{"report_id":"f7ddcfaa-f107-4294-a3e9-d4746c8a241c","version":0,"status":"done","tags":[],"date":"2026-09-15T08:09:30Z","url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"title":"Business Help Center","dom":{"size":95997,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (893)","md5":"618f712f1b822b31c190a249c20a7dc8","sha1":"2e41f4825b5b24a55601084a6a4960638a7b73b2","sha256":"75f1690864e0e500d74439417d541a3ce04dd5e845a78b35086e6eff5be2fe28","sha512":"9161c3ce34f8910a84eaf9e04f1935193ad969677c9e5e0bd044612005abc6419660559f58150ccfa7c9c1f11a52f630ca2eeaf6b9f018974d5a283936d6eceb","ssdeep":"1536:xM4jSt05m3isBhI+DlHsbU7k2theGPswTh3syswTuswTdJZsk/Qr7:xM4mt05+EGc7c","tlshash":"4993c81a39ff0526665b507e3bdb5209363480036509de1c3ebd83489fc2e999eb2bdd","dom_hash":"domhash24dd3ea5c636c14e5d0e3a3d3087806d","first_seen":"2026-09-15T08:09:34.059872Z","last_seen":"2026-09-15T08:09:34.059872Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"104.21.62.202","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-20T08:09:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-03","domain_rank":0,"first_seen":"2026-09-15T08:09:31.59241Z","last_seen":"2026-09-15T08:09:31.59241Z","alert_count":88,"request_count":22,"received_data":1522711,"sent_data":13412,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6961867ee5d8aa621914405fd74abf4","sha1":"8728aec17360a52cab95701c4250bc1c8a3c2750","sha256":"597df1f8bb4fa14d67411c860b99e745c9789d16506a6d8869b06a57c5444f5e","sha512":"30222a709042a83f6447f1a345cc4731c828a7f519e6a9c1c9a98a166bb5a6826eb0959db88650286262c43ce693e5c4467f882054e250eac0afec88cdd71dc7","ssdeep":"192:SUil0pBi2CcLvizDW4qBFOVIwbqbN8KWsr7em8xkls9a39G959nECRsP8+p1fLP/:xioBiJeUWtfemNdOklsY3g56zPfH","tlshash":"5142a70a267912274877233b9b232185fa3ed41b2553d81d3f6d835d1fb1e244b9aeec","size":13049,"data":"","first_seen":"2026-06-18T01:40:01.515477Z","last_seen":"2026-09-15T08:09:34.074809Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dbc0a1ec0910ac706fb776b9dfc4f001","sha1":"d32fe75f5a993dc94761c67fec24a1f9bfc6eae8","sha256":"fc2663647567a76cbff5c3985d65cc2e7b5977553232c1e69aff0d9a77370b87","sha512":"1ed12ea15033e88090ec11ed0537e783bef2555a2d7991bd4dcfb6f88e8193b1d02d2d2a956abddc141e432c741068d6fcb3db938666cc9960315825cc1275a4","ssdeep":"","tlshash":"7e800083008800a2e23c2020020ba20823baac2e800f3aa08803228030aa2230282b83","size":31,"data":"","first_seen":"2026-09-13T20:36:05.775197Z","last_seen":"2026-09-15T08:09:34.092158Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"43bbc1b7fab4940f240b1d30f39e7cb6","sha1":"efeb7545957d7f618aebe68a3b079db59d863bf2","sha256":"ce283a84104d07ca166486d1eb6feba56cf4a7acb9bd72b507a348fb9fd8fa34","sha512":"ea0ee217b54235463b5ea77ebe3ed5a11c82bbe418fd1d5f0fca9e251fb9442ee2c0f03e598b9df787630d3303ab7fb8dbbca4a7c0b052b1ef3da0ec9eb2239b","ssdeep":"","tlshash":"4251f06d61a71c3152ab64e93bcf9344ba32a0537404980ab5be860c8ff2b995536fcd","size":2691,"data":"","first_seen":"2026-06-10T13:16:29.125035Z","last_seen":"2026-09-15T08:09:34.092714Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5f2c13fb3ce5f10b65e2ec835cf4e6f6","sha1":"b5b910f847488938e82ba15fa4a435341b370e91","sha256":"a688f5a8ae8f5cf5478083fff6aa13f239916fe3b2361d246555f06071ea9201","sha512":"8422d7b7265ee2a25036da25cc6a5007b2e0c115528b3ecab09403ceb3a04ab1edbe9e90dd1404ff833ab673bce16770f0ad8cd67104dde7cce51c6b1e4fb5f6","ssdeep":"1536:e3isBhI+DlHsbU7k2theGPswTh3syswTuswTdJZsk/Qrg:mEGc7V","tlshash":"8d53721a39ff113a079b607e2bcb2109362184172904de583a7dc3459fd2ea59fb2bdd","size":62350,"data":"","first_seen":"2026-09-15T08:09:34.093265Z","last_seen":"2026-09-15T08:09:34.093265Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/intro-loader.js","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b82c941c59d04a385fc919cf5056dbd8","sha1":"bdfa9fd1a3e1a3fc0a0c95a3276845ac1a3315c0","sha256":"73f1512c6cf05a2b3d9d728623ca9a1b2d605c7a9cf9f3edbe51febd63a2ce0c","sha512":"532472f7284ad13c810d186c336fca3b79592d2860f6b402db5e7d2687bce2896a0b02de618b9ad1dd3962bf4800408795e3092f46ddcdd21ef29238476f51ae","ssdeep":"192:y70Fm5/r5pwvR2Uqtx6iuvlpIHoPoOnbXRT:Lm5/Tw50giuH4ioOn7RT","tlshash":"ccd19565eb262278447b43b0a7358264ffaf546f72225268757dc3b1bf76c9880408ec","size":6316,"data":"","first_seen":"2026-09-13T20:36:05.768409Z","last_seen":"2026-09-15T08:09:34.066709Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"faf8207924ede51d8f11ce6a44164df6","sha1":"d1865c1fee44a27234dea02e5491e775f285cf92","sha256":"ce3d5062e4448336062a6f8a88d9f8936b6022c61dc3327ac7d5d2b9a9501ff1","sha512":"ea6e32022fa8d688be1ba0f87e35be2d756eeab4dbee0a0eda02eb6761e16bc868cbf8f6b7e05c18f75f5d8909b24c85102ad3ad1e480d9b17d0f6e47bba80ac","ssdeep":"","tlshash":"eff0e10872b72035c5b3a4314d9f52d43bfa45473101ee8539bc70100f11e7943745ea","size":580,"data":"","first_seen":"2026-06-10T13:16:29.126877Z","last_seen":"2026-09-15T08:09:34.094571Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[LangManager] Fetching language