seen":"2025-11-19T01:21:11.900569Z","last_seen":"2025-11-19T01:21:11.900569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"51279bae5fe1b9d9430e0ac479bf968a","sha1":"e7d1f4b130df655e513a1789c16daad42da2fad4","sha256":"a98e2986aedb9ff6ad08933582611e3402208fd385d9f96173225b4fcc098810","sha512":"de3b20dceec2c9e9b9c9b87538bf38e10c309bd9cf9070f04e76f345435835100ce5c2753d4ab1d4eb9a3c329908f2b81f95f80fe3ba95523e18060c45e5178a","ssdeep":"","tlshash":"211132731a08f0390b7209e1e2ffcbb1e081742cf15845e8a515dac81e69dcbce04985","size":1017,"data":"","first_seen":"2025-11-13T21:21:49.408382Z","last_seen":"2026-01-12T12:38:30.137193Z","times_seen":8864,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"18fc53675e53f1c488324707671b5016","sha1":"61b570d80f3a6c4906dd6cb824b15473d23bb9d9","sha256":"46641a2c12416ed5d1c17ff3b07c67b8d8a835d1ac6816b4b8bd54ac71c8c721","sha512":"f1d29ae32b4cbeaeabfe45b8a91cd365da38ab257bd99ee94652c8ca9028dd58e553fdabadc022437ebc10e1e7501637c4285f98f9f2be1da0134c7e92fecba3","ssdeep":"","tlshash":"47c08cae215120130d02882c93923b0aab622303880c685cb8cd230c2f6a192c80129e","size":177,"data":"","first_seen":"2025-11-19T01:21:11.901837Z","last_seen":"2025-11-19T01:21:11.901837Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c3932b07d349dcea75c547b0e01e40f6","sha1":"0a70487d8de970de873c17b0018a1a217c79c415","sha256":"329f50069a11628706daf3c0ff90891d48a8813fde5967b1bc7a3436a0920566","sha512":"5f31f69e480abd7a7f7ccfa898480fb6c30806a543a85f000f1f8bfc8feef8bf39096496205fd70dc96aca6e0882a625aafc7ec9bf9745cddf3765c7c0131cda","ssdeep":"384:kwg7uI3mG+vNpMj/Huqi4wfY1naenuTl1:kCcgvNpKHli4wAxaeux1","tlshash":"21a2b8ccf9a1b019517372fc957b104da3bb6c15e808181cb211c5eabeb4b8ed15bf6a","size":23018,"data":"","first_seen":"2025-11-19T01:21:11.903008Z","last_seen":"2025-11-19T01:21:11.903008Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"76811ecc1b1ccb42508a1d798702af50","sha1":"3d17b9e49a3c68474420b9a0a161934b9e78afad","sha256":"0d9b3a63e8b60740de39bbf1d23c5f5cc02deacc21696d68aff0422fe46e4258","sha512":"23ee2d40ce50a1bd25c65ca514840d5574bb8560e648adc1497554c7844c43ff8bee2956e57c203d863abb111d42385c339b723112d58e10dd125afc964cf3d8","ssdeep":"","tlshash":"12700008ec082000002330e820cb000a082a208c80080008000000828c3800a0002a0c","size":22,"data":"","first_seen":"2025-11-16T08:05:56.997389Z","last_seen":"2025-11-19T07:59:57.720266Z","times_seen":1558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026bft=0dAFcWeA4LA4ZHwggzGq6uZkaanY4Qtxsfv51AxdDvj2GoJb2bU6ee_EASzGaGG7QFOqqk7LuTK7_qISrse3JHU8eotX56zp8F3Q","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-20T12:16:54.711174Z","times_seen":509640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75a6a8ae62702c3891fb72a16e036e3d","sha1":"ba7fd55cc94229fc09e0244ee40599104d913e89","sha256":"ddbab5224d83b6b669af29741194c4ae00b686122f2058a18a206aca281e27c2","sha512":"c896ab103a236bff708fe39c5db7be59fae9ee980aecea1d62e269867f3280858396c3137bc25d6247a113da5b4fbfd3eab505332d864c871a5dd81f0229fdc9","ssdeep":"384:s7mpQDPCu9toDFSABwHmJfgjOiSVmVPOrqHX7WhA:NQ7CQtWNA6Y","tlshash":"06528849269221194d936cfa37b7bd0665f84413d0089908f91c93e16ff1fe8cea2bec","size":13437,"data":"","first_seen":"2025-11-19T01:21:11.906097Z","last_seen":"2025-11-19T01:21:11.906097Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"55458519b6d420314a57d61dda5934a0","sha1":"b806b0425057776e8a233e05fc60a1505a0d726d","sha256":"8b4c2f82507b18b8b9ef470eeeaeb7cb7c80ef8afbb341373cc539d0fad325dd","sha512":"65d9a0614ec86c17f392f12c14199ba8aa0c40ff849b1be000ee20d37d7239b2fbe372af27c565b42ee8f2efeafc00052b6a327e5009fcaa38a9162d5ef75c92","ssdeep":"768:ThcbpAgOH4Xqw3j64+va2c6ZWKEAJFEGvGGp:9KbI4Xqw3j6bva2c6ZWKPvGs","tlshash":"76e2401d34f72070997324fdab8b21446a3161033505ddd87a4e8319af86f64aef6bee","size":31907,"data":"","first_seen":"2025-11-19T01:21:11.907394Z","last_seen":"2025-11-19T01:21:11.907394Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"5467577188bef8d806ecf40b8fc92ee2","sha1":"3c00ad68fbfdcd2c42afa55da1e9c0e954986d3e","sha256":"54b7066d2c76ec5d518822e0a8788193dde41673fc089e080d950853414aaed9","sha512":"084c8c9a6b49e05c49fb996df46717b625405a2d066d14854165300f0eb151c2338b2adaf10280562e7488ad128c310af5dae55d3a5907e0a6f76043cead1dcd","ssdeep":"","tlshash":"e1a00209385fe11b6811b5ff54673a8d137354481d0c49407778918fd6bc9cfa11a97b","size":64,"data":"","first_seen":"2025-11-16T08:05:57.013858Z","last_seen":"2025-11-19T07:59:57.765878Z","times_seen":1556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","size":831957,"data":"","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.5.4/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.5","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db9bf2a88958a37857fb8f7b56e0fe04","sha1":"6bac03d130a224746a6ab405f519535088a6708e","sha256":"18a36a927dac54650b18b903f8f8778219e02e13946e581d9b3e1e4995f7435b","sha512":"1d310d1eb910fcfd0d18315de6793a89b56d0a470cee386bd9cec6caf5e9e4efb85fa3b97103bd021a85cccf8c75e062bec5fb1e8cacd89ee9a76c1d80ca42bf","ssdeep":"384:1ZS0CCnnsl8gtR/Uue8+iCMN0Dkiw2Jh4RWdfGdAjbp2zhPL8cYR95jRPKDxp5C0:/CCn+hxt6kBxkdfGyyDi75lif/5Y2","tlshash":"f313b588f291b06187e37165443f110ba27a74696489c1ccfa35d9f19eb8ece7123f79","size":44191,"data":"","first_seen":"2023-03-12T17:27:12Z","last_seen":"2026-08-18T18:14:48.884481Z","times_seen":1070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"95666b5a5e2ac74bf40fba8d5fc23cb1","sha1":"0780a61b562f1220b39a4893d5351fb561ef078a","sha256":"8a80af44ad063740133cb1d289ecd2475c427b21b3d3799378453b58463a197b","sha512":"1912bb24d9be8490d54971e4ebb4038f79