{"report_id":"fab4d6b9-0cf3-4096-9422-80eb452076e4","version":6,"status":"done","tags":[],"date":"2023-09-10T19:30:34Z","url":{"schema":"http","addr":"bozent.xyz/1Dz/988.html","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"bozent.xyz/1Dz/988.html","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"title":"Avira Security"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-28T07:36:34Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2016-07-26 11:37:06","last_seen":"2023-09-09 22:29:57","alert_count":0,"request_count":2,"received_data":7328,"sent_data":1106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1005,"first_seen":"2012-05-31 09:21:21","last_seen":"2023-09-09 22:36:16","alert_count":0,"request_count":3,"received_data":80139,"sent_data":1705,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-09-09 02:40:21","last_seen":"2023-09-09 18:34:13","alert_count":0,"request_count":1,"received_data":4198,"sent_data":449,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate-pa.googleapis.com","ip":{"addr":"142.250.74.138","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":1620,"first_seen":"2021-11-04 07:37:42","last_seen":"2023-09-09 21:19:57","alert_count":0,"request_count":1,"received_data":2285,"sent_data":526,"comment":"","tags":null,"fingerprints":null},{"fqdn":"translate.google.com","ip":{"addr":"142.250.74.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1156,"first_seen":"2012-05-30 03:30:32","last_seen":"2023-09-09 18:12:53","alert_count":0,"request_count":1,"received_data":87542,"sent_data":446,"comment":"","tags":null,"fingerprints":null},{"fqdn":"bozent.xyz","ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"domain_registered":"2023-08-09","domain_rank":0,"first_seen":"2021-03-25 02:58:34","last_seen":"2023-09-09 22:32:22","alert_count":28,"request_count":28,"received_data":340603,"sent_data":12977,"comment":"","tags":null,"fingerprints":null},{"fqdn":"threatdetect.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"domain_registered":"2022-01-28","domain_rank":0,"first_seen":"2022-01-28 15:40:10","last_seen":"2023-09-09 22:34:26","alert_count":0,"request_count":1,"received_data":1067,"sent_data":468,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ocsp.pki.goog","ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2016-06-13","domain_rank":175,"first_seen":"2018-07-01 08:43:07","last_seen":"2023-09-09 18:12:06","alert_count":0,"request_count":5,"received_data":3497,"sent_data":1665,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.VhLMa5Goqys.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp6Bt2OEGTMzKB1bcJzO6dB0ssCsA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2a011d1e599db8ef632d98330bb23af","sha1":"1424bdccf6af94e13cc47af4472870bf928a581e","sha256":"f057f2ea50996360cb788c5fc87da25674f5a3b48dc1d549440ae68817597415","sha512":"7fb278c439418c628ac8284a704cba94a4c871e1b53467a32505e8476f63cd8518e02ab2010f747cc3116ba3dc4e1769ed01219b08ab93bad444c96f3fe9e6a2","ssdeep":"3072:nc7sHasT2axh4pjA0cCkdxL7dxsduo9iOyoWo23wVX:n5HVT5TdxQ","tlshash":"5924f8d9b25271669263f0a5513f000eb17b689af8484dacb28cd8e26df4c5d01bbf7c","size":220812,"data":"","first_seen":"2023-09-07T23:01:32Z","last_seen":"2026-03-11T04:58:56.603062Z","times_seen":530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/translate6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcd546809170dd574eb37b989529f69a","sha1":"2e227e144e3b4bd68064354d8a7fbc61125f624c","sha256":"350baff99bbd3db6cdb8d741bc7f75fa333489ad5dcc641e2cfa0e11130e1920","sha512":"951853322e3b36e82db2ea08c0eff6520ba259599a0f4295db5f15129b412abd59b48d9667a70b24a647e22ac390362f2cdbd3ddff461472d7227689775733fb","ssdeep":"","tlshash":"1f21f15f3736902a00697caa97f798e87578661c01729a017f4ec44faf65fbc074c8d4","size":1157,"data":"","first_seen":"2023-03-07T01:03:48Z","last_seen":"2026-05-04T11:21:57.845345Z","times_seen":676,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/main6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3d1a3ef75bc5fb650046e4046059020","sha1":"e6fd3e861b9433207fa570140a008b3eccfecdae","sha256":"4958d4f4f54691bc9324b844b5b94f2667b9e54d66ac3b0623d547cca2d6d7c9","sha512":"2be9f4fc75963edd6428e71f4f91845f71f283371b9426fed888a347e7767b402005367d97bf8c87a065c57bc1c915d6ab4ba9f4d4c68e49b1987dde4d79a96b","ssdeep":"","tlshash":"e911ce5c71f9153f693a7e5c1a760040417bee4a50328480fc6afc9f55d9201dfa6ec6","size":870,"data":"","first_seen":"2023-03-07T01:06:41Z","last_seen":"2025-05-09T14:46:02.29008Z","times_seen":110,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/interactive6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb095e37cfd0a294021b3319e4d9c3d3","sha1":"833f8570d12f6610c95354bff402c17c001e1589","sha256":"9608b4961f81c8ac63d4222b83fa5452fc944eb66aba5e689c5738209319fe48","sha512":"8b262bf383c90c3500d8b789813ff4178ccf07bcf4834c47ce4c4d07972122453a95ea736e613a3334101dcf70e7ca3038d429857dbffb637a56727543d024a8","ssdeep":"96:z1RT1QuBO9aO9hJBKrlRzDiV0WsWS8K/aMgzZX8Z4qAa7zSKp8Ay1/3rbpJj1gDB:5lxBOGdYN+7DrzomhIovCOmCOW","tlshash":"b42234642d30e69a2364bb3d303fb9c9d8687c1a1981d173f81d74b41fa4a16f6fa570","size":10716,"data":"","first_seen":"2023-05-21T23:11:48Z","last_seen":"2023-09-10T21:30:35Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/_/translate_http/_/js/k=translate_http.tr.no.VhLMa5Goqys.O/d=1/rs=AN8SPfp6Bt2OEGTMzKB1bcJzO6dB0ssCsA/m=el_conf","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d041f42515e288ee6d39cc090d214aca","sha1":"c978411465149e582bd0c0eaf34e3028aa774ec9","sha256":"cda296864d23ad6329610f0b339dfaa08fc7808256d6a2e51d37e2d94c905990","sha512":"f87e1ea97a258a9a2f6e6c81072130dc3371698ad81d80e9d92379e1e3aff0abb02956774050d4790dd70bc77cab46b8128ef56fdb20fa32df95e88c12e7c8f4","ssdeep":"1536:X8ykCz8akPXbBLi/5cQsaaT7LLZ3CzUVlgyuUTZDZNiMcwNWFU8:XYjBLPa+LLlNixB","tlshash":"8383b889b2a27565c267b5b5413f000fb27f59a9f8084cacb288d8e16df094d427bf7d","size":86849,"data":"","first_seen":"2023-09-10T21:16:10Z","last_seen":"2023-09-10T21:35:25Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/jquery.min6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-06T09:42:12.089419Z","times_seen":125940,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/js.cockie.min6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9e9a54501fc6f6e8918b2c0f2a53981","sha1":"3d530e6c830ccba6284e79c7245bb45d6f4f2197","sha256":"491fdee141835401d29318ca584ac3e91a38c92d8694f26d90883bfc324ca454","sha512":"d824d6dd64e863e6663a07987873ac59bdb3b6f8cb2d5bd43cef1faa5512163d824f3359b88d23df113972b2fd74e630013d68575b35dccff11115336f7433aa","ssdeep":"","tlshash":"f541d0dd34556874217baab403bf144970b9ba550896c0a0bb0ce1b5573d836c297bfd","size":2198,"data":"","first_seen":"2023-03-07T01:03:48Z","last_seen":"2026-05-04T11:21:57.866547Z","times_seen":633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/988.html","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"39340ed980e518e463acdc15cbaf9838","sha1":"ac99cd17ade64ca462572e738d0268412e92c5d1","sha256":"c9152c86ec89b25480ded5b0ca68299feb51f8e51b7a32e321171e65d8dd5645","sha512":"a29ae015098c8db7426c31250600a608526d4f5072d4f90d43fdfa9c352bf416dd83dfb6cbcd3e81e1af1ad14b290b6e9f2d1ae4ecf4a47a52c2af37587dbbe3","ssdeep":"","tlshash":"5cf08c2abcf658254223a1b20e2f04242c36d2979437ca1cb02c14cd4f4ca5ce06d579","size":509,"data":"","first_seen":"2023-05-21T23:11:48Z","last_seen":"2024-08-21T07:23:32.373517Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/main6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.304Z","timestamp":1694374216304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/js/main6b42.js HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 870\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\netag: \"6375047c-366\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":870,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"f3d1a3ef75bc5fb650046e4046059020","sha1":"e6fd3e861b9433207fa570140a008b3eccfecdae","sha256":"4958d4f4f54691bc9324b844b5b94f2667b9e54d66ac3b0623d547cca2d6d7c9","sha512":"2be9f4fc75963edd6428e71f4f91845f71f283371b9426fed888a347e7767b402005367d97bf8c87a065c57bc1c915d6ab4ba9f4d4c68e49b1987dde4d79a96b","ssdeep":"","tlshash":"e911ce5c71f9153f693a7e5c1a760040417bee4a50328480fc6afc9f55d9201dfa6ec6","first_seen":"2023-03-07T01:06:41Z","last_seen":"2025-05-09T14:46:02.29008Z","times_seen":110,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/avira-white.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.564Z","timestamp":1694374216564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/avira-white.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 59078\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-e6c6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced\\012- data","md5":"15cac20be8d4fdd074e21a4a52604d2f","sha1":"fd4c43583bec2c7bfae3cb9feb2699abbc50c578","sha256":"d4ad291dfcf93d75db62260b5ba53ddda1f2a9c855a3019cf7ae52c3cd936739","sha512":"9d00724dfee9a39c9d94aaf5e64a936c8d9b7f7cea09502aff0b3fe6bbb003e3cb91dd0978e364f0578c3e6f9f76d6321f0bba5ef72faedaeef681f6f2d4a003","ssdeep":"1536:pG0/TCepNMZHGkd8dzpk8kr97KqLgB99wK9jX:pGPd8d1rkp2rH9wej","tlshash":"8843e0a4db516cc6c042da74b59817ee3fe785bc992af3d0274bc0b266cb488de158c7","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-01-28T22:56:33.454612Z","times_seen":67,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/logo.jpg","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.308Z","timestamp":1694374216308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/logo.jpg HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15758\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-3d8e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":15758,"size_decoded":0,"mime_type":"image/jpeg","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\\012- data","md5":"dcbaba5ccd82fe6d02fd206a21683030","sha1":"228eb47edeee4c4e17a564ff065174d9cdb221cf","sha256":"bb32a46a1eb78c4ce7504b42c1b4b7d1cc615bbb901ce6fae0fc77acc7e8dcb2","sha512":"c4d167c7e1c0cbb6f20df4faf5c9c277b1db867c1ca22812cbb777f24c344896df532e8cf8ace426166c823e95af5dbe9be8b9b6903757105e83819494b9ac1c","ssdeep":"192:plcrIFbO5URzRHz7wIe8xZwfBzA6bdJn6me13SyFk8+6Yhm8oLh5BbSsCuADkMrU:plc8BztnRAfiEb38eZhm9Bbw+Mk","tlshash":"6f62d0436177bb09693c37a8cca822fc4179d587ed26b45a1cd0297096535388dca7f4","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-01-28T22:56:33.45058Z","times_seen":67,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/icons.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.309Z","timestamp":1694374216309,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/icons.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1932\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-78c\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 22, 8-bit/color RGB, non-interlaced\\012- data","md5":"32fded5a952e60a48a879e414c590f24","sha1":"834e44460475c20ce9f4c801a4ccf53130749af3","sha256":"d712d6bf38edf55c605c2a568ce2de1caae95d26b00c02c4f9a1eed6f370d76e","sha512":"530d02d44a208c9c32921c3b1d7f4061fd1cbf20ce75982e836d06d91a784c80e497bb541966d1755081b761730504d80f7ce3fd16a64a8efe705ac0bfbcbc8a","ssdeep":"","tlshash":"d741e8c8dd4492015bd4dcb2e8fa18ba552aa450c6fcf175bbc9c5db18508f7444b9e3","first_seen":"2023-05-21T23:11:48Z","last_seen":"2025-05-09T14:46:02.302918Z","times_seen":21,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/menu1.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.310Z","timestamp":1694374216310,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/menu1.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1920\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-780\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1920,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\\012- data","md5":"b2b98941a9fe6bbcb6745989b3289b1e","sha1":"5fb8fce5934af6d3426a37eb58b9846fa80ead39","sha256":"d9efcb7b0f632cb3d2650c0c676b3c758f00c52f5d1cc5e7963dd456aaa03833","sha512":"ade562c3028541d06cc3056140f6b445c90c53f75b351fed0737c3a1e710465953b8fcf8c814b7d25e9c219434bda555145a8475f6874b861f4f4d8cd6b7dcbb","ssdeep":"","tlshash":"ac41f945ca60a600922e5ad05cea5033ef5f0944c5b478f4b8c5c80139707b744afbc7","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.292432Z","times_seen":109,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/menu2.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.312Z","timestamp":1694374216312,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/menu2.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1665\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-681\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1665,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\\012- data","md5":"bc32798c28d2145f979848809ba5f858","sha1":"7bc0276cd56bf6463113a9c5d33ea9aacbdb5f51","sha256":"7319ffc0fdb40740b07f1a286348fa0f29676127996481b6310f3dd7f322d4ee","sha512":"ddef5d0ae932a627c3e7fbe2b843622577f328eaa9538402d9653bcdb8a484866aaebace82a9a0278187fce5bc0f3da6af99722bcf6ffd2cbdfcade5aea16b4a","ssdeep":"","tlshash":"ce31ca45fa20a780db45d8917ddf5036a4338d40d7e0e966b88acc6b5cd41f9644e7c9","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.308076Z","times_seen":109,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/menu3.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.313Z","timestamp":1694374216313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/menu3.