API:http://www.viewdetail1109yvsaxq.growthcrm-platf.com/api/get_language.php","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":49,"column_number":21},{"level":"log","text":"[LangManager] API response:map[actor:server1.conn0.watcher16.process8//obj28 class:Object extensible:true frozen:false isError:false ownPropertyLength:9 preview:map[kind:Object ownProperties:map[asn:map[configurable:true enumerable:true value:AS50304 writable:true] city:map[configurable:true enumerable:true value:Oslo writable:true] country:map[configurable:true enumerable:true value:Oslo, NO writable:true] country_code:map[configurable:true enumerable:true value:NO writable:true] ip:map[configurable:true enumerable:true value:195.64.118.152 writable:true] isp:map[configurable:true enumerable:true value:Blix Solutions AS writable:true] language:map[configurable:true enumerable:true value:en writable:true] source:map[configurable:true enumerable:true value:ip_geolocation writable:true] status:map[configurable:true enumerable:true value:success writable:true]] ownPropertiesLength:9] sealed:false type:object]","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":53,"column_number":21},{"level":"log","text":"[LangManager] Language:enSource:ip_geolocation","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":57,"column_number":25},{"level":"log","text":"[LangManager] Loading translation:http://www.viewdetail1109yvsaxq.growthcrm-platf.com/lang/en.json","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":92,"column_number":21},{"level":"log","text":"[LangManager] Loaded: English (en)","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":100,"column_number":21},{"level":"log","text":"[LangManager] Applying translations to1elements indocument| Lang:en","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":237,"column_number":17},{"level":"log","text":"[LangManager] MutationObserver started","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":282,"column_number":21},{"level":"log","text":"[LangManager] Applying translations to1elements indocument| Lang:en","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":237,"column_number":17},{"level":"log","text":"[LangManager] MutationObserver: translating6new elements","filename":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","line_number":267,"column_number":37}]},"http":[{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/HpEiFYDux5j.webp","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:15.047Z","timestamp":1789459755047,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/HpEiFYDux5j.webp HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 193546\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 31 May 2026 18:53:47 GMT\r\nETag: \"2f40a-6532199195736\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CX1gYzbZo%2Bzm6HFCqgQqkSIfiG9lZg0PucZYkzr8wZCZkvlbjslVBpk%2BMnW6DReee9H3r8tPYoDy%2F907Yq4B%2Fbsa7fLjDwVUoPoRuAIPRNFYivDUfSfQTDgxj1iZGYudchKhsERQVIWULf3jsBFmIPe8u%2FDeC343vbTocD5ZIA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625ed0a8f0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193546,"size_decoded":194272,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"14138bd70dd9dc9d5e59d2c9f94a2462","sha1":"8bfccfbdb378d0d019f6b15b7e8bd1d6b60ce850","sha256":"1eed452e2a650a014e75cade0f8faa5bac3a4eaffafb270b8ee73891c9af316e","sha512":"5e2d49f06413bd8239889b28cfcafec93360b029d266b0459843a3d0e41e7c81373d3cbe6692c18d47d12de9b304a6ca085e8235e27847b90e8ad3e8951f18a8","ssdeep":"3072:4fT2pZK6xAvvriIXKZ2CM+HGKv8daF595yTASgErg9Twy2V7WGQ2OS176:4fT8RxA1KZN9GKUdafLc9rgNp2dW52O4","tlshash":"b8141394f8f3eb13fd4db8f6688b188cb456d0611b3da86b4873fb5007e8667482615e","first_seen":"2026-01-31T13:07:42.73442Z","last_seen":"2026-09-15T09:46:50.76673Z","times_seen":4484,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/83zWJdc6PJI.webp","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:15.049Z","timestamp":1789459755049,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/83zWJdc6PJI.webp HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 177640\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 31 May 2026 19:14:23 GMT\r\nETag: \"2b5e8-65321e2bd83a4\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=geuIWz%2F2bsP9RrGhB0io1B54%2Bs8qEOZPDLZGk6Vmu5sc6ECqaSDNLIK%2BKEYP%2BLGRRQdWIE7RbrgmO7mtpbcj2zazEbuBWrMxC%2FZOlN33I3DwMrGrc8QqJgujEpwiU0SnK26q3jDN4U9xOKg%2BuD5RdMhNbXcILmk1ZS3wGNfyKA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625ed0a930b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":177640,"size_decoded":178368,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9d67bbbe36e2b132a361e8ab179c6de9","sha1":"6020669057705df2229e55abac2889347fc38097","sha256":"76b242e16492f563c762e8db9f30c462ae543dfa1292b137aab4d1cea1739adf","sha512":"55e7ff69c0b613adf4d1d53bac6fd2341aece74f52f9cc9eb32fbe2e1945c5fb8005313ecf4b1a18928023a26559babdca7d966b42a0abac5fbe191ace07ab06","ssdeep":"3072:6cFATRNgbS1gudxvklcPM6dMcJ8hmERFN3nDW5wiOIcKcmaCBme3DV3whPuY:6AAgm19dRklO39J8D33y5wXIcKcsVCPh","tlshash":"eb04121ae64fb639c5d67bf91ab8237e93e4888545c04fc43d8c162f6fbf5472682068","first_seen":"2026-03-04T19:47:53.377679Z","last_seen":"2026-09-15T10:23:01.555799Z","times_seen":4527,"resource_available":false,"data":null}},"time_used":2665,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":267,"receive":2398,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/U45qBJmWVHU.webp","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:15.050Z","timestamp":1789459755050,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/U45qBJmWVHU.webp HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:15 GMT\r\nContent-Type: image/webp\r\nContent-Length: 181500\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sun, 31 May 2026 19:14:07 GMT\r\nETag: \"2c4fc-65321e1c80e0e\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLmVoczVailBsmcxMhc6LrXzyBaVBBkwkDWs1C%2FxScwSHRo9ESxNPPTl3rrXnrfoTCCozM3C5n3c%2FO9tXvLvNQc5D2AhFBm6aZeGBNXjaonaxt%2FUSGkb79o0aXVUc9IH7eaWIlPHGb4V%2BCf13wEBEYtoC0ydASaEWcUH9M325g%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625ed1cfcb28a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181500,"size_decoded":182224,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f2298aefd3399d1fe0edec6ce26fa59","sha1":"2229ffc5e19703742292b7f6a3942dfd6aabc147","sha256":"141d76714aa87822291262f9ea967f67172cb5f8744fff844edb77bf19986cbe","sha512":"f18e1be7551c569e6a64beaa230d10110937d64ad61c7a3ab004ecab868a877264520f7af0b5c202cbcc477a0470809257255880f718826f7ebd294b0ef69059","ssdeep":"3072:jrQMBmaiTTvz/IS4jRm/DrZWiDEzow9BkwDlwBxUScc/hFaXmDENSMJJ1pSufqG3:jLBma04FUcSEzoOB/cxUSbstNFZ1qHh2","tlshash":"dc042383d32b1d15a39148b6eee707905f7421865fa01b8c241e2a90ecdbd63b7578ef","first_seen":"2026-02-01T20:49:54.671942Z","last_seen":"2026-09-15T10:17:28.405757Z","times_seen":4596,"resource_available":false,"data":null}},"time_used":2116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":555,"receive":1561,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/font/ea4876dcb7fb6c98-s.p.woff2","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:15.084Z","timestamp":1789459755084,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /font/ea4876dcb7fb6c98-s.p.woff2 HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:16 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 183220\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 26 Jan 2026 05:56:40 GMT\r\nETag: \"2cbb4-649442bb2b600\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tO4rZeP3UM%2BsaYXw3eov4zAU40%2FJvLablGHSFsnOc7zRp2EcoTJiBv%2BHSl%2FUsGFcQmvVCDdnexq7zMgZd%2B9Ug2TJk4bIbi0a16%2FOy1LTMxYHevPj1MMFg4kn2IrP%2BcQVPd1FF%2BVv4QN0ibk1Jz1qGmjDRK3xdxODRN70x%2FXh%2Bg%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625f0adde0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183220,"size_decoded":183956,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 183220, version 5.0","md5":"c0254118e3ebe12378022bfef999912f","sha1":"8ac9051c56091acd2b31036d8cd37bcf2f36aad7","sha256":"0dce730051c3b1526526743fc0079505bdf5454b79f6ec1c1fb2a7cb26350694","sha512":"2014dd6332c3b1e6e4691533e88e66651d227cc8091274beb7aead5766bee626d7332b90328b46c7a19a5874ce9d2db52436799af9ab1448e9aab7ae4139d636","ssdeep":"3072:f6pPcK94Pdr1Il6r0/2TDx3rIYZ5gX5GaShNqIXIzmp3YuYb8:fdK6Pxx0/2TDx3sYTgpGX5IzmpIud","tlshash":"a20412816bd0a4c5342cf6c5caaa33fc845955e4b2de4c4dba3abbc90670da7950ee43","first_seen":"2024-12-03T17:14:56.617992Z","last_seen":"2026-09-15T09:52:51.348334Z","times_seen":27573,"resource_available":false,"data":null}},"time_used":4955,"timings":{"blocked":539,"dns":0,"connect":0,"send":0,"wait":658,"receive":3758,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/mb-logo.png","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.413Z","timestamp":1789459747413,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/mb-logo.png HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T09:51:43.211859Z","times_seen":18473540,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/icon1.png","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:11.225Z","timestamp":1789459751225,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/icon1.png HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 16039\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 17 Nov 2025 22:37:57 GMT\r\nETag: \"3ea7-643d1ffb37537\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRr%2BbhmTjLCNb3y3NuXqOKxQ3axYAqaVho%2FoMuGwEkTzcX19k1JnuZIH82e%2FH9B2V9pS2vTE0YRRu49rCa3i42oJxsIURKvirUsy1nW2HYAdV%2BNiWAI%2Bc4L7wOsylIPrMqLwsNlCfnVcs3PEb8BERKg6HreG%2BlTiz4sRaBvF%2Bw%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625d52c56b28a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16039,"size_decoded":16766,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8c89ef8ab45d47ae9a954822532889f7","sha1":"f3ec45e63fff1ba1a6e0f721c0a8b269cca5c099","sha256":"4f7e3281a94d1db4d397040fcf20a21e6ae0c3119ae489b51c4de794985577bf","sha512":"e9df94e7037d13162b2b1582122a82cb71275be13aa0f2ab2711e9ea412e06c9e0a599d759f6f0eda42a1b31543279b9c78a01de2817b82336c07646bc984cd0","ssdeep":"384:SMMQ0rpZ0WhY3/hHmd0+62TWdvsqlWXJvSVc47rR:SMad7hYHKX/Tivsq4XJaV/N","tlshash":"4672d046a580c41b3375b732f4f2ae2994547b38122760022bfea667b1e7f4731e4f65","first_seen":"2023-10-15T14:22:15Z","last_seen":"2026-09-15T08:09:34.064261Z","times_seen":383,"resource_available":false,"data":null}},"time_used":3397,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":3393,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/8182940.png","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:11.232Z","timestamp":1789459751232,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/8182940.png HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:14 GMT\r\nContent-Type: image/png\r\nContent-Length: 11929\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 08 Jun 2026 21:37:23 GMT\r\nETag: \"2e99-653c4d0dc191d\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4YWpO%2BFuHAnbB6QPJbL6ODGOMXmRMju12ggzpxB8OJeL2WOQU5dKNiBgIx0KbGfBdhu5IrOSj9%2BC8IR8ZPY%2FOuDCazH1AUiPzcNEGYqCWulGnWkG%2BvVesuYQnyHrtBPLKFnw0uWv1Zd2t0%2BbpKITO68L13HedTyib%2FwgzzoXA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625e37a0f0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11929,"size_decoded":12654,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"715f0aeef76775e747780fc822efa757","sha1":"72870a0271bc401fb4d59451d3555c86ed5a5b7c","sha256":"8370db1cdbdc34ee4a24e343c4b9660c903d5eb4709ddb1a41b373dd33e12ac3","sha512":"2074bfda0f5282e7f129ca05752f8fde58b25cfc1106297b189e3460e696cd121763b3007218c0c115c5ffd299dd254fd12157f54d4b67368b1e57c1615a6142","ssdeep":"192:O4muPSn02XpBa/3J5N5FqmRM5eXLXEHdJF7qZ3TYaBleKt4naiuuRt59iKrGIZ61:nK5BaDVqmg+MX7qZjnBlhFiX59iKfZKZ","tlshash":"f5329ebcd7bfdc6b2975211cdcb1b5d8614249fdc4706ec83168aa323da978809677d0","first_seen":"2026-06-10T13:16:29.109787Z","last_seen":"2026-09-15T08:09:34.064848Z","times_seen":20,"resource_available":false,"data":null}},"time_used":3055,"timings":{"blocked":2278,"dns":0,"connect":0,"send":0,"wait":526,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/font/9c18eba18d4baf22-s.p.woff2","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:15.082Z","timestamp":1789459755082,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /font/9c18eba18d4baf22-s.p.woff2 HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:15 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 36816\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 26 Jan 2026 05:56:40 GMT\r\nETag: \"8fd0-649442bb2b600\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FDVh7gTO%2BYXW5i8%2B0A2BWyq3h14hmKqUuBdRP%2B7P0jieLAvy3HwzfUk2qXBotq5at00mcl3drUbIA1pNAYypyFmOMUt51j1h64OFIOdWMvkRjiAGvZxyJ4fEiKPw52TX64rgUp8DP953DHsZ%2FYfTYnbl83hsoeVBczNt4ckG7A%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625ed4dbab28a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36816,"size_decoded":37540,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36816, version 1.0","md5":"adca4a2ea72db51191908ccc475ec06c","sha1":"5277886c8e3d7d6d20a7ff04f05a9f6c86741035","sha256":"d9075ef709afe117129ecac9de13564e4c2c1781a43c79d22c598600272c7669","sha512":"c688703f7ad7cf5fc4e5915924a517d11dd6e0ece7885b6ac2b7f5775ddc08aad530be5ecff43e0900b9040f1347045f7e71accdb047821357e0b628de863198","ssdeep":"768:1u3tPM+SbUiYj8TRnEUS9mxLI/tMI+sM/qhfw6OqwZUOd1:M3G+Sd3nE7mNI/tM5shOrZUOd1","tlshash":"5ef2f1228abd1968ffe60561d43c39c0e1f5eee0b5892ba1d0631f8d094be657a1c847","first_seen":"2025-06-11T09:19:37.42641Z","last_seen":"2026-09-15T08:09:34.065421Z","times_seen":893,"resource_available":false,"data":null}},"time_used":1404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":806,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T08:09:02.958Z","timestamp":1789459742958,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-15T09:51:43.211859Z","times_seen":18473540,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/intro-loader.js","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.402Z","timestamp":1789459747402,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/intro-loader.js HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:08 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 12 Sep 2026 07:30:35 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1cPGaWcPkDDBaXNgy2PdKq68D1%2FTx6RBcGg1RCb0%2Bw758HvQgI7lyvU6liYnK7vx%2B8WuNZxtcbdiLHZi0%2F9%2BEFnGInRfldu8QcZ84StGJU3xCX%2B23ESHV57EZJGP0dTVuNYdv6MWo5IYFGApYo%2BnWcBHUT1X0IuGJwltknCVg%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nETag: W/\"18ac-65b442d3c4885\"\r\nContent-Encoding: gzip\r\nCF-RAY: a3b625bd4f740b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6316,"size_decoded":3783,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (740), with CRLF line