e50c4aae02b3072e7aea13f0197269929be86831daa368e5504ea9107f265fef760a6022f016d2ae12ec0e4692d079","ssdeep":"192:zLND2lgIN3W4klneG4m0PyCN/5iDVJD05:zpDYX39A0PdJ","tlshash":"faf1134f70f330a6297361761b8b70946a3170435489dc88fb5e53012f8bf599b92bee","size":7476,"data":"","first_seen":"2025-11-19T01:21:11.909439Z","last_seen":"2025-11-19T01:21:11.909439Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3acb62e0bf0fc9a5ddb8a1619175a0f5","sha1":"37bd163a923b1ae35df66b3eda8f880223f7061c","sha256":"c4dc03c11cf305874755e28b3bf2dbf5b77c13b263921e643c711b5a2e25bc97","sha512":"5d8225b324fd311d07e5957248485c457d8825e781b7533a610c0d9046614b567581af415bd16337fc1863fdc0d17c7fd1514afcd6a3593334d32fa84bac14d9","ssdeep":"384:vyShgYQ2mJi+EaBBEfiE33ccEZelEap9lE1pZfDEmpM/frguE6pCEKpcC4jpIEtW:aVEaBBEpw","tlshash":"7582c24869f720250e6370fe2bcba14667a95903540cdd95fd9d83016f82fa497f2bf8","size":18334,"data":"","first_seen":"2025-11-19T01:21:11.911356Z","last_seen":"2025-11-19T01:21:11.911356Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"858e897072217a26358adf64bdd89065","sha1":"5efeb150bb38847eeac83d4b071b192e53a6eae2","sha256":"a46ba2ba89a0b805cfdeeea9efab65cb01c7fba9833daaa42111e96277c1f048","sha512":"cc9c195c850d2901864b8f6d8d7562451ca03faa117e4147074b15ec2954025e4f24cac7c984c6e1149ecd4088f49448d16aecec9a62226e24482ed21bb6c2dd","ssdeep":"","tlshash":"1251ddb921bf18700e6fa17e479b97857534800bf048e4593a2cc3a41fdadc7a5a2ded","size":2576,"data":"","first_seen":"2025-11-19T01:21:11.912798Z","last_seen":"2025-11-19T01:21:11.912798Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"382d84ac260957678ccbac87af4a0602","sha1":"ad98eeccdb613665e6162a1d7db7d019471693a7","sha256":"ba0283d25c794c044bcf716b9fc033afa211bf2a36cc8bf66fcb0f08879822dd","sha512":"b4dcf042183a09566a4f8991020a55211c435de83b2f512a0ea2004bb04b2d24acdf36b41c601a32e6c0d74e29b7d7c7307c9e5e3de44cbd5a61e1a8153be2e2","ssdeep":"","tlshash":"eaa000020002bccb0c02e00a030c8ea23c0022c032c8ec8ff2828220030332c0800b83","size":69,"data":"","first_seen":"2025-11-19T01:21:11.91393Z","last_seen":"2025-11-19T01:21:11.91393Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"15b57874ecb25d570839bd475dbe366f","sha1":"d83d9d4b06d17355b1c62157e0fcfdba6635ce7e","sha256":"d276350412b10d16b4d6c17d76f0f60d698d8a9e63b3627ef399ee685d0894b4","sha512":"580a224f450a0bbb6dfb7fc7bb989219eddc20e43cc7efe9bb0e316dd3fe85d6e1957ec14f16ac017825cf3af7d97b33283c7c4226e4eabb143f8584a1827044","ssdeep":"","tlshash":"70412139355326a5e2636369a2cef3462d2a71073cc2acb57a0d43061fdc96d21fa7c4","size":2215,"data":"","first_seen":"2025-11-19T01:21:11.915044Z","last_seen":"2025-11-19T01:21:11.915044Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45ecf7458f42da80ac248ad42d610372","sha1":"a5b3edf8328769bc754e6e616a957ceed4fdadd7","sha256":"75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf","sha512":"e269e258cee29ed9ac04510c30517ebd77aa78e9c79b5736e5761bcbd372e38ab00a8092e2d391baf681eb4602dfb9a4ae1650628967735d94695b3d28aa4502","ssdeep":"","tlshash":"fba002f31935c4218ea2c5509953fb88e593611dfd45c1d470254edea3e19d3c100990","size":69,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-08-20T12:16:54.711174Z","times_seen":509640,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"45dbbf7901ce7ef26b1903dd3e2e0fcf","sha1":"b484aa3dd61ecda7a7d5b0e17c5b149347b9db78","sha256":"d13d8759fd8993ab3c1c1344fcd0b5b1ff3175ee9ade1176e91ea46dc11ee05b","sha512":"338aba9e4e406e67e3993c795671035fa552b2c498c67027a2a71254442e5eb7119863e6dadd013c3de14d9bcab3f8349df8fcf9714086cd65acab8bf2cfebd7","ssdeep":"1536:vWZTk1vewOnLpfXG375gN7Xp8cnzYz7L25PPPS:JOnY8Z8cnkr8q","tlshash":"2c63af2be30330ebdfbedb515be0a5aa223d905b91d70ecc15ba05834579da6226d0dc","size":71255,"data":"","first_seen":"2025-11-19T01:21:11.916071Z","last_seen":"2025-11-19T01:21:11.916071Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"15fee8efadd120cb95e838b1dac4dced","sha1":"72f801dcb32858906c6d91a32ea663010ccd227b","sha256":"3f20de0fdc5d9520c5ca3c04bbd1e72ca1ef8d68ca9658f78cc16f52ca1db018","sha512":"74bc74f8447bab08c4a415f25200e887382445fa0bb173df97e0aecfe96adaffcfd2c4c8709f63f298abf2be2f1322339660b8e4772847120500e2e0b409fe92","ssdeep":"","tlshash":"e170000aec082000222330b808cb000a082a208c80080c08020200828c3000a000280e","size":22,"data":"","first_seen":"2025-11-16T08:05:57.004602Z","last_seen":"2025-11-19T07:59:57.749807Z","times_seen":1556,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"874e5d106fdcc1d0a4b8b9735a195fc0","sha1":"01a6c2c2d302a8cf3353e1b7d494bde79a88ad04","sha256":"1a620ec91e373f1ae33e3590c1ced334dd620d8454df8d4a542915d5650706b2","sha512":"56db143b7f4b84695349149292747dcf8fc06f36e2cda90a8f02d9799c1a431fcad28a51a53b6dc3d6af5d56190e1816af99afc2b038298a3035f49d0a7251b4","ssdeep":"384:Upug7uI3mG+vNpMj/Huqi4wfY1naenuTld:UrCcgvNpKHli4wAxaeuxd","tlshash":"2882d8cc79a1f019527372ed557b104da3bb6d05680c181cf211c4eabeb4b8ed16bfaa","size":19027,"data":"","first_seen":"2025-11-16T08:05:57.018934Z","last_seen":"2025-11-19T07:59:57.715151Z","times_seen":1554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026bft=0dAFcWeA4LA4ZHwggzGq6uZkaanY4Qtxsfv51AxdDvj2GoJb2bU6ee_EASzGaGG7QFOqqk7LuTK7_qISrse3JHU8eotX56zp8F3Q","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdb43a18c99de1d99aa63887441867c3","sha1":"9816295b06493984aae60033ec6d08e6d29c712b","sha256":"404bfe6e70b893201e1ecc7a1027fa6a9a2f9edaa24f4697a5d6303a1007d224","sha512":"1adfd50513407a10cf060261bb449b171cdd62ac40d23754b91f5c7864bab599efe7f138b0231af9323b0943733245a8085770fd4872a2515a9371789d498518","ssdeep":"","tlshash":"2fd022b3b2026cf34c24ac704829006e2c8c0923d0a38bf9bade3d147fa0d047a00a78","size":219,"data":"","first_seen":"2025-11-19T01:21:11.91853Z","last_seen":"2025-11-19T01:21:11.91853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"asjksakjl32.xyz/","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-19T01:20:40.