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1483\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-5cb\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\\012- data","md5":"860d945f4bba4b150b4c6300bdd87527","sha1":"4c3f11a2902bf437bb578871f7e27625f0ae6504","sha256":"bdca8ddc4aaf7200e8c215c5eedeae489626d9df23313578ac0cfe45854ea0c8","sha512":"083be21b74305bb592b919dc92b9b52113f4fdb728edfe3f899ca47285346b87efefa7cd69fa20cf90d737f3335035d8b627e9598d93686ce894ec5afe3361cf","ssdeep":"","tlshash":"f0316a87fac0751643cadb5228f62026951309c096e4e6babdddc41e08d52f719587c5","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.29511Z","times_seen":108,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/menu4.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.314Z","timestamp":1694374216314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/menu4.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1812\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-714\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 36, 8-bit/color RGB, non-interlaced\\012- data","md5":"7af58322b67083908a8519d74471f47d","sha1":"256a9119feb235759cf98f211bc6398f58c4ee43","sha256":"bfab83c5a6c9c62450668ba960527fc9b17ed316a52436f0f63fd1eedcd45a3d","sha512":"66c5b23e7e8d358a38cef0c86dc0bc33de0d5128bffe13a1eb3c1ecc0a95b2575ff67b46cfd23d87507fda75e691d5ae1f34fb5c793f7c3bad3598e922d0e13c","ssdeep":"","tlshash":"8b31e9c4b621f400b646d9812ceb50614032dd00efc0f86e6d89d1a72db00fb10bdbcb","first_seen":"2023-04-30T23:10:15Z","last_seen":"2026-03-28T14:25:07.256698Z","times_seen":109,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/check.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.315Z","timestamp":1694374216315,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/check.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1946\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-79a\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1946,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 34, 8-bit/color RGB, non-interlaced\\012- data","md5":"1eab4e4fb7a147352b0027c0e4df1fe6","sha1":"99e621180265541383f5c081cd6f7c77b7d21e0d","sha256":"a66a5ce08b112086075a336e9f18d5cea683143b552a50641971ef00d3895207","sha512":"85228f5df1a3cbf9bb129fd610e5c50daea7b91d76bad0889674b960eb71cb5407422b676464f4b4596185a0d60c8507a679b087cf30acdb09b1deb6924f41a6","ssdeep":"","tlshash":"dc41ca2a68a44901d647da8128c79473d8520d50dbe0fc5568cfc517c16a2b68a2fdef","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.296025Z","times_seen":109,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/icon1.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.319Z","timestamp":1694374216319,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/icon1.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 5928\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-1728\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5928,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 139 x 130, 8-bit/color RGB, non-interlaced\\012- data","md5":"fa6582524d715994e9d9036eca9b034b","sha1":"06cce1b23faba93959df12a9eccaa3d6f51341ce","sha256":"cf05a371ab1261c3e1f2785e26c95cc5869b37de15c9d48206e78a58894a0cdc","sha512":"39bdd9b8d3b6c4f6f6c6908cd8f2427ee3b2aca9c9a69ae67356b7a8afe57ed2ac006be19e99f5aef7635caf3e1a3a881fc322865f3e0a042718ff644983b9b8","ssdeep":"96:X42JeXNIlEDuI4dQCJJj1bgUkWWwR+argRf+GSTlLeEyVfasJR:XBeYj1bZkWWwfEQMEyBasJR","tlshash":"22c15c6a85877950106d91973cf838c74a571ae0edc1e4b2fd6988082a2c7fe09b5ed3","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.310647Z","times_seen":97,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/info.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.320Z","timestamp":1694374216320,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/info.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 1545\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-609\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1545,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 23 x 20, 8-bit/color RGB, non-interlaced\\012- data","md5":"7f7b44979afb15dfdc18e7d754c6d0f5","sha1":"7426889578a3a6f20f620611f7ea8d4dadaf3b87","sha256":"cb2eff4a1cf5f187eda87e71d6039f24af63844617a7f890070b9afd5c965a33","sha512":"3dc00931489a4a512c215b4efb6946b8f24da8dd1b0cbf4fac39f70febea2c53dab01112b489ee5719314fb20a890faa22cc91222afe7c86b080f8aafe6af84c","ssdeep":"","tlshash":"34319564eab03e809bc5e51079e5406799970a8097e4f179b8cad8162f321b905d63d7","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.303745Z","times_seen":97,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/icon2.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.321Z","timestamp":1694374216321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/icon2.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 4856\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-12f8\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4856,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 152 x 121, 8-bit/color RGB, non-interlaced\\012- data","md5":"a0f86853c68b824dd5c15b0fae66fdfe","sha1":"0c8ba75f1370ba3c10a309be4c1c96a5067c6098","sha256":"f58fdb3b3ba6dc0943458179df29efb7201b84ff2edbf03d9ad5cb26c4e52917","sha512":"8f22a1cbed22472fc7eb3020f48ecaf42d9a1590e98df125e30e98cc86df12feacaf5d82f2ec8bf4bbc205fe449fea530b37d426abb8c5cd94e3cea051c1419c","ssdeep":"96:+Uk42v4BvJr5mFcBsLZhIQKJ80fxn4Ukkj4Y8+a5wCm4j9qGFeEjSjapuATVVHy:+dns0FYsL/L0f6Ukkj4Y8I+YGlkSjHy","tlshash":"04a14b18d721d065124baa0e7de9f57bcb0b4105d028eae2f00f980a1ea96e9847d1da","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.285263Z","times_seen":97,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/icon3.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.322Z","timestamp":1694374216322,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/icon3.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 5904\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-1710\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5904,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 137 x 131, 8-bit/color RGB, non-interlaced\\012- data","md5":"8a07f71c9d0642e8b94bd2b9687c768f","sha1":"fb2f6f1a6a421101a4b10c315f340d0565709abf","sha256":"e77edd6c132664f48fb66468de2e1b5068d61e9f04e03d6a51668b14d00af0ed","sha512":"b47c59733af920ead022e840f93596fbe3178e53e9953a96ac86c47a7db35863875e5c90cdbc1cd95bbe3667c82255ecb9453015d88d37e8315c8760a6d52975","ssdeep":"96:H42Kj2m+OPEqG/b04Gm6ixvwu4rincHgY/g9ovMSqMW4Lu2UZ3GEOi2pton:Hs+OYT04Gmnxwu4riG//gylla2IOi2pM","tlshash":"c9c17d9494127a05a84ce9c1c5ddb923b59e41d4ebcce671988be9045c717f09ece3cf","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-05-09T14:46:02.296888Z","times_seen":97,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/icon-white.