terminators","md5":"b82c941c59d04a385fc919cf5056dbd8","sha1":"bdfa9fd1a3e1a3fc0a0c95a3276845ac1a3315c0","sha256":"73f1512c6cf05a2b3d9d728623ca9a1b2d605c7a9cf9f3edbe51febd63a2ce0c","sha512":"532472f7284ad13c810d186c336fca3b79592d2860f6b402db5e7d2687bce2896a0b02de618b9ad1dd3962bf4800408795e3092f46ddcdd21ef29238476f51ae","ssdeep":"192:y70Fm5/r5pwvR2Uqtx6iuvlpIHoPoOnbXRT:Lm5/Tw50giuH4ioOn7RT","tlshash":"ccd19565eb262278447b43b0a7358264ffaf546f72225268757dc3b1bf76c9880408ec","first_seen":"2026-09-13T20:36:05.768409Z","last_seen":"2026-09-15T08:09:34.066709Z","times_seen":3,"resource_available":true,"data":null}},"time_used":3799,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":3795,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/photo_2_2026-02-12_01-09-06.jpg","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.410Z","timestamp":1789459747410,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/photo_2_2026-02-12_01-09-06.jpg HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 42150\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 11 Feb 2026 18:09:06 GMT\r\nETag: \"a4a6-64a90449a53d5\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6dlhL%2FLlp4gLOywYUSOe5VbVyumMOqeuZ3NZMMh0FYR%2F0bu1UdNPYDH7dCSbw7ttzfGhTFeOiCpA475tUiilxV7aa1QTyEU0lBFkCuMVCYzT9HmmFwKxVI4lHrqv6%2Fq%2BWAQW%2Fbzk2Rl0IAguLkaW9zkWsyo0jzChfQKGHbrbVw%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625d50d9e0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42150,"size_decoded":42874,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 1280x560, components 3","md5":"a059aed8e8811631e34e918b89e2254d","sha1":"2394ff6132ed8f914b4f86beab2de060bf54030f","sha256":"1df503ee25d598f6b8baa44c00db50cb9ae57a4519fca0b83d0e605ef9e4cc8f","sha512":"9efd68ce1610be127b027e45553cf5b9ef4a4b84383e20d87597cc5cf9178b721dfff2d4d62a614a9a38bde91e627897682fece9e203c0b86febab9b633124eb","ssdeep":"768:9FAouOlk/7bOSe1egpQt9tslN6hBBkcr5y/PemGW/6r+ru2ancEq8fg:l7q/POSWXpqtslaBqtXwWCaS2me8I","tlshash":"6d13f2c99a833d5de06975753fdb5b02da60fd5089a6af0e08833f2732dde096d2b142","first_seen":"2026-04-08T09:11:49.857765Z","last_seen":"2026-09-15T08:09:34.068041Z","times_seen":56,"resource_available":false,"data":null}},"time_used":7499,"timings":{"blocked":3787,"dns":0,"connect":0,"send":0,"wait":3707,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/logo.png","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.414Z","timestamp":1789459747414,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/logo.png HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:11 GMT\r\nContent-Type: image/png\r\nContent-Length: 143353\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 17 Nov 2025 19:32:52 GMT\r\nETag: \"22ff9-643cf69d3097a\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fdD0%2BfAMdpYcc8OvN3Y76MAxTCeivm%2FBobZzL0ZjsK2m4BJW8zXSsJFvV5ZlK%2B9eXhwVx0V%2Bo2kl4D9VTeGs5nbvuB8c%2B0Wtysz4OvDSjg73RZ0%2FxODfVIzNKNgamdtQvQAymoqLhwde%2F1kWKcnLGd8sny1kWql9OhtXVm5vew%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625d50d9b0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143353,"size_decoded":144082,"mime_type":"image/png","magic":"PNG image data, 1999 x 593, 8-bit/color RGBA, non-interlaced","md5":"593d3d0ff848673c74b0f38bbea23079","sha1":"0851c1a5278b09b01f3bf5602bf7fbbdc1f26d68","sha256":"9b5dd4a19e9835b8a0f4043c0bf3ed8e99022fc51f7428a0f662cd3f271ae915","sha512":"03a179ee167227f0d81583be6bfb63acfb0d9550edfd350a15fcc0a6dda6bb2e64f7c8cf8188fb613070de95086a88e7d3af8dab722ee4af6518c3fdb7c995f2","ssdeep":"3072:YGILGsZRAXFD/CQulSPSNUET/nzOwAOkjg3P:hsZ4p6QudZTrOBA3P","tlshash":"64e312b3464148bae998fbf861d30533d43fa3a780e08b5119d50c25f9a3caa95fdd27","first_seen":"2026-04-08T09:11:49.859714Z","last_seen":"2026-09-15T08:09:34.068403Z","times_seen":56,"resource_available":false,"data":null}},"time_used":6010,"timings":{"blocked":3785,"dns":0,"connect":1,"send":0,"wait":588,"receive":1637,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/icon1.png","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:12.128Z","timestamp":1789459752128,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/icon1.png HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 16039\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 17 Nov 2025 22:37:57 GMT\r\nETag: \"3ea7-643d1ffb37537\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzGab8QPe3hxAodW9Mnx8ljLq3f3zwWPHqGnMlaBeuifZVdH7eOG%2FsoTc2TGoUTe6%2FY%2BKzGOoCFOPcwae8uX%2FPa6SGpDSah7ih%2BM01OcBxueWP1smyAkpjK5S0W9sDkyTQLYaxIYOVY7RpFohsPkX1P9G8AeUFxp5g8U6v2EhQ%3D%3D\"}]}\r\nAge: 1\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nCF-RAY: a3b625e148190b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16039,"size_decoded":16769,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"8c89ef8ab45d47ae9a954822532889f7","sha1":"f3ec45e63fff1ba1a6e0f721c0a8b269cca5c099","sha256":"4f7e3281a94d1db4d397040fcf20a21e6ae0c3119ae489b51c4de794985577bf","sha512":"e9df94e7037d13162b2b1582122a82cb71275be13aa0f2ab2711e9ea412e06c9e0a599d759f6f0eda42a1b31543279b9c78a01de2817b82336c07646bc984cd0","ssdeep":"384:SMMQ0rpZ0WhY3/hHmd0+62TWdvsqlWXJvSVc47rR:SMad7hYHKX/Tivsq4XJaV/N","tlshash":"4672d046a580c41b3375b732f4f2ae2994547b38122760022bfea667b1e7f4731e4f65","first_seen":"2023-10-15T14:22:15Z","last_seen":"2026-09-15T08:09:34.064261Z","times_seen":383,"resource_available":false,"data":null}},"time_used":1078,"timings":{"blocked":1034,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/photo_1_2026-02-12_01-09-06.jpg","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.409Z","timestamp":1789459747409,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/photo_1_2026-02-12_01-09-06.jpg HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:14 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 38964\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 11 Feb 2026 18:09:06 GMT\r\nETag: \"9834-64a90449a509c\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FVOvaGCaRenVIE0xwqoh3HKYGoPnQ8XskiIQSS4%2B8g8YWswMXqCMCeG45%2FuE4BwsBV%2BU90jNFpAn7NE86R7Rox8P2nqmKh886DQgkEdI1vt7jcey7gqHRHYAu2z3YjilDjNzZs5wuvcDPO23L7gLFcj5sjNWdBDc86Ci9gHnwA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625e84e7f0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38964,"size_decoded":39684,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 1280x560, components 3","md5":"19c3e4de1fa989fe79eee17876b1b3c3","sha1":"19753f8416d9a48ced83ff9569dfe9005965e8c7","sha256":"959636c32991f10e8773fa2315a79b26759e1f6eb455868f3a631c3dcb9f8a67","sha512":"f08c784e378125406e63ec5fa4004faf27ea4e261e5d5894a3edc6de71fbf15b5105437a2d083ce2c0e80095413a39d4f4c20f2b26c2562581c689478d16172e","ssdeep":"768:dDhuBVLPVZa0fFPzaaI4xZrSjGrsCBuqRu8GQOf65MJ4+:dDMdNZFPKAZrSMzu4OyMJ4+","tlshash":"8603e141ca3e5677ecde163561ddc9b0f2227a0d97c00f0f31ae16caac7671b58da921","first_seen":"2026-04-08T09:11:49.852683Z","last_seen":"2026-09-15T08:09:34.068905Z","times_seen":56,"resource_available":false,"data":null}},"time_used":7430,"timings":{"blocked":6872,"dns":0,"connect":0,"send":0,"wait":307,"receive":251,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/photo_3_2026-02-12_01-09-06.jpg","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.411Z","timestamp":1789459747411,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/photo_3_2026-02-12_01-09-06.jpg HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:12 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 39435\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 11 Feb 2026 18:09:06 GMT\r\nETag: \"9a0b-64a90449a53d5\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=axZWP1xsB6yCj1rjVTy4xoPdG0jTkGcwgKsFSyt4UIUuZ7j%2Bsa4Pk7JoXCvl3obBwgytQ4rCMgnaw6e7Jv7PMfezfoqCkxRcNG%2FQkb7Am1%2BwosZGTeXalOTrQo2VyGvXQjHKp8kpmG2fmfs%2Fj5e%2FPpIE%2FHkutViPm6O5ZQ3izg%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625d50bc8b28a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39435,"size_decoded":40161,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 1280x560, components 3","md5":"c9dc97d2e01d7c6f084c6eb832394d8d","sha1":"4a16071bc94f58f2f95b86a5938b2ebcd7fd67ac","sha256":"3d94e6d78f27da9aeff8e046f81febdeec3735bdbea048fd77f5e3a67ce90131","sha512":"c52845214a99979c7bcf486e22da849e8e8f2df33c40489dc825ac4e29134e501c09800b03f427233e4553f99af11bff5d0ec5316a1c6573e375ebcc6412019b","ssdeep":"768:aGOo8tuiC/YatEHrMiZ4TuGSfLb5i+aiw26qLUqMfTdnsR0o:riC/Yatbu4TnSZGiw9qGfxo0o","tlshash":"b403f10eda7d9408eb6c90b636cf4a09f4bff4f032132a0c589b115828dba947f9971d","first_seen":"2026-04-08T09:11:49.865335Z","last_seen":"2026-09-15T08:09:34.070342Z","times_seen":56,"resource_available":false,"data":null}},"time_used":8486,"timings":{"blocked":3785,"dns":0,"connect":1,"send":0,"wait":4696,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/api/get_language.php","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:08.230Z","timestamp":1789459748230,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/get_language.php HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nX-Powered-By: PHP/8.2.12\r\nAccess-Control-Allow-Origin: *\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V6584X5njy%2BiW6d4JcdMcwtnHS84MVMbFyjvqK6HgPoYkbKdaAMT3dea2G4PExRI2O2U134WDockLMQzSLsRnk6n%2Fn8XNvJIy6nGACPw9gwJMT6%2B744Nq4k0X4L4CeYBptIO49DVm1c248UaBNtYp%2F2WGEganBkincqoUH5GCQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nContent-Encoding: gzip\r\nCF-RAY: a3b625d50d990b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181,"size_decoded":846,"mime_type":"application/json","magic":"JSON text data","md5":"827a38a9cfe859a34c1697c83b3e00b5","sha1":"5839e9ab5e29aaee5d0dc8854590d03db22d23e7","sha256":"5392457b8e414a123d083695cf33de5fed08b5aef05e66323076557dd1b1892d","sha512":"0f0b223aee3bcad734937e5971cc8b7225e2ec716bc0ef13621d5a7e39f737aa237af021b98b51c1feb43c66339031ad9031115c63dc4654cb76842dcc78fb2a","ssdeep":"","tlshash":"b5c0228b00742e04b8230788101aac2632e51284e244c8829ece3b1cca402ccb003165","first_seen":"2026-09-13T20:36:05.774151Z","last_seen":"2026-09-15T08:09:34.070857Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4931,"timings":{"blocked":2971,"dns":0,"connect":0,"send":0,"wait":1960,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/8182940122.png","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:11.230Z","timestamp":1789459751230,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/8182940122.png HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:13 GMT\r\nContent-Type: image/png\r\nContent-Length: 269520\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Mon, 08 Jun 2026 21:37:23 GMT\r\nETag: \"41cd0-653c4d0ddeeee\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rZoDSsOk3N7gZAsTHUa3oQG2SexbCyDzmm57H7MMVq%2FiZzIr7lm5rGDtX7VxN8HNmSaOThCAONDVtXVItNLr0iS715tqZQ5EcKK8gFHm87Jq4WYuRaESat59kOra2h3GUP3JK9WmeU4NiXxc6FLfr2M93L5jVq7spaaUGYiyg%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625e2e9a30b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269520,"size_decoded":270237,"mime_type":"image/png","magic":"PNG image data, 960 x 960, 8-bit/color RGBA, non-interlaced","md5":"76e7091fe174245f9c5b7a7e8a6b86a8","sha1":"3e3c65f8a8835910a4409008ce39cdb7d5a95116","sha256":"c12bd2d00a4b6431afd956cfc59a6a8afb283e8c7a80c776cd565eafd7eff48f","sha512":"ed427e585ce13ed772d9b729e57ec325925183d79c4743c8cf11f1cd783b55d8b53704212cd2018373afe9933d1b93601432ded2ef4724642ada62f3888d42bf","ssdeep":"6144:K9/shoI/H4wK6hBOlIv9MVnRJ1TyHAzJcwrcLKTcvBhxL0:KRshHXxu0mvYgzJcCcLecvBhB0","tlshash":"8744235ed950d4f3fcfb033a2757cd31941284922ca45a298d4ec2be862bbed18503bb","first_seen":"2026-06-10T13:16:29.112684Z","last_seen":"2026-09-15T08:09:34.071791Z","times_seen":20,"resource_available":false,"data":null}},"time_used":4755,"timings":{"blocked":2195,"dns":0,"connect":0,"send":0,"wait":555,"receive":2005,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/lang/en.json","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:13.177Z","timestamp":1789459753177,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /lang/en.json HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:13 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 13 Jun 2026 07:25:22 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xsA7pjrNa5Rl6%2BJ%2Fr3q9apOxECgx3MIV7DDgHs0d71IMqCkhc94etVcTWfK9w1nOi7rfmr0bNmBr0VWqeYRnC686j2ed3OBqAUEjbv2odDio7DyNqV%2FipC02rDH5yt5XICwVS%2Bk4UlmSMJknU1wVdVBTvWYVRFPi1vqUYdFkPA%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nETag: W/\"14bf-6541d7f11d66a\"\r\nContent-Encoding: gzip\r\nCF-RAY: a3b625e1886a0b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5311,"size_decoded":1952,"mime_type":"application/json","magic":"JSON text data","md5":"361d4ded675b008fe6c778a926471b3d","sha1":"14ae1dc036ff690e3d2136b31c6e5810ab8e7296","sha256":"3dcedef7507c78bbd29a0717708a1284690b876a8c28a257ebcb20c27c49c83d","sha512":"d2a1cee1ac4b35a4d2b428a31f206dfc60903661e63b8803135d1d1ab2307e0371285ffdbb0ddfb6357777981a1334a8d4d12c45cc637304df0afdb0eab16c0b","ssdeep":"48:0X4i30O3VThmZrav9Hui66o+Qv01XLq+Qv0vJ7oMP233tHQvkLufS12:0X5EO3iakwQv05/Qv02Me39HQvHq12","tlshash":"87b1770bc6d14d6207f34111696a5986f1a6836f9b42391f3ebc921c0fbae79e7c21c9","first_seen":"2026-06-18T01:40:01.518572Z","last_seen":"2026-09-15T08:09:34.07297Z","times_seen":17,"resource_available":false,"data":null}},"time_used":333,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-15T08:09:03.019Z","timestamp":1789459743019,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:03 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nX-Powered-By: PHP/8.2.12\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pk1bxogahf29pCI2VBWZ%2FRlR1UIlQxk16tixblVPx4Ee3c%2FjFgM9MaTNmBiPpkbmQLuRmEIUffMrrReBnrkjbARm5cPdTGzDizejR7u%2BTiHbvBI3eYjeJxz5I18GmX%2B5AHSPGUcWpWNYe8mwFiOiOA%2BtVspeehRE%2FZ2bkYio9A%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nContent-Encoding: gzip\r\nCF-RAY: a3b625a218140b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.12","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87107,"size_decoded":17781,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (887)","md5":"a5de117ac16f2c14c79220f2b55eeaa7","sha1":"7daa46c4dd23b43407162971553faf428177f3f8","sha256":"e5806ea048a90f1a370c55f5593881c1cacd8b8caa49306ab0a52ab932720af8","sha512":"b36ed7a5d6a8ffba4b276d357a581e7a649f70b0f769ff8d52800301d3732c9f766ed8f3520f304faa453bf7deca350848e5a7bb5e9d76ab6473c1a2cc8ddac5","ssdeep":"1536:WM4jStpY3isBhI+DlHsbU7k2theGPswTh3syswTuswTdJZsk/Qr/:WM4mtpMEGc7c","tlshash":"7a83b71a39ff053a565b507e3bdb5209363580032509de2c3abd83489fc1e999eb2bdd","first_seen":"2026-09-15T08:09:34.073517Z","last_seen":"2026-09-15T08:09:34.073517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4280,"timings":{"blocked":-1,"dns":9,"connect":14,"send":0,"wait":4253,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/lang-manager.js","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.400Z","timestamp":1789459747400,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/lang-manager.js HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:07 GMT\r\nContent-Type: text/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Sat, 13 Jun 2026 07:16:02 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kfqWGwmJar1mm8PvaRJTbj%2Fq2e4o2rhIFUw4SecMQhwXC8o5svyFD1OwEGyp35UAa%2FzDdhovauUg2vmmsiyFFnF4F3ZU8DRw6515jHG9CQ%2BBenTlkTMfoqc8xcCacFFTpnVM14%2BqPGMo8HU6psAAOtVhGr4hkewdc9L%2B4%2BP2cg%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nETag: W/\"32f9-6541d5daafd02\"\r\nContent-Encoding: gzip\r\nCF-RAY: a3b625bd4f700b45-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13049,"size_decoded":4130,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"e6961867ee5d8aa621914405fd74abf4","sha1":"8728aec17360a52cab95701c4250bc1c8a3c2750","sha256":"597df1f8bb4fa14d67411c860b99e745c9789d16506a6d8869b06a57c5444f5e","sha512":"30222a709042a83f6447f1a345cc4731c828a7f519e6a9c1c9a98a166bb5a6826eb0959db88650286262c43ce693e5c4467f882054e250eac0afec88cdd71dc7","ssdeep":"192:SUil0pBi2CcLvizDW4qBFOVIwbqbN8KWsr7em8xkls9a39G959nECRsP8+p1fLP/:xioBiJeUWtfemNdOklsY3g56zPfH","tlshash":"5142a70a267912274877233b9b232185fa3ed41b2553d81d3f6d835d1fb1e244b9aeec","first_seen":"2026-06-18T01:40:01.515477Z","last_seen":"2026-09-15T08:09:34.074809Z","times_seen":17,"resource_available":true,"data":null}},"time_used":815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/img/photo_4_2026-02-12_01-09-06.jpg","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:07.412Z","timestamp":1789459747412,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/img/photo_4_2026-02-12_01-09-06.jpg HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:11 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 36144\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Wed, 11 Feb 2026 18:09:06 GMT\r\nETag: \"8d30-64a90449a53d5\"\r\nAccept-Ranges: bytes\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gwIn4%2F0LcjmBJP8fRH7CXt6W2Za86cSCgsL53EnLz6pVgMw97ALGLlUT2uaC%2B3Hix8q7zuuTNlBsNda011J6f7t3U1mwKtoMWbv1pRfdflCvzCNb%2BBQovnQiqiipGaNac4ijWvx0CSdkIlM%2BmFftmPzkaYbtjuUHdsXfESpGxA%3D%3D\"}]}\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nCF-RAY: a3b625d50bc9b28a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36144,"size_decoded":36866,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, progressive, precision 8, 1280x560, components 3","md5":"dffca814e81431b1f562f6a2e9266647","sha1":"83635874012ae0bb81e4b4a465948f9a7663a714","sha256":"7a78f12d83f85ddda069751ed916e859f19e11e0b7fd5bac14eb50fe8c699499","sha512":"2b443a14e4ec6a1a2cfdff207a79851815dc5e7b1e055564375fc6f12aad31f224d2e06f19f4bea7721d78077c4bdc38809b4932c6d774d9079c678875df725e","ssdeep":"768:ZYPNrlEWLlIvGgeCXWS6xCUbVW7bTOkJXTU0nWdn9I8s0Beni+PnOpyPdZ:W15EWLlIvxeUACWQ73OkhTbkYJOQ","tlshash":"f8f2f16381610b86cdaff93dd1e8a3d696623cf3db09e5bf66815822ca4885dcb92540","first_seen":"2026-04-08T09:11:49.837331Z","last_seen":"2026-09-15T08:09:34.090829Z","times_seen":56,"resource_available":false,"data":null}},"time_used":7591,"timings":{"blocked":3785,"dns":0,"connect":1,"send":0,"wait":3800,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"www.viewdetail1109yvsaxq.growthcrm-platf.com/public/login-form-v3.html","fqdn":"www.viewdetail1109yvsaxq.growthcrm-platf.com","domain":"growthcrm-platf.com","tld":"com"},"ip":{"addr":"172.67.138.232","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb","date":"2026-09-15T08:09:14.741Z","timestamp":1789459754741,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /public/login-form-v3.html HTTP/1.1\r\nHost: www.viewdetail1109yvsaxq.growthcrm-platf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://www.viewdetail1109yvsaxq.growthcrm-platf.com/public/index?ref=business-support-center-DASDFDSYUYEE43FJDSHFSDFsetting%25popup%3fclient_id=889943718806-ual26tplnot2ea8b7n5t4p77keo8eb\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 15 Sep 2026 08:09:15 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nLast-Modified: Tue, 02 Jun 2026 08:41:24 GMT\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cz7c5cS0Bupocr8%2FoTwpef9V%2FsDAxETKFyqbzwM8eeV0drmY4v%2F9ce2Qd9n5cabbJZ5utE8t3XFkovxemtwp5vn2H1BXsLHdelXQ8nAJPc%2Fq1%2FuOtJaFaiyx%2BfX95JWqG58J5om4jhdtgo7KUhDBuvQBu%2FZwSJH%2BsfmAPzSD7w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nContent-Encoding: gzip\r\nCF-RAY: a3b625eb2e85b28a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9790,"size_decoded":3618,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (316), with CRLF line terminators","md5":"bc506e4b4588f5c59e2cebc257ad84e8","sha1":"26bd774be981825aba6cb8a22a787108c5c0c42c","sha256":"3ce54d00413acf7a4bc5422b95fc37689854ba00c283e8a45fb68935fd8584b1","sha512":"66123386a5d9a0901f924fe2e274d901837d8804f46c88bfb91e2966c410dc29cacb93a9339af069f0e2e0a035bc606162f4bd1ec9450e42faa8f2e59bd629f6","ssdeep":"192:+38+dvnbfI2n9fofRcpYaMrjqbM9dH99W7ne6J3Zz5156VdzvdJ:FOxTV5CdzvdJ","tlshash":"9e12730594441a02b072c3b8fba7479aff784103d20241287ffca35a5fbba548666fed","first_seen":"2026-06-10T13:16:29.114545Z","last_seen":"2026-09-15T08:09:34.091506Z","times_seen":20,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-15","alert":"Phishing Block","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-15","alert":"Sinkholed","trigger":"www.viewdetail1109yvsaxq.growthcrm-platf.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}