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asjksakjl32.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 05:01:41 GMT","end":"Mon, 16 Feb 2026 05:01:40 GMT"},"fingerprint":{"sha1":"5F:D5:71:17:9F:09:69:93:AC:1C:94:F2:C7:BF:2E:D7:DC:10:51:6C","sha256":"2B:CD:5F:E3:7B:6A:71:CD:E2:F6:45:DF:3D:E8:80:8E:E4:83:06:2A:F8:02:9A:1A:25:61:92:C3:87:01:71:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: asjksakjl32.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 19 Nov 2025 01:20:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Tue, 18 Nov 2025 23:40:15 GMT\r\nETag: W/\"691d03df-240e2\"\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Socket.io","description":"","website":"https://socket.io","common_platform_enumeration":"","icon":"Socket.io.svg","categories":["JavaScript frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":147682,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3620)","md5":"23963be1f5b5b6406fcc0fa4ab449807","sha1":"6fbf9e5f81153057da1903bb8544fb3465353e73","sha256":"8fdea374fc496121e696073431216001018beb74c71a00bd0b3cda33ff1f1255","sha512":"9dbbfffbd52541b516042a86c9dcc0204a628f0dcfc7900dd5dddfd9cceeb797b60d963ee4a2e8384e7a4cf9175832c1c23029119f175dde97334cc269dc6d92","ssdeep":"3072:8Z17IVQJl44obaejJjvM//9ecdXaWq0ujO:8Z17IVQJl44obaejJjk//9ldXhP","tlshash":"71e3b70935e32011499329f96bbb690166349203d109cc98fe9d43d55fa6fa8eef3bdc","first_seen":"2025-11-19T01:21:11.872607Z","last_seen":"2025-11-19T01:21:11.872607Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1618,"timings":{"blocked":518,"dns":266,"connect":141,"send":0,"wait":575,"receive":1,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"freesvg.org/img/molumen_red_round_error_warning_icon.png","fqdn":"freesvg.org","domain":"freesvg.org","tld":"org"},"ip":{"addr":"172.67.198.200","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"freesvg.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 27 Sep 2025 17:40:48 GMT","end":"Fri, 26 Dec 2025 18:39:23 GMT"},"fingerprint":{"sha1":"C9:BF:6F:4B:E5:B9:D4:A6:57:3D:E0:32:0E:2A:AA:A0:49:D8:DE:FB","sha256":"D7:1D:9C:6A:19:B4:70:C8:F6:45:04:DE:E4:CD:56:12:A1:0A:D3:86:98:5F:15:93:1D:8B:80:F7:EA:44:23:74"}}},"request":{"raw":"GET /img/molumen_red_round_error_warning_icon.png HTTP/1.1\r\nHost: freesvg.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 19 Nov 2025 01:20:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 45886\r\nserver: cloudflare\r\nlast-modified: Sat, 09 Nov 2019 18:58:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"5dc70c3f-b33e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R9OqdE17%2BHiyybvKUzCn6WjU9GqLFopQ1kSNZu12DtIoPG7WYxA02j9WFr5ibJ5kPX5W6QCbJU89C23aIMWrcU2mlCKKf4URjAyW\"}]}\r\ncf-ray: 9a0be2f6fc7076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45886,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"954e0f6d91bbb653fc0912b5033a8bce","sha1":"9458b24d97cc5eec24abb05bab669c99957d3895","sha256":"084cec8906db06b4e2c6d3422029b5894b36481055acd75b587c1f3a22001030","sha512":"aba95c3d8fef92c981ad97b796a6bcda0931aa05471fcbcd1c48e8646dec0ee1bfa7b26533852a20ea07a91be05cb0dad1b78f9f38587d5cf628bdcf0496eb87","ssdeep":"768:BJ1I0jYpi0usSa3aFs83s/I3N2Ef4xeQaAojN8pi/MieZBj3gBAgdX90ijsCKySS:BJy0jYoeSa3kiI3Nb/I28pZZ5gNmio4d","tlshash":"c6235a4f1edeb48f824b079e46ae0eb5df2f62e4edf504ed61127fa3084ab15061a1c5","first_seen":"2025-11-19T01:21:11.874788Z","last_seen":"2025-11-19T01:21:11.874788Z","times_seen":1,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":31,"dns":19,"connect":2,"send":0,"wait":329,"receive":320,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/f/fa/American_Express_logo_%282018%29.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 07:25:45 GMT","end":"Tue, 13 Jan 2026 07:25:44 GMT"},"fingerprint":{"sha1":"4F:30:D3:13:28:19:1F:F1:40:FE:1E:F5:B4:A8:89:FD:9E:AC:EC:AD","sha256":"2E:EF:3D:23:1B:2B:63:B9:1F:1A:F1:5A:43:84:9A:6A:40:7F:00:3E:4B:E6:48:EB:EB:7B:3D:2A:90:B7:F4:7E"}}},"request":{"raw":"GET /wikipedia/commons/f/fa/American_Express_logo_%282018%29.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 03:55:39 GMT\r\nserver: ATS/9.2.11\r\netag: W/e5bf0c8d41264fbea2c6f5dbd1065a28\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: 4q545svzwom8pr7d6p5ljb7eaxwbvse\r\nlast-modified: Tue, 22 Oct 2019 10:28:02 GMT\r\ncontent-encoding: gzip\r\nage: 77102\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/693\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=CrfenYOVrnH0ELCKGMtmLwKwAAAAAFvd48w5qH96Pqm7DyBUZUIGL3iH1aFdaCBc;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 19 Nov 2026 00:00:00 GMT\r\ncontent-length: 2970\r\nx-request-id: 984e6e64-0340-4ceb-a71a-4d6ab38ee9e7\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":9816,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5bf0c8d41264fbea2c6f5dbd1065a28","sha1":"2875bd026db514f1a23692cb8c9914811f8cd9ae","sha256":"3b766b47270f3836202108a22a4b4f6c2aed08de9318934ff15488fc9957bb28","sha512":"8fd502a7d7479a2563b03070992b5445105f715d3600cb0a165200a6d1ac29a86969cb73698b0071ec8cb83d3624820612dac5693de01e91f91ba817a73c0399","ssdeep":"192:/k1YGtCtsKUZJ8UEdr39u3W/ggvVKNST0cS2rN:s1SsKi8Bt3gwFbrN","tlshash":"8d127508e2d90af0520a43a0b9fc69ca351629e377314d227adc4871ef467c1667dfea","first_seen":"2023-04-11T10:21:59Z","last_seen":"2026-07-23T18:33:37.542315Z","times_seen":83,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":125,"dns":71,"connect":23,"send":0,"wait":24,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dhl.com/content/dam/dhl/global/core/images/logos/glo-footer-logo.svg","fqdn":"www.dhl.com","domain":"dhl.com","tld":"com"},"ip":{"addr":"184.25.11.93","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhl.com","organization":"Deutsche