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.323Z","timestamp":1694374216323,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/icon-white.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2350\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-92e\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2350,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 33 x 42, 8-bit/color RGBA, non-interlaced\\012- data","md5":"f3714f02899353cb6c3b4dc7d223f74b","sha1":"b5772266a87d7a8d8b5fd5fdaa34b0afcaf8c72c","sha256":"8973d8cb17f938356a1421bc1e12eabc48a98231d2ebaf3fca0c04e60ed4f40e","sha512":"9fe7960209897538713d9f2e79cb20418eb0ddad45a1aaede4a8a6b2bd8a57179a6c5b42b847d80c5af8b705d6d18bea55cdbc4abd8e20abfbb3bb932aa6346e","ssdeep":"","tlshash":"","first_seen":"2023-05-21T23:11:48Z","last_seen":"2024-08-21T07:23:32.357178Z","times_seen":5,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/images/cross.gif","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.324Z","timestamp":1694374216324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/images/cross.gif HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 211\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\netag: \"6375047c-d3\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":211,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 29 x 29\\012- data","md5":"45b0c8a1e52d91e8cf84eaf75ebca9a9","sha1":"0e358b8571f9062dedfacd0c31d54179270153cd","sha256":"4e635bdab7a300d0ccb5aac26b4610a07ee1b33643578c1a4308e677d7eb595d","sha512":"26cba0a7705621d4481ec66b21bbbb390fc7d2fc5032286e1f6d5e2a2bb07ac39b14daad61782cdc4bbf1785f2f5e4f33a1864bf7450d03fce1183c13e964d1d","ssdeep":"","tlshash":"5fd0a761e943fa17e59105b0d625e55e82ba5004292472656957290b50d8406787b192","first_seen":"2023-05-15T21:48:45Z","last_seen":"2025-11-15T22:39:33.248638Z","times_seen":78,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/images/win_min.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.325Z","timestamp":1694374216325,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/images/win_min.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 128\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\netag: \"6375047c-80\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\\012- data","md5":"0bb86caf792dd7d24731c18cd37bb68e","sha1":"dda1e433a0eaf785b2aa2c6214d5e48cb82a3a25","sha256":"2ac27821ba64d645f36e2ad197492d30c11b10a032cc474554679555f4604622","sha512":"596bb05f2926273d35c4245f87ea3c278a60562e16a5af3755bf686ba836e5ce74088de278dfe4dbe4ea87b986f8191589b109e590f2989ef4d28a14319d46a5","ssdeep":"","tlshash":"d1b09bd1f3e56d94d55101b20454801094624b5545764a781b4f4d7d757c5154995605","first_seen":"2023-05-12T09:18:22Z","last_seen":"2026-05-05T14:33:44.215641Z","times_seen":483,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/images/win_cls.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.326Z","timestamp":1694374216326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/images/win_cls.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 293\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\netag: \"6375047c-125\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGB, non-interlaced\\012- data","md5":"9eb68d2ce05c151bda542a7a6356e22c","sha1":"baeeefe4a7ac657c10a5f081841015de1bcf90dd","sha256":"2d2b7040bc32b397c3c60d800de9aa7d86404f1874862eba61bdaa21f1523eb7","sha512":"46bcfb831a39b319bbd7a4626687d00b1327b26828f488a87f617dded744d404ed9e6fd6fd830af094976d1fec1873d3fbb35de7fd5ff3e731aed5f7ace162b0","ssdeep":"","tlshash":"f9e07dc6a795ed90b42201394541b814f0238131d20228596e86497d1b2402180c8542","first_seen":"2023-04-18T09:00:53Z","last_seen":"2026-05-05T16:36:52.206885Z","times_seen":488,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/images/ico_tray1.gif","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.327Z","timestamp":1694374216327,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/images/ico_tray1.gif HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 69\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\netag: \"6375047c-45\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16\\012- data","md5":"3ae573d079dcd1d2da4086f2c0c72c45","sha1":"e7c9dabec81379373476ed23168dcecb9b8c56aa","sha256":"9cce08ab28e94790cf78c87e37f8690acbc6c535e4b43ae7b38506b94538e107","sha512":"c1899b5e08f520b08e5f59ee380c5d108da99f2eaf5f1ef2fe6d078a1ecf92d83e0a86b98dd1e1bac7b3a360aceb9975d7815ffe3416954414a85fc487b2f513","ssdeep":"","tlshash":"31a00255cad056b9c51a2430058d581132445f96929d5191112b449daaa96370b69610","first_seen":"2023-05-09T14:36:54Z","last_seen":"2026-05-05T02:51:52.76809Z","times_seen":1099,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/images/ico_tray2.gif","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.328Z","timestamp":1694374216328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/images/ico_tray2.gif HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 377\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\netag: \"6375047c-179\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":377,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16\\012- data","md5":"c10bdec858cb0cf9e6cc5865d5925746","sha1":"697c095ed5509e5a5af0c5ebf2380662aeffc531","sha256":"b65b47a79e32335d9ca35ff59c6975d2b5808f84da0db88d11ce777b33e72ad9","sha512":"7f07c1edf29cbc427e655b5d3fbbd123228275c55f49ef4e5c0fc1a987f4093c4736fd2dbf03c873630c4ff983d4ca8090d8785d05d7b15b638ae55165984fac","ssdeep":"","tlshash":"e2e0eb038b02b2b6ed9c00765e3ccc252602a30cb2efd103835984c8b024a98063a02c","first_seen":"2023-05-09T14:36:54Z","last_seen":"2026-05-05T02:51:52.787599Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/images/ico_tray3.gif","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.329Z","timestamp":1694374216329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/images/ico_tray3.gif HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/gif\r\ncontent-length: 234\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\netag: \"6375047c-ea\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":234,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 16 x 16\\012- data","md5":"9ce99ec458daf212f9812a90f3fadd13","sha1":"9e3041bc91b79a17b52e0fbb6c2d0e2f905d98a1","sha256":"b0d335401c9fd5fac9991ec92edaf7865ff3a491ebe390120936c69796c3b753","sha512":"d1a4c2279ecaa2ca24515389cc9350ff872537dbc5cfc704f0896a83530d9f60650d979cb4da826e3a616ad74d21c5f0fc2781d08ab119393061bc49784af8fd","ssdeep":"","tlshash":"6cd0a756d9e09963db0c11b1f95d4d18751217a45edc06508a3e115470250b69b65051","first_seen":"2023-05-09T14:36:54Z","last_seen":"2026-05-05T02:51:52.755966Z","times_seen":1098,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/globe-alpha.