Post AG"},"issuer":{"commonName":"DPDHL Global TLS CA - I5","organization":"Deutsche Post AG"},"validity":{"start":"Thu, 03 Jul 2025 00:57:28 GMT","end":"Fri, 03 Jul 2026 00:56:28 GMT"},"fingerprint":{"sha1":"51:0E:A0:26:9D:8E:81:44:B2:E0:09:2B:42:BA:0B:EB:BC:94:F0:C4","sha256":"65:0D:3F:82:22:B1:F3:A5:73:67:90:86:FF:EA:F6:8E:A6:B9:E7:A7:BE:F5:32:A1:B3:7D:D8:34:51:9A:30:5A"}}},"request":{"raw":"GET /content/dam/dhl/global/core/images/logos/glo-footer-logo.svg HTTP/1.1\r\nHost: www.dhl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: AkamaiGHost\r\nmime-version: 1.0\r\ncontent-type: text/html\r\ncontent-length: 465\r\nexpires: Wed, 26 Nov 2025 01:20:42 GMT\r\ndate: Wed, 19 Nov 2025 01:20:42 GMT\r\ncontent-security-policy: frame-ancestors 'self'\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=604800, stale-while-revalidate=86400\r\nx-akamai-cache: Error from child\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T12:30:42.528701Z","times_seen":17990481,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":205,"dns":198,"connect":4,"send":0,"wait":19,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:35:45 GMT","end":"Mon, 19 Jan 2026 08:35:44 GMT"},"fingerprint":{"sha1":"88:42:9A:E3:85:29:1D:A4:9A:60:E6:5F:C1:71:A6:01:27:91:C8:BC","sha256":"6D:0F:B5:30:E0:1A:7B:ED:55:DD:26:C8:34:D0:0A:34:65:0E:E8:E4:93:E9:8C:DF:D6:3C:63:71:A9:AE:DF:D2"}}},"request":{"raw":"GET /recaptcha/api.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 19 Nov 2025 01:20:42 GMT\r\ndate: Wed, 19 Nov 2025 01:20:42 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1017,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1017), with no line terminators","md5":"51279bae5fe1b9d9430e0ac479bf968a","sha1":"e7d1f4b130df655e513a1789c16daad42da2fad4","sha256":"a98e2986aedb9ff6ad08933582611e3402208fd385d9f96173225b4fcc098810","sha512":"de3b20dceec2c9e9b9c9b87538bf38e10c309bd9cf9070f04e76f345435835100ce5c2753d4ab1d4eb9a3c329908f2b81f95f80fe3ba95523e18060c45e5178a","ssdeep":"","tlshash":"211132731a08f0390b7209e1e2ffcbb1e081742cf15845e8a515dac81e69dcbce04985","first_seen":"2025-11-13T21:21:49.408382Z","last_seen":"2026-01-12T12:38:30.137193Z","times_seen":8864,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":26,"receive":0,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://asjksakjl32.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 12 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 568948\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":60,"dns":10,"connect":9,"send":0,"wait":10,"receive":41,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/favicon.ico","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asjksakjl32.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 05:01:41 GMT","end":"Mon, 16 Feb 2026 05:01:40 GMT"},"fingerprint":{"sha1":"5F:D5:71:17:9F:09:69:93:AC:1C:94:F2:C7:BF:2E:D7:DC:10:51:6C","sha256":"2B:CD:5F:E3:7B:6A:71:CD:E2:F6:45:DF:3D:E8:80:8E:E4:83:06:2A:F8:02:9A:1A:25:61:92:C3:87:01:71:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: asjksakjl32.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 19 Nov 2025 01:20:43 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-08-20T12:26:50.042959Z","times_seen":30345,"resource_available":true,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":1,"connect":107,"send":0,"wait":363,"receive":0,"ssl":116},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/socket.io/?EIO=4\u0026transport=polling\u0026t=PgPina2\u0026sid=3BTLrL7iBYI5taxFAAD7","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asjksakjl32.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 05:01:41 GMT","end":"Mon, 16 Feb 2026 05:01:40 GMT"},"fingerprint":{"sha1":"5F:D5:71:17:9F:09:69:93:AC:1C:94:F2:C7:BF:2E:D7:DC:10:51:6C","sha256":"2B:CD:5F:E3:7B:6A:71:CD:E2:F6:45:DF:3D:E8:80:8E:E4:83:06:2A:F8:02:9A:1A:25:61:92:C3:87:01:71:86"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=PgPina2\u0026sid=3BTLrL7iBYI5taxFAAD7 HTTP/1.1\r\nHost: asjksakjl32.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://asjksakjl32.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 19 Nov 2025 01:20:43 GMT\r\nContent-Type: text/html\r\nContent-Length: 2\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\ncache-control: no-store\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-20T12:25:15.08656Z","times_seen":451002,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":585,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.5.4/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.5","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Mon, 14 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:31:34:3C:FE:6A:94:47:2E:CD:E0:26:D6:4D:DE:E6:D9:31:A7:E3","sha256":"C2:34:E7:66:CF:D6:AF:AA:30:42:B0:50:F9:74:CE:BC:8E:BA:E3:A4:6E:8D:7D:A2:7C:10:10:F5:12:12:6A:A6"}}},"request":{"raw":"GET /4.5.4/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Fri, 10 Oct 2025 17:01:37 GMT\r\netag: W/\"db9bf2a88958a37857fb8f7b56e0fe04\"\r\nlast-modified: Thu, 25 Sep 2025 00:49:09 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::r755p-1760115697332-c663c926d8c6\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7bc180ff569f641823300f4c342cb63a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Z26oMvS3mQ08jpfjkOfan9vfk-npVx-1kqOHv9fePAeEht6R-3p3Hw==\r\nage: 4753892\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":44191,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (44052)","md5":"db9bf2a88958a37857fb8f7b56e0fe04","sha1":"6bac03d130a224746a6ab405f519535088a6708e","sha256":"18a36a927dac54650b18b903f8f8778219e02e13946e581d9b3e1e4995f7435b","sha512":"1d310d1eb910fcfd0d18315de6793a89b56d0a470cee386bd9cec6caf5e9e4efb85fa3b97103bd021a85cccf8c75e062bec5fb1e8cacd89ee9a76c1d80ca42bf","ssdeep":"384:1ZS0CCnnsl8gtR/Uue8+iCMN0Dkiw2Jh4RWdfGdAjbp2zhPL8cYR95jRPKDxp5C0:/CCn+hxt6kBxkdfGyyDi75lif/5Y2","tlshash":"f313b588f291b06187e37165443f110ba27a74696489c1ccfa35d9f19eb8ece7123f79","first_seen":"2023-03-12T17:27:12Z","last_seen":"2026-08-18T18:14:48.884481Z","times_seen":1070,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":32,"connect":3,"send":0,"wait":1,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.dhl.com/content/dam/dhl/global/csi/images/hero-story-teaser/glo-csi-yellow-logistics-talks-background.jpg.transform/HST1365/img.jpg","fqdn":"www.dhl.com","domain":"dhl.com","tld":"com"},"ip":{"addr":"184.25.11.93","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhl.com","organization":"Deutsche Post AG"},"issuer":{"commonName":"DPDHL Global TLS CA - I5","organization":"Deutsche Post AG"},"validity":{"start":"Thu, 03 Jul 2025 00:57:28 GMT","end":"Fri, 03 Jul 2026 00:56:28 GMT"},"fingerprint":{"sha1":"51:0E:A0:26:9D:8E:81:44:B2:E0:09:2B:42:BA:0B:EB:BC:94:F0:C4","sha256":"65:0D:3F:82:22:B1:F3:A5:73:67:90:86:FF:EA:F6:8E:A6:B9:E7:A7:BE:F5:32:A1:B3:7D:D8:34:51:9A:30:5A"}}},"request":{"raw":"GET /content/dam/dhl/global/csi/images/hero-story-teaser/glo-csi-yellow-logistics-talks-background.jpg.transform/HST1365/img.jpg HTTP/1.1\r\nHost: www.dhl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: AkamaiGHost\r\nmime-version: 1.0\r\ncontent-type: text/html\r\ncontent-length: 564\r\nexpires: Wed, 26 Nov 2025 01:20:42 GMT\r\ndate: Wed, 19 Nov 2025 01:20:42 GMT\r\ncontent-security-policy: frame-ancestors 'self'\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=604800, stale-while-revalidate=86400\r\nx-akamai-cache: Error from child\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T12:30:42.528701Z","times_seen":17990481,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":4,"dns":165,"connect":4,"send":0,"wait":18,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/socket.io/?EIO=4\u0026transport=polling\u0026t=PgPina6\u0026sid=3BTLrL7iBYI5taxFAAD7","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asjksakjl32.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 05:01:41 GMT","end":"Mon, 16 Feb 2026 05:01:40 GMT"},"fingerprint":{"sha1":"5F:D5:71:17:9F:09:69:93:AC:1C:94:F2:C7:BF:2E:D7:DC:10:51:6C","sha256":"2B:CD:5F:E3:7B:6A:71:CD:E2:F6:45:DF:3D:E8:80:8E:E4:83:06:2A:F8:02:9A:1A:25:61:92:C3:87:01:71:86"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PgPina6\u0026sid=3BTLrL7iBYI5taxFAAD7 HTTP/1.1\r\nHost: asjksakjl32.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 19 Nov 2025 01:20:43 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 32\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\ncache-control: no-store\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8ada5bc355be8eadd1e87e0eb8e396d1","sha1":"9323496f8f11ed8dd07a88d745b8c1d8bb6f5d66","sha256":"6959cc4e3f43e683795115e0ced929470ccb5f52253d626acdf501cfcf536c39","sha512":"1d4cde539d79807a431eb01d5b886aa4b15c43fec4e0272db399a819227cf4cf8bf887822f2688f07b99bc860b48c89a4caf70d11c773a526389987f5124d694","ssdeep":"","tlshash":"258000002200f223822230abac220330aa8020b2e2e302cc82bc0080c80b80ca0c0b0a","first_seen":"2025-11-19T01:21:11.882907Z","last_seen":"2025-11-19T01:21:11.882907Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1092,"timings":{"blocked":246,"dns":1,"connect":121,"send":0,"wait":595,"receive":0,"ssl":125},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"asjksakjl32.xyz/socket.io/?EIO=4\u0026transport=websocket\u0026sid=3BTLrL7iBYI5taxFAAD7","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asjksakjl32.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 05:01:41 GMT","end":"Mon, 16 Feb 2026 05:01:40 GMT"},"fingerprint":{"sha1":"5F:D5:71:17:9F:09:69:93:AC:1C:94:F2:C7:BF:2E:D7:DC:10:51:6C","sha256":"2B:CD:5F:E3:7B:6A:71:CD:E2:F6:45:DF:3D:E8:80:8E:E4:83:06:2A:F8:02:9A:1A:25:61:92:C3:87:01:71:86"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket\u0026sid=3BTLrL7iBYI5taxFAAD7 HTTP/1.1\r\nHost: asjksakjl32.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://asjksakjl32.xyz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: 86BQzpdVsla5FN24MXPLbw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 19 Nov 2025 01:20:43 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Lt73n0RKkvR9R6Kw00HcPEIWsyQ=\r\nAccess-Control-Allow-Origin: *\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T12:30:42.528701Z","times_seen":17990481,"resource_available":true,"data":null}},"time_used":807,"timings":{"blocked":0,"dns":1,"connect":107,"send":0,"wait":583,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","date":"2025-11-19T01:20:43.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 12 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 568949\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","date":"2025-11-19T01:20:43.