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.404Z","timestamp":1694374216404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/globe-alpha.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/landings/209605/1618996856/css/style6b426b42.css?1618996856\r\nCookie: GoogleAccountsLocale_session=en; googtrans=/en/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 35670\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-8b56\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35670,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x860, Scaling: [none]x[none], YUV color, decoders should clamp\\012- data","md5":"568e089f59867948afa6685924507f18","sha1":"f53c14257743c858f817b9233748444c24c3b6f8","sha256":"16f7f871d2f26b47f061d3c77ae4ef13ec076671bed3ecafe44ccb3640af45e1","sha512":"bc30555dac7dec3d3ad1ddb665557d53e469e02201832dc0e31b9f9cf68df7de6efdd20cd4c718c5ed630267dd2a966a4ab45a02b59ace0f82549db9154b1b5a","ssdeep":"768:tA1SrdA/HASbXf9D3NX6XMzgVRQo9qRZ7f3TH4j7VA5vI:tAAEASb1D3Z6IA2ocZj395vI","tlshash":"90f202f2e0c7924840846efb88bb56c9d114f41b4a585fee9f0057e8bdead4f568c057","first_seen":"2023-04-30T23:10:15Z","last_seen":"2026-04-18T23:38:44.775288Z","times_seen":36,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/img/avira-white.png","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.564Z","timestamp":1694374216564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/img/avira-white.png HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nCookie: GoogleAccountsLocale_session=en; googtrans=/en/en\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 59078\r\nlast-modified: Wed, 16 Nov 2022 15:40:42 GMT\r\netag: \"6375047a-e6c6\"\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":59078,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced\\012- data","md5":"15cac20be8d4fdd074e21a4a52604d2f","sha1":"fd4c43583bec2c7bfae3cb9feb2699abbc50c578","sha256":"d4ad291dfcf93d75db62260b5ba53ddda1f2a9c855a3019cf7ae52c3cd936739","sha512":"9d00724dfee9a39c9d94aaf5e64a936c8d9b7f7cea09502aff0b3fe6bbb003e3cb91dd0978e364f0578c3e6f9f76d6321f0bba5ef72faedaeef681f6f2d4a003","ssdeep":"1536:pG0/TCepNMZHGkd8dzpk8kr97KqLgB99wK9jX:pGPd8d1rkp2rH9wej","tlshash":"8843e0a4db516cc6c042da74b59817ee3fe785bc992af3d0274bc0b266cb488de158c7","first_seen":"2023-04-30T23:10:15Z","last_seen":"2025-01-28T22:56:33.454612Z","times_seen":67,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"threatdetect.org/fonts/?font=aHR0cHM6Ly9ib3plbnQueHl6LzFEei85ODguaHRtbA==","fqdn":"threatdetect.org","domain":"threatdetect.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"Colombia","country_code":"CO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.401Z","timestamp":1694374216401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"threatdetect.org","organization":""},"issuer":{"commonName":"GTS CA 1P5","organization":"Google Trust Services LLC"},"validity":{"start":"Sat, 26 Aug 2023 06:01:40 GMT","end":"Fri, 24 Nov 2023 06:01:39 GMT"},"fingerprint":{"sha1":"56:3D:EC:2D:6B:CC:3F:10:36:7D:F1:A0:D5:2F:6D:55:FD:34:E6:BF","sha256":"4A:DD:6B:3B:D0:00:86:D8:A3:4F:4E:64:76:3A:49:FE:8D:1A:0D:02:82:6F:EB:D5:81:53:CC:CF:EF:39:D5:90"}}},"request":{"raw":"GET /fonts/?font=aHR0cHM6Ly9ib3plbnQueHl6LzFEei85ODguaHRtbA== HTTP/1.1\r\nHost: threatdetect.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://bozent.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=h%2FSEDxuQ8Gyqm3vIEKklw1SSbd70OksfeW9ool7VYEISDzFojFudQGo6SiAwoFa9nG3mYVkwhvNo47pGWCVM3BaVjgbnyMjmmR0Ies8MR%2F4F9ajvUTUgLqN%2B6hHip18PVIQr\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 804a15a48f08568b-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"data","md5":"56af15b7a265e4982c0c260c6bb73900","sha1":"636ba416d80152bf864aeacd3595219c0e34aa3d","sha256":"577509443effa7144dabaad1b6dbb8930ab752f068ed32870b0a2004d1af30f7","sha512":"7d4647962c0033d4b492bd64383c9b979814152a1965206b2323bb6af852f632dcf2112343641181c5163f6201698fc35939fe61dc3396945234ef9d1cb5e3bc","ssdeep":"","tlshash":"06f0d45655fc5173987e0d5c03cea70cb8c2b0ad15348627347c43d482959f8a37972c","first_seen":"2023-09-10T21:30:35Z","last_seen":"2023-09-10T21:30:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":47,"dns":39,"connect":1,"send":0,"wait":139,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T19:30:16.965303836Z","timestamp":1694374216965,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 19:30:16 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2493dac4863c9b8db5f23a37692ef71b","sha1":"cca29fa30ba8ee3a86a1ef6a7151244908dba399","sha256":"00b54431d117fc86713b52c9e0962a39b970d33e163f5551bc770ede78ab5efb","sha512":"f7553b2579e20fa8273d5f3c939a1fbae4d5ad9ec675fa604d6560e610058a755dd7978db963390acf90dcec9a24b375be2664048f3a7e21ec7a24764fbf0307","ssdeep":"","tlshash":"46f0d45655fc5173987e0d5c03cea70cb8c2b0ad15348627347c43d482959f8a37972c","first_seen":"2023-09-09T19:16:56Z","last_seen":"2023-09-11T00:01:21Z","times_seen":1518,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T19:30:16.967338241Z","timestamp":1694374216967,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 19:30:16 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2060521e966a6a20a0bf1ababc2286c0","sha1":"763ffc1aa1a10115e4a0526c747e9202dd085f16","sha256":"9532f54419572a700481f1d886fe5e95a277ad19ccd7b2df29b1d30f154f00f9","sha512":"f3e5679decf23a13475d1557ac37f8c86e2d48bbbb163a661ffcc156d49b8e6f9b7005a77a0daa00426a95f20913c573ed00d5a349a7fde5247caec4c8790031","ssdeep":"","tlshash":"58f0d4366df0c3329c1f4f551766921914543a9c9a781398343d9430db665b7a10c81c","first_seen":"2023-09-09T18:04:48Z","last_seen":"2023-09-11T00:01:13Z","times_seen":2197,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.920Z","timestamp":1694374216920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 3960\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 Sep 2023 20:35:52 GMT\r\nexpires: Wed, 04 Sep 2024 20:35:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 428064\r\nlast-modified: Sat, 15 Jul 2023 01:09:03 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3960,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (20367), with no line terminators","md5":"72d3a735ccca1027f6b3afba2c93e3a7","sha1":"67f8eff8d17334c59c28fc1753bf451527c7490d","sha256":"c8c845f55e2346b89894ce0df8185ee182359e096bf29987d5cf1f8a7391bef1","sha512":"ae70156d631f3539cd3e48a28eef5b161294fb43302dc2ac3543cf23bf3b7062bbae00e304fbb44a17a1d21e35f891cf5f1fc8126c6ff3abf698594eb85c7cda","ssdeep":"192:nvqx/EhNINclXsfg0SbQ8CqA3ukLWS7FzvQVMsKJIfIxIwRpTpeuHjPtcn78l:gM78SY3fj7FzouZJqWfRpTpdHjPtcnG","tlshash":"1d92882047aed01967efa82364d36dff71d444db90523ee9af5a7352cd821f231ea214","first_seen":"2023-07-17T21:22:27Z","last_seen":"2026-04-18T04:44:13.351963Z","times_seen":20169,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":48,"dns":0,"connect":7,"send":0,"wait":8,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T19:30:17.029791378Z","timestamp":1694374217029,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 