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8\r\nSec-Fetch-Dest: worker\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\nexpires: Wed, 19 Nov 2025 01:20:43 GMT\r\ndate: Wed, 19 Nov 2025 01:20:43 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: same-site\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":102,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"4e8c5e231c8c4b52a9f1110707827d3f","sha1":"58e2f59c8426047a2671a46fae39f739035a8032","sha256":"4b12d6a235970b2239057a7cae12f85606fc432c6ad4ae32d13fdc27ffee0891","sha512":"064d9f12c63084d2e179e0f0dfe9cfd184af33cf937b3a89e0969ec32f3cca35540c29c3d9b714004d8e95bd394ebc1f9ff1986792a9ee84397fc9930523067f","ssdeep":"","tlshash":"68b012330510d46c0d1082c2d63bd3acf0114234db6082f041b90fd883649e39800400","first_seen":"2025-11-13T21:19:52.258197Z","last_seen":"2026-05-27T06:53:03.730727Z","times_seen":38464,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","date":"2025-11-19T01:20:43.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 13 Nov 2025 00:15:00 GMT\r\nexpires: Thu, 20 Nov 2025 00:15:00 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nage: 522343\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-08-20T12:25:23.928471Z","times_seen":712309,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026bft=0dAFcWeA4LA4ZHwggzGq6uZkaanY4Qtxsfv51AxdDvj2GoJb2bU6ee_EASzGaGG7QFOqqk7LuTK7_qISrse3JHU8eotX56zp8F3Q","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:44.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026bft=0dAFcWeA4LA4ZHwggzGq6uZkaanY4Qtxsfv51AxdDvj2GoJb2bU6ee_EASzGaGG7QFOqqk7LuTK7_qISrse3JHU8eotX56zp8F3Q HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 19 Nov 2025 01:20:44 GMT\r\ncontent-security-policy: script-src 'nonce-eF5Dcn5SVQWwfnyrSvSc9A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7623,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c778a3c59329a0fbf900cddcb5a7f9c5","sha1":"63720f40f06bc2fb1a7800b8b858a6cad4f992cf","sha256":"88a2b81a6a95d795783827d3a1d09a7d0fc62abd2427fc62f2b21bc97ba9edb2","sha512":"2194eebadaa35785c0278ada4f94727f1fb00678d38a1b3063591a0641442d934b1693604e8c78ce2cab406aea7074e6bc5008a84d925c25ff86002c24e08b45","ssdeep":"192:NjK+QK9KyK03XK/KIqKI4Kn7KSKBKC3sKUKoNK8KGnKrKEKT3AKrKFpKeE4:M+tI/y6yekn+f8QZRtpGKuBjdu+eE4","tlshash":"d5f19b90081a9400ab930cd273cf3e36fd4f51267186c8b6abfe59acede7d26925474d","first_seen":"2025-11-19T01:21:11.892194Z","last_seen":"2025-11-19T01:21:11.892194Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/5/5e/Visa_Inc._logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 07:25:45 GMT","end":"Tue, 13 Jan 2026 07:25:44 GMT"},"fingerprint":{"sha1":"4F:30:D3:13:28:19:1F:F1:40:FE:1E:F5:B4:A8:89:FD:9E:AC:EC:AD","sha256":"2E:EF:3D:23:1B:2B:63:B9:1F:1A:F1:5A:43:84:9A:6A:40:7F:00:3E:4B:E6:48:EB:EB:7B:3D:2A:90:B7:F4:7E"}}},"request":{"raw":"GET /wikipedia/commons/5/5e/Visa_Inc._logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 03:23:42 GMT\r\nserver: ATS/9.2.11\r\netag: W/b16848209b48b1ce4e95aed6ccb91cf3\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: mdcpc863fbm5px7fm7vkslsekw29qj8\r\nlast-modified: Wed, 18 Jan 2017 15:46:21 GMT\r\ncontent-encoding: gzip\r\nage: 79019\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/1956\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=M9T6-3ayK-xs3JjD8FeriQKwAAAAAFvdxZYHtJSuae9pNVrPNfNHFLobyCbHe1GW;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 19 Nov 2026 00:00:00 GMT\r\ncontent-length: 1614\r\nx-request-id: 0a0a47c3-a100-4f8a-a4dd-b5fb433c5bc7\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":3456,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b16848209b48b1ce4e95aed6ccb91cf3","sha1":"bf8374f101ff983f5516f312d569789ad3737094","sha256":"2e37f70f22f4fe005ffe2c52b2231e0f8b864b756c768ae9bd26a20922b0dd88","sha512":"354d76df298f9cabe9029842d200aafaf1352137ae8a3cdfc59a60503eb402303c34c2d629a73282eaed5f599d82cbeb08e507d1971ea71f000050bf0e92a13c","ssdeep":"","tlshash":"e461931af76a08f4c15e4a602df17619c32938a382640a5177ec5840cf91bc2b379f9a","first_seen":"2023-04-11T10:21:59Z","last_seen":"2026-08-03T08:13:51.816907Z","times_seen":212,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":127,"dns":70,"connect":23,"send":0,"wait":23,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/2/2a/Mastercard-logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 07:25:45 GMT","end":"Tue, 13 Jan 2026 07:25:44 GMT"},"fingerprint":{"sha1":"4F:30:D3:13:28:19:1F:F1:40:FE:1E:F5:B4:A8:89:FD:9E:AC:EC:AD","sha256":"2E:EF:3D:23:1B:2B:63:B9:1F:1A:F1:5A:43:84:9A:6A:40:7F:00:3E:4B:E6:48:EB:EB:7B:3D:2A:90:B7:F4:7E"}}},"request":{"raw":"GET /wikipedia/commons/2/2a/Mastercard-logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 18 Nov 2025 18:22:34 GMT\r\nserver: ATS/9.2.11\r\netag: W/55c42d54937583ac3f242da371c2e16d\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: dmf7kamp6hfl7o7fmrlt1q5b7k29l89\r\nlast-modified: Tue, 17 Aug 2021 14:43:58 GMT\r\ncontent-encoding: gzip\r\nage: 25088\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/1149\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=ofIsDMVGp9EF0zl0SHkFDQKwAAAAAFvdC46smjiYwDqs3azOCvU-WI_zQla734sT;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Thu, 19 Nov 2026 00:00:00 GMT\r\ncontent-length: 1643\r\nx-request-id: 34f4adbe-381c-4b3a-a685-88fabc074bc6\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":4053,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"55c42d54937583ac3f242da371c2e16d","sha1":"749f71b24787940813c600fb28dc03cd115215b9","sha256":"79534478273e209365b14a47e39375e95329d1f7fc41b50c2eadd8cb09a32c9e","sha512":"c7bf06b76b037836695824704ca8da99fad1bd5a6e20aa2074f47bc53d831e57420364cd162baafa9dcbfb1393ad47871a367decf308b04369d981e25a4c457e","ssdeep":"","tlshash":"f181ffa3d156a4f06e59c22026b46965b2509eeb60f0d1dcfd9f18d3fa0c0d04078eef","first_seen":"2023-08-30T12:54:33Z","last_seen":"2026-08-20T07:37:29.716984Z","times_seen":595,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":128,"dns":69,"connect":29,"send":0,"wait":24,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/socket.io/?EIO=4\u0026transport=polling\u0026t=PgPinQf","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asjksakjl32.