84\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 19:30:16 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 472\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":472,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"2060521e966a6a20a0bf1ababc2286c0","sha1":"763ffc1aa1a10115e4a0526c747e9202dd085f16","sha256":"9532f54419572a700481f1d886fe5e95a277ad19ccd7b2df29b1d30f154f00f9","sha512":"f3e5679decf23a13475d1557ac37f8c86e2d48bbbb163a661ffcc156d49b8e6f9b7005a77a0daa00426a95f20913c573ed00d5a349a7fde5247caec4c8790031","ssdeep":"","tlshash":"58f0d4366df0c3329c1f4f551766921914543a9c9a781398343d9430db665b7a10c81c","first_seen":"2023-09-09T18:04:48Z","last_seen":"2023-09-11T00:01:13Z","times_seen":2197,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T19:30:17.049231418Z","timestamp":1694374217049,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 19:30:16 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"6177dcf0a4eb5ad573053fd1caca1572","sha1":"0127fcb5e3e6f18919894194eb2e5cad031d0c22","sha256":"b7375560b308d11b9bb7e01888d62afa373069aa912d7b9c2945251bfc1b9cdf","sha512":"99e93db17734ebcc193ddfadd43e4bb241178910ee70ab297bef92dc87debbe3bf78525fc4c3ecf7dcc8141375630cb25507dfa138eeea4e079a5c1b32fe68e1","ssdeep":"","tlshash":"16f0d44e7e782a12cc171f6d6de2dd13b006382e1ece5a11be75174415151fdd908c38","first_seen":"2023-09-10T18:01:30Z","last_seen":"2023-09-12T05:50:33Z","times_seen":2057,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.no.VhLMa5Goqys.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp6Bt2OEGTMzKB1bcJzO6dB0ssCsA/m=el_main","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.997Z","timestamp":1694374216997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:09 GMT","end":"Mon, 06 Nov 2023 08:22:08 GMT"},"fingerprint":{"sha1":"09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38","sha256":"51:9F:EC:84:6E:75:1D:8B:F5:23:58:A2:24:2B:C1:8E:91:C4:20:61:49:69:0D:3E:83:47:F0:3C:36:08:DF:BA"}}},"request":{"raw":"GET /_/translate_http/_/js/k=translate_http.tr.no.VhLMa5Goqys.O/d=1/exm=el_conf/ed=1/rs=AN8SPfp6Bt2OEGTMzKB1bcJzO6dB0ssCsA/m=el_main HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"rosetta\"\r\nreport-to: {\"group\":\"rosetta\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/rosetta\"}]}\r\ncontent-length: 77700\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 07 Sep 2023 19:21:54 GMT\r\nexpires: Fri, 06 Sep 2024 19:21:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 06 Sep 2023 15:12:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 259703\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77700,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2009)","md5":"a2a011d1e599db8ef632d98330bb23af","sha1":"1424bdccf6af94e13cc47af4472870bf928a581e","sha256":"f057f2ea50996360cb788c5fc87da25674f5a3b48dc1d549440ae68817597415","sha512":"7fb278c439418c628ac8284a704cba94a4c871e1b53467a32505e8476f63cd8518e02ab2010f747cc3116ba3dc4e1769ed01219b08ab93bad444c96f3fe9e6a2","ssdeep":"3072:nc7sHasT2axh4pjA0cCkdxL7dxsduo9iOyoWo23wVX:n5HVT5TdxQ","tlshash":"5924f8d9b25271669263f0a5513f000eb17b689af8484dacb28cd8e26df4c5d01bbf7c","first_seen":"2023-09-07T23:01:32Z","last_seen":"2026-03-11T04:58:56.603062Z","times_seen":530,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":53,"dns":2,"connect":8,"send":0,"wait":9,"receive":17,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ocsp.pki.goog/gts1c3","fqdn":"ocsp.pki.goog","domain":"pki.goog","tld":"goog"},"ip":{"addr":"142.250.74.131","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T19:30:17.127889065Z","timestamp":1694374217127,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST /gts1c3 HTTP/1.1\r\nHost: ocsp.pki.goog\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 83\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nContent-Type: application/ocsp-response\r\nDate: Sun, 10 Sep 2023 19:30:17 GMT\r\nCache-Control: public, max-age=14400\r\nServer: ocsp_responder\r\nContent-Length: 471\r\nX-XSS-Protection: 0\r\nX-Frame-Options: SAMEORIGIN\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":471,"size_decoded":0,"mime_type":"application/octet-stream","magic":"data","md5":"14bee7661a70e20720ccfc970f1da1df","sha1":"685187fc334995bb7d51766d5af831667d544c0b","sha256":"71d72c05430a03aea95e674c232e5b1a93612b0325d1092ba180d8880afceeab","sha512":"f3e94e5526ab7b0b44fd009ddbd28e86ea2b1c06c680a4d6bfe83f635b879e9e11192c78f04e6f5ae14132e3b5cb71a85b6e33f2b5877ba95840cfea23cd84eb","ssdeep":"","tlshash":"23f0d42699fd553358097ddc45b1d9f939103c0f1b688445743c545c925d1e86fc4905","first_seen":"2023-09-09T18:24:01Z","last_seen":"2023-09-11T00:01:27Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/images/branding/product/2x/translate_24dp.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:17.191Z","timestamp":1694374217191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /images/branding/product/2x/translate_24dp.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.TpYxICw8iG4.L.F4.O/d=0/rs=AN8SPfrtPftKEg7PtUwWauRCo_c976LPSg/m=el_main_css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 1842\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 08 Sep 2023 09:24:11 GMT\r\nexpires: Sat, 07 Sep 2024 09:24:11 GMT\r\ncache-control: public, max-age=31536000\r\nage: 209166\r\nlast-modified: Thu, 14 Oct 2021 09:08:00 GMT\r\ncontent-type: image/png\r\nvary: Origin\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1842,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\\012- data","md5":"c69c796362406f9e11c7f4bf5bb628da","sha1":"e489ce95ab56208090868882113d7416abf46775","sha256":"4dac0026fbfa2615dce30c0af12830863fe885f84387a0147b9e338f548d5d82","sha512":"d3ad560ed0fd29be7d2cc434694f09e5a6fbea8b29c0611aecb54a1b73b4d722c53f42a19dae9e3d5d358444e50fb8fffbc39d67ce751bdbc8c861f6f95d3162","ssdeep":"","tlshash":"4e31f9fd129220437101ade72165eef798347c15f412da60ce65ba389c9fe20ed9a619","first_seen":"2023-04-05T07:39:29Z","last_seen":"2026-05-06T09:46:52.742989Z","times_seen":59265,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:17.174Z","timestamp":1694374217174,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:45 GMT","end":"Mon, 06 Nov 2023 08:22:44 GMT"},"fingerprint":{"sha1":"AB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D","sha256":"77:0C:A7:91:B3:D4:7E:9B:DB:59:3E:12:41:B6:98:D6:4B:5F:6D:F4:B2:A9:F7:9B:0B:65:96:B5:8A:33:47:F3"}}},"request":{"raw":"GET /s/i/productlogos/translate/v14/24px.svg HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ncontent-length: 3340\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 05 Sep 2023 20:35:50 GMT\r\nexpires: Wed, 04 Sep 2024 20:35:50 GMT\r\ncache-control: public, max-age=31536000\r\nage: 428067\r\nlast-modified: Wed, 20 Apr 2022 14:24:23 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3340,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (6225), with no line terminators","md5":"2bd5c073a88b83ed74db88282a56ddfb","sha1":"d0ebfc376f8c6a44a8d4cd216817dcd7d0c33650","sha256":"ab5c23a05e39deed14d9d8262b0dce9f024f86105a27196cad37d14a3f516e09","sha512":"5c6c4a92e93fc0f6a675658cc84f6187fdebd3eee94efd07e24658736cba598f3bc7156b19834b13fb44c1d43fcb7df9fcca7f0a453037e30da76ba8f4b23b89","ssdeep":"96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33","tlshash":"c1d1e6f19309d815cd6a83d8cd9b8002aa1f25ddd50ac6cc7639fb3bd1a50eb1d2d7a4","first_seen":"2023-04-06T21:34:37Z","last_seen":"2026-05-06T09:46:52.724221Z","times_seen":63438,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":32,"dns":1,"connect":7,"send":0,"wait":9,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"translate-pa.googleapis.com/v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback","fqdn":"translate-pa.googleapis.com","domain":"translate-pa.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2023-09-10T19:30:17.294842138Z","timestamp":1694374217294,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /v1/supportedLanguages?client=te\u0026display_language=no\u0026key=AIzaSyBWDj0QJvVIx8XOhRegXX5_SrRWxhT5Hs4\u0026callback=callback HTTP/1.1\r\nHost: translate-pa.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/3 200 OK\r\ncross-origin-resource-policy: cross-origin\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Sun, 10 Sep 2023 19:30:17 GMT\r\nserver: ESF\r\ncache-control: private\r\ncontent-length: 1392\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: NID=511=dFljmaQnNHRlErZfPWHimt69AbQVs1FGObXtQ_ECNUbCe8VC0DRhqFfme-UaAPyT4MpHcpgpuJj3S4S4PkG4IvYv1pJFHMgx8lnLpfYMIVrowruvn9RpUcrcE-DfZbSkzh0FnJSw_Jpjj8ISNOf77Z-I8_rHkRLAa45h0p0OdZk; expires=Mon, 11-Mar-2024 19:30:17 GMT; path=/; domain=.translate-pa.googleapis.com; HttpOnly\nCONSENT=PENDING+048; expires=Tue, 09-Sep-2025 19:30:17 GMT; path=/; domain=.googleapis.com; Secure\r\nexpires: Sun, 10 Sep 2023 19:30:17 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":1392,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"a3eefe14b1b4698460d992bd1673a26b","sha1":"a2fca6ebb00b8bdcca3eda88654d02d2c165b9c4","sha256":"87514750a90cd70dd22c8673cfa80d804ef55840bd0755950af2118d8d218067","sha512":"5429abca1696b0ae6bb44f5b85a135499f5fd27aad20e66832e31bd3f70cb40712c04f725c474960c2fd4c0322d30844cc24751990e8245405c364bd67a5201d","ssdeep":"96:AglPfFi0m2HalEA0eSglPfFW80m2HalEA0S:AglM0m2ZAfSglT0m2ZAv","tlshash":"d87266bae9b50d9b6a5e65b416fa2a03306041d74eac3c053b0c0e4c6fdfc1e6c7169e","first_seen":"2023-03-07T01:02:06Z","last_seen":"2024-08-21T09:44:26.13646Z","times_seen":9136,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:27.219Z","timestamp":1694374227219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:09 GMT","end":"Mon, 06 Nov 2023 08:22:08 GMT"},"fingerprint":{"sha1":"09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38","sha256":"51:9F:EC:84:6E:75:1D:8B:F5:23:58:A2:24:2B:C1:8E:91:C4:20:61:49:69:0D:3E:83:47:F0:3C:36:08:DF:BA"}}},"request":{"raw":"OPTIONS /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-encoding,content-type,x-goog-authuser\r\nReferer: https://bozent.xyz/\r\nOrigin: https://bozent.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://bozent.xyz\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 86400\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin\r\ncontent-type: text/plain; charset=UTF-8\r\ndate: Sun, 10 Sep 2023 19:30:27 GMT\r\nserver: Playlog\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+269; expires=Tue, 09-Sep-2025 19:30:27 GMT; path=/; domain=.googleapis.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Sun, 10 Sep 2023 19:30:27 GMT\r\ncache-control: private\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T09:45:49.964441Z","times_seen":14729679,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.googleapis.com/element/log?format=json\u0026hasfast=true\u0026authuser=0","fqdn":"translate.googleapis.com","domain":"translate.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:27.219Z","timestamp":1694374227219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:22:09 GMT","end":"Mon, 06 Nov 2023 08:22:08 GMT"},"fingerprint":{"sha1":"09:AB:BF:F5:D0:04:69:59:E1:EA:AC:DA:8B:68:CF:62:94:2E:50:38","sha256":"51:9F:EC:84:6E:75:1D:8B:F5:23:58:A2:24:2B:C1:8E:91:C4:20:61:49:69:0D:3E:83:47:F0:3C:36:08:DF:BA"}}},"request":{"raw":"POST /element/log?format=json\u0026hasfast=true\u0026authuser=0 HTTP/1.1\r\nHost: translate.googleapis.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Goog-AuthUser: 0\r\nContent-Encoding: gzip\r\nContent-Type: application/binary\r\nContent-Length: 316\r\nOrigin: https://bozent.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: https://bozent.xyz\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Sun, 10 Sep 2023 19:30:27 GMT\r\nserver: Playlog\r\ncache-control: private\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+031; expires=Tue, 09-Sep-2025 19:30:27 GMT; path=/; domain=.googleapis.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nexpires: Sun, 10 Sep 2023 19:30:27 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON data\\012- , ASCII text, with no line terminators","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-05-06T09:45:49.966604Z","times_seen":517775,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/css/style6b426b42.css?1618996856","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.294Z","timestamp":1694374216294,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/css/style6b426b42.css?1618996856 HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Apr 2023 11:38:06 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6442759e-4492\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17554,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ae3dff730755241dddb0411dfb12ecdc","sha1":"150f9644b73917f95fdfa05651a0e7a68180fdab","sha256":"26e87e96a3a488425e5535ebf0f0bfe70cc231f0590a650a8c35ac5fe8296bec","sha512":"594a1436984dbdb8316d6f5d8dfb7af67120fc6d452d2e0703d1119a50b46b2ee6a835b3c1b3f687379dd2577a9844afa9d34b4eda4ae3259549d0307dedc15e","ssdeep":"192:lP4A3gFIEFLXwCcpOPd6FDn8fcLGYNb4mJg/0:lPwFvF7wCcpRFQcN4m+c","tlshash":"3d7275e79a6716047c0be4a97e5017a6a33d0007fe4fda2c67e2a18c9fc41f94177b98","first_seen":"2023-07-25T06:58:31Z","last_seen":"2023-09-10T21:30:35Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/interactive6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.305Z","timestamp":1694374216305,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/js/interactive6b42.js HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Apr 2023 11:36:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64427546-29dc\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10716,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (10061), with CRLF line terminators","md5":"bb095e37cfd0a294021b3319e4d9c3d3","sha1":"833f8570d12f6610c95354bff402c17c001e1589","sha256":"9608b4961f81c8ac63d4222b83fa5452fc944eb66aba5e689c5738209319fe48","sha512":"8b262bf383c90c3500d8b789813ff4178ccf07bcf4834c47ce4c4d07972122453a95ea736e613a3334101dcf70e7ca3038d429857dbffb637a56727543d024a8","ssdeep":"96:z1RT1QuBO9aO9hJBKrlRzDiV0WsWS8K/aMgzZX8Z4qAa7zSKp8Ay1/3rbpJj1gDB:5lxBOGdYN+7DrzomhIovCOmCOW","tlshash":"b42234642d30e69a2364bb3d303fb9c9d8687c1a1981d173f81d74b41fa4a16f6fa570","first_seen":"2023-05-21T23:11:48Z","last_seen":"2023-09-10T21:30:35Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/jquery.min6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.297Z","timestamp":1694374216297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/js/jquery.min6b42.js HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6375047c-1538f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86927,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-06T09:42:12.089419Z","times_seen":125940,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/element.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.46","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.559Z","timestamp":1694374216559,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 14 Aug 2023 08:16:28 GMT","end":"Mon, 06 Nov 2023 08:16:27 GMT"},"fingerprint":{"sha1":"5A:48:5B:27:A7:FB:0B:D6:63:83:8E:8E:80:DB:29:B7:2C:72:A8:8E","sha256":"44:0C:58:51:4C:73:7C:67:DA:A2:72:29:81:68:CD:FC:51:B5:79:65:66:F0:55:FA:55:C4:45:30:BB:DD:09:82"}}},"request":{"raw":"GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nset-cookie: CONSENT=PENDING+725; expires=Tue, 09-Sep-2025 19:30:16 GMT; path=/; domain=.google.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86849,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2450)","md5":"d041f42515e288ee6d39cc090d214aca","sha1":"c978411465149e582bd0c0eaf34e3028aa774ec9","sha256":"cda296864d23ad6329610f0b339dfaa08fc7808256d6a2e51d37e2d94c905990","sha512":"f87e1ea97a258a9a2f6e6c81072130dc3371698ad81d80e9d92379e1e3aff0abb02956774050d4790dd70bc77cab46b8128ef56fdb20fa32df95e88c12e7c8f4","ssdeep":"1536:X8ykCz8akPXbBLi/5cQsaaT7LLZ3CzUVlgyuUTZDZNiMcwNWFU8:XYjBLPa+LLlNixB","tlshash":"8383b889b2a27565c267b5b5413f000fb27f59a9f8084cacb288d8e16df094d427bf7d","first_seen":"2023-09-10T21:16:10Z","last_seen":"2023-09-10T21:35:25Z","times_seen":5,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":170,"dns":4,"connect":7,"send":0,"wait":33,"receive":10,"ssl":156},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/translate6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.302Z","timestamp":1694374216302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/js/translate6b42.js HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Nov 2022 15:40:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6375047e-485\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1157,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1223), with no line terminators","md5":"00d68d5fcbe959205761ae2eb92bda5a","sha1":"e70670eba70fd9428d8ee7d8acacea623bd72d4f","sha256":"994454fb2f960994c4f0721e63734138eb06498b18f1236e39d4c66de579b054","sha512":"cee09c8f225a855f59c7a498dad0ccc51e5442e31cbc68ba52f35ea54b56f55783ff5dded94f9019c603a88f1a4da71c47d7ee0d5c79e95a69e61cc17a8bc0ad","ssdeep":"","tlshash":"4321f15f3736902a00697caa97f798e87578661c01729a017f4ec44faf65fbc074c8d4","first_seen":"2023-04-11T13:01:00Z","last_seen":"2025-03-30T21:27:51.610922Z","times_seen":318,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/landings/209605/1618996856/js/js.cockie.min6b42.js","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bozent.xyz/1Dz/988.html","date":"2023-09-10T19:30:16.299Z","timestamp":1694374216299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/landings/209605/1618996856/js/js.cockie.min6b42.js HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bozent.xyz/1Dz/988.html\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:16 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Nov 2022 15:40:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6375047c-896\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2198,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2304), with no line terminators","md5":"79218c8e4d6b9589da61b4daddd1d721","sha1":"c8bdf2b44db9327ac24f0d02e2aa0bfc69097ab5","sha256":"db4e31aaf6f2022d9cd8c052537ee237b0b69cd49ab27d6d29913bf401b1ea5a","sha512":"430f1649e5656a540e1ccb22df8aef803dc3e16ae91643dcbacd84c48d780da0019b6010f8a75a31a0bad0ace9ebc7a62df6322e7ccc6481f5166fc893bde730","ssdeep":"","tlshash":"3341d0dd34556874217baab403bf144970b9ba150896c0a0bb0ce1b5573d836c297bfd","first_seen":"2023-04-14T12:10:13Z","last_seen":"2025-03-30T21:27:51.583627Z","times_seen":311,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bozent.xyz/1Dz/988.html","fqdn":"bozent.xyz","domain":"bozent.xyz","tld":"xyz"},"ip":{"addr":"164.90.204.4","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-09-10T19:30:15.853Z","timestamp":1694374215853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bozent.xyz","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 22 Aug 2023 08:52:02 GMT","end":"Mon, 20 Nov 2023 08:52:01 GMT"},"fingerprint":{"sha1":"89:A7:1B:53:9B:19:E6:6D:0C:6E:E2:B3:DD:3C:C3:CD:D9:02:B5:24","sha256":"A9:DE:C8:D3:6A:EF:DC:08:DC:F5:A8:2A:FB:B7:12:A0:32:55:37:D2:5B:31:7E:FA:5D:9D:72:A2:AC:29:EE:3F"}}},"request":{"raw":"GET /1Dz/988.html HTTP/1.1\r\nHost: bozent.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 10 Sep 2023 19:30:15 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 25 Apr 2023 14:35:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6447e54a-3111\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12561,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-06T09:45:49.964441Z","times_seen":14729679,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":58,"dns":0,"connect":25,"send":0,"wait":28,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2023-09-10","alert":"Sinkholed","trigger":"bozent.xyz","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}