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 05:01:41 GMT","end":"Mon, 16 Feb 2026 05:01:40 GMT"},"fingerprint":{"sha1":"5F:D5:71:17:9F:09:69:93:AC:1C:94:F2:C7:BF:2E:D7:DC:10:51:6C","sha256":"2B:CD:5F:E3:7B:6A:71:CD:E2:F6:45:DF:3D:E8:80:8E:E4:83:06:2A:F8:02:9A:1A:25:61:92:C3:87:01:71:86"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PgPinQf HTTP/1.1\r\nHost: asjksakjl32.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 19 Nov 2025 01:20:42 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 118\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\ncache-control: no-store\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e229415cb56c6cf1d0dc008bd17dd9a8","sha1":"fafac98669065fc7caeb065f6c819c3de972aa7e","sha256":"c62bc4c564b8f41b4f18ff0d96b3aaf3ca19bbf8f8e2f7d314da38c8e6293472","sha512":"231c6ded90c8f8b4719d84905f47c8893c6be6e0a2a968fea2487a49a1b9fe377c8cca052b62ac8b83634158bd8367f00efe339e7c11358dddbd5bedd831d7fc","ssdeep":"","tlshash":"87b09284825da2c5faa0b78571e3ae0a4a98786e99e645ac222d04898a5e6103052b6b","first_seen":"2025-11-19T01:21:11.89568Z","last_seen":"2025-11-19T01:21:11.89568Z","times_seen":1,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:33:43 GMT","end":"Mon, 19 Jan 2026 08:33:42 GMT"},"fingerprint":{"sha1":"BD:40:9A:DB:26:FC:C1:FF:4D:85:05:A9:F0:E9:24:BD:05:29:25:7B","sha256":"C7:A3:E4:68:D6:D8:86:E7:C6:E2:D6:E3:1D:DA:60:9A:35:7E:71:9E:F1:91:26:57:47:43:91:7C:CE:BB:07:17"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 19 Nov 2025 01:20:42 GMT\r\ncontent-security-policy: script-src 'nonce-bXTj4eSGklr8J5JjxXgp_w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":80168,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (56645)","md5":"f4a4820eb0cf9fc82fc137b2edad6e84","sha1":"97c61c483ae669dbc01f5dc8ea00c8d59fbdf7da","sha256":"2c35fc8ecdc6584aad3a0aa5b58e0a845b9c745326900e92dc31564c054be490","sha512":"ea41be9807a9425db1d92bd71655fdf875fda4cb14f15f9a7b4deba29dd43741904d3044cfadf40ddd9e1d77230a5522fc126cdc065e56c35171bc48ec249185","ssdeep":"1536:aFIWZTk1vewOnLpfXG375gN7Xp8cnzYz7L25PPPJ:aeOnY8Z8cnkr8B","tlshash":"4073c0169203709bdffbce8167e5b979622e4047a1974dcc26fe04868dbad67122d3cc","first_seen":"2025-11-19T01:21:11.896936Z","last_seen":"2025-11-19T01:21:11.896936Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","date":"2025-11-19T01:20:43.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 15344\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 17:55:22 GMT\r\nexpires: Thu, 12 Nov 2026 17:55:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 16 Oct 2017 17:32:55 GMT\r\ncontent-type: font/woff2\r\nage: 545121\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15344,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T09:01:33.282851Z","times_seen":544353,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":61,"dns":1,"connect":22,"send":0,"wait":28,"receive":1,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/webworker.js?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9","date":"2025-11-19T01:20:43.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 12 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 568949\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"asjksakjl32.xyz/socket.io/?EIO=4\u0026transport=polling\u0026t=PgPinny\u0026sid=3BTLrL7iBYI5taxFAAD7","fqdn":"asjksakjl32.xyz","domain":"asjksakjl32.xyz","tld":"xyz"},"ip":{"addr":"104.168.101.24","port":443,"asn":36352,"as":"AS-COLOCROSSING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:43.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"asjksakjl32.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 18 Nov 2025 05:01:41 GMT","end":"Mon, 16 Feb 2026 05:01:40 GMT"},"fingerprint":{"sha1":"5F:D5:71:17:9F:09:69:93:AC:1C:94:F2:C7:BF:2E:D7:DC:10:51:6C","sha256":"2B:CD:5F:E3:7B:6A:71:CD:E2:F6:45:DF:3D:E8:80:8E:E4:83:06:2A:F8:02:9A:1A:25:61:92:C3:87:01:71:86"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PgPinny\u0026sid=3BTLrL7iBYI5taxFAAD7 HTTP/1.1\r\nHost: asjksakjl32.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Wed, 19 Nov 2025 01:20:44 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nContent-Length: 1\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\ncache-control: no-store\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"very short file (no magic)","md5":"1679091c5a880faf6fb5e6087eb1b2dc","sha1":"c1dfd96eea8cc2b62785275bca38ac261256e278","sha256":"e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683","sha512":"3c9ad55147a7144f6067327c3b82ea70e7c5426add9ceea4d07dc2902239bf9e049b88625eb65d014a7718f79354608cab0921782c643f0208983fffa3582e40","ssdeep":"","tlshash":"c700000000030000c00000300000000000000000000c00000000000000000000000000","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-08-20T10:17:34.823782Z","times_seen":12135,"resource_available":true,"data":null}},"time_used":639,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-19","alert":"Sinkholed","trigger":"asjksakjl32.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.dhl.com/content/dam/dhl/global/core/images/logos/dhl-logo.svg","fqdn":"www.dhl.com","domain":"dhl.com","tld":"com"},"ip":{"addr":"184.25.11.93","port":443,"asn":16625,"as":"AKAMAI-AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://asjksakjl32.xyz/","date":"2025-11-19T01:20:42.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhl.com","organization":"Deutsche Post AG"},"issuer":{"commonName":"DPDHL Global TLS CA - I5","organization":"Deutsche Post AG"},"validity":{"start":"Thu, 03 Jul 2025 00:57:28 GMT","end":"Fri, 03 Jul 2026 00:56:28 GMT"},"fingerprint":{"sha1":"51:0E:A0:26:9D:8E:81:44:B2:E0:09:2B:42:BA:0B:EB:BC:94:F0:C4","sha256":"65:0D:3F:82:22:B1:F3:A5:73:67:90:86:FF:EA:F6:8E:A6:B9:E7:A7:BE:F5:32:A1:B3:7D:D8:34:51:9A:30:5A"}}},"request":{"raw":"GET /content/dam/dhl/global/core/images/logos/dhl-logo.svg HTTP/1.1\r\nHost: www.dhl.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://asjksakjl32.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\nserver: AkamaiGHost\r\nmime-version: 1.0\r\ncontent-type: text/html\r\ncontent-length: 454\r\nexpires: Wed, 26 Nov 2025 01:20:42 GMT\r\ndate: Wed, 19 Nov 2025 01:20:42 GMT\r\ncontent-security-policy: frame-ancestors 'self'\r\nstrict-transport-security: max-age=31536000 ; includeSubDomains\r\nx-content-type-options: nosniff\r\ncache-control: public, max-age=604800, stale-while-revalidate=86400\r\nx-akamai-cache: Error from child\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-20T12:30:42.528701Z","times_seen":17990481,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":214,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026co=aHR0cHM6Ly9hc2prc2FramwzMi54eXo6NDQz\u0026hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026size=normal\u0026anchor-ms=20000\u0026execute-ms=15000\u0026cb=1o6xeh8ukja8","date":"2025-11-19T01:20:43.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42505\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 00:45:32 GMT\r\nexpires: Wed, 18 Nov 2026 00:45:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 88511\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b035012fa886d53fb1f1e7d14635b97","sha1":"03c77a04fecbca19d5555d6ae876291d3b7973c1","sha256":"4d271d0650a8fb32c6ea7055f6ab8e7edce63e3868aa0a7b4ba03b56f069099f","sha512":"765bec023e54b64c7c93cd75e55320bc5e524dc24b2fd474e5ca63dbcc2bf2106464ac13cb72ed3949816463281c3715ae4edd5e3a11befd0af2ee255c53e89e","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIUCdthXwW5l1Dx7:1GRFauOxLA/+IcTOULX1","tlshash":"d8838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-13T21:19:52.249776Z","last_seen":"2026-06-02T07:30:24.867535Z","times_seen":40047,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026bft=0dAFcWeA4LA4ZHwggzGq6uZkaanY4Qtxsfv51AxdDvj2GoJb2bU6ee_EASzGaGG7QFOqqk7LuTK7_qISrse3JHU8eotX56zp8F3Q","date":"2025-11-19T01:20:44.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42505\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Nov 2025 00:45:32 GMT\r\nexpires: Wed, 18 Nov 2026 00:45:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 88512\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82951,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7b035012fa886d53fb1f1e7d14635b97","sha1":"03c77a04fecbca19d5555d6ae876291d3b7973c1","sha256":"4d271d0650a8fb32c6ea7055f6ab8e7edce63e3868aa0a7b4ba03b56f069099f","sha512":"765bec023e54b64c7c93cd75e55320bc5e524dc24b2fd474e5ca63dbcc2bf2106464ac13cb72ed3949816463281c3715ae4edd5e3a11befd0af2ee255c53e89e","ssdeep":"1536:1fGNbFoZJSUYOOaLnAW8+IcTOIUCdthXwW5l1Dx7:1GRFauOxLA/+IcTOULX1","tlshash":"d8838f7338513b39fc2b9b616186b9edf22cc423e5514bfab5457a20c3db19a8253b07","first_seen":"2025-11-13T21:19:52.249776Z","last_seen":"2026-06-02T07:30:24.867535Z","times_seen":40047,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.21.163","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/bframe?hl=en\u0026v=TkacYOdEJbdB_JjX802TMer9\u0026k=6Ld3W_grAAAAAO0T4SR8RY07n4y_gqneelA3-hTP\u0026bft=0dAFcWeA4LA4ZHwggzGq6uZkaanY4Qtxsfv51AxdDvj2GoJb2bU6ee_EASzGaGG7QFOqqk7LuTK7_qISrse3JHU8eotX56zp8F3Q","date":"2025-11-19T01:20:44.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Oct 2025 08:34:57 GMT","end":"Mon, 19 Jan 2026 08:34:56 GMT"},"fingerprint":{"sha1":"A9:72:6E:D8:AB:26:CE:26:35:A4:39:55:24:08:04:0F:24:56:E8:8C","sha256":"65:84:7B:FE:24:02:CE:3E:DB:6E:1C:6B:B8:FC:99:F5:A5:65:83:F1:66:75:ED:20:20:63:06:ED:27:8A:82:FE"}}},"request":{"raw":"GET /recaptcha/releases/TkacYOdEJbdB_JjX802TMer9/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 355016\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 12 Nov 2025 11:18:14 GMT\r\nexpires: Thu, 12 Nov 2026 11:18:14 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 10 Nov 2025 14:52:55 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 568950\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831957,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (553)","md5":"2506e0d302c7bbd6654b091f44fdda03","sha1":"cddd2822fd20c3a5eaadae592bbe2c1f6d42e430","sha256":"ccdd2d231d4fc51186c484d940d8d7eff0e0ab787067fc8aa6a10f014deffa7e","sha512":"4c5dc8474d796a78832e9607760ad5389576ec4663bf02fd19217902de38fc06423d5bde421b68deed1842ee62d9ccd0eb521aa1fa1626c0f4160a456270a8c3","ssdeep":"12288:b/PieE69kbgh40LMuqHKQn6e8kSCvcFazia7Rbbck:s69mghUD4etS/Fudck","tlshash":"06052ad870527ae47772f8f684973018a33d9479d84c4a2eb1a4d4f42bf084ae276db7","first_seen":"2025-11-13T16:13:50.046413Z","last_seen":"2026-06-02T07:30:24.852559Z","times_seen":46506,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}