{"report_id":"ff70535f-a168-484c-a563-64d00076468c","version":0,"status":"done","tags":[],"date":"2026-07-22T11:15:22Z","url":{"schema":"https","addr":"via9x.com/","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"185.170.199.226","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"https","addr":"via9x.com/","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"title":"Via9x.com - Premium Viral Videos, Hot Leaks \u0026 Exclusive Content","dom":{"size":100851,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5b939f22bffc75bb03bd40a189e7b844","sha1":"1204fc5ded57384c3b57fc7602cc260f79b6c442","sha256":"722259fb597ae4cdb0ab086e12322483b8f8e0cd073724a764796a9025ba8890","sha512":"9558c1a5d3661de96301028181944113f170d293985ce06e3b404ca7bac011a3eb87abc0d2217cb743b4cac9714aa73a85d66a5ab1e0ba827bb45e4e38b709a6","ssdeep":"768:Ffu8uqZtgTu5uDufuVKWZkMmL4VTah7AxMzC4nxAROq:lgTKWZkMmL4VTah7MHkCl","tlshash":"cea36d6e7991068053638e9c43de4e546739b46308179cbbf3d218cadfcbe9897d9223","dom_hash":"domhash84c5e7d92cbb126507abab88a6bc00b7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"via9x.com/","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"185.170.199.226","port":0,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-26T11:15:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":16}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"pl30474351.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"pl30474352.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"protrafficinspector.com","ip":{"addr":"63.177.47.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-07-16T04:57:03.119024Z","alert_count":0,"request_count":2,"received_data":1008,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"via9x.com","ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"domain_registered":"2026-07-17","domain_rank":0,"first_seen":"2026-07-22T11:05:18.794792Z","last_seen":"2026-07-22T11:05:18.794792Z","alert_count":0,"request_count":14,"received_data":760121,"sent_data":7017,"comment":"","tags":null,"fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"spendsdetachment.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-05T07:40:04.892598Z","last_seen":"2026-07-18T16:20:48.413911Z","alert_count":14,"request_count":14,"received_data":55376,"sent_data":24377,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"portalfluently.com","ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-06-19T16:11:46.270184Z","last_seen":"2026-07-17T22:52:31.697672Z","alert_count":2,"request_count":2,"received_data":171770,"sent_data":898,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-07-17T07:25:49.152824Z","alert_count":0,"request_count":4,"received_data":352123,"sent_data":2090,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"pl30474351.effectivecpmnetwork.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-05-14","domain_rank":0,"first_seen":"2026-07-22T11:05:18.786524Z","last_seen":"2026-07-22T11:05:18.786524Z","alert_count":1,"request_count":1,"received_data":95589,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.redgarto.com","ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-09","domain_rank":0,"first_seen":"2026-06-10T14:51:12.515203Z","last_seen":"2026-07-15T20:25:23.523586Z","alert_count":0,"request_count":5,"received_data":172873,"sent_data":2374,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-07-19T22:43:25.336158Z","alert_count":0,"request_count":2,"received_data":261118,"sent_data":1127,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"realizationnewestfangs.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-10-02T06:26:57.543488Z","last_seen":"2026-07-18T05:54:03.837607Z","alert_count":1,"request_count":1,"received_data":954,"sent_data":569,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"pl30474352.effectivecpmnetwork.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2026-05-14","domain_rank":0,"first_seen":"2026-07-22T11:05:18.793196Z","last_seen":"2026-07-22T11:05:18.793196Z","alert_count":1,"request_count":1,"received_data":98626,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.highperformanceformat.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2026-07-20T21:23:53.413608Z","alert_count":8,"request_count":2,"received_data":104460,"sent_data":992,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flushpersist.com","ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-07-01","domain_rank":23810,"first_seen":"2025-07-08T10:43:12.76905Z","last_seen":"2026-07-17T07:16:14.790139Z","alert_count":6,"request_count":2,"received_data":954,"sent_data":1730,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-19T22:19:42.520021Z","alert_count":0,"request_count":5,"received_data":235933,"sent_data":2830,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-19T22:23:13.155676Z","alert_count":0,"request_count":2,"received_data":27595,"sent_data":1054,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-07-20T08:40:19.100598Z","alert_count":0,"request_count":2,"received_data":408699,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"workdeadlinededicate.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2025-11-13T08:41:33.674059Z","last_seen":"2026-07-15T20:25:22.47251Z","alert_count":10,"request_count":5,"received_data":41730,"sent_data":6612,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-19T22:31:15.74052Z","alert_count":0,"request_count":1,"received_data":489810,"sent_data":472,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-07-17T07:25:50.104546Z","alert_count":2,"request_count":1,"received_data":2342,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"workdeadlinededicate.com/2a/22/c1/2a22c11f1d20256959cc34b563432273.js","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ae73d4a3536c5cf03c337a4a20139a1","sha1":"c5ca672d109b5d21596211274384d6b9a1411f15","sha256":"f6e0f8f7346d877e8ceb2c643a2f9a0e43f5cca99302d6728d4ac473ceea0f49","sha512":"76d2ad8c536974dfaab72b35c26d94e33bba5ce801020b22813cf77996a95fbee189f7e64d8566a2a749a5dececafe8b87edc210814e196c714fadebb1c4fcbe","ssdeep":"384:pahiQJGjwKVhnbuueU87S0sTiRl6oBZxmeEWrg6ZOFgnR/m7FZqXZ5:CiQJehQR9b4/WrxOFg8B4X/","tlshash":"0be26458bb92f8580293e0b6353fc01bf51a48517becd0a4e596d5fc2e79648f732b28","size":31138,"data":"","first_seen":"2026-07-22T11:15:28.027909Z","last_seen":"2026-07-22T11:15:28.027909Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8067d375ccade500b4c5260e84a3d2b6","sha1":"c686ef4fa78dc3194201b92de580d8f21356bf52","sha256":"6c22592f1985c51de26411c316bf7b83a9dce6109741ab59cc8cf2c2c3eda036","sha512":"b455153b830faf1537948e900e5ac86c702ad65208c9a889415c6a98098d335a3079aae43ea50611187ddcde21bd7b75fd8fdc60c296a1068c3e3476e76018ec","ssdeep":"","tlshash":"6a812ceeacc295785452607e71bb8a553921a11f1808ce01785ddc922760ff8cf3ddd8","size":3984,"data":"","first_seen":"2026-07-22T11:15:28.060952Z","last_seen":"2026-07-22T11:15:28.060952Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl30474351.effectivecpmnetwork.com/22/92/af/2292af2638b295653394b0c199ae3b74.js","fqdn":"pl30474351.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ad03a426e72f3756aca393d335f7942","sha1":"0dc66a474ec43a4bb5e0b1837fbe96b8909c9a96","sha256":"00a3e486262eecc7eb78ceadab3e07efdceaca9d6128c46bad8e14f0f5e9a5b7","sha512":"e12c124675091fb4fe35eefb5f04ad64b0bc989f59137d73af5e4959fd6d721f3c1f47990a038a3cf172657a59f6843f90713b8cb30f90735440c6e6da9fcd9c","ssdeep":"1536:Sy4rImzKyAnYdP2brRYIDn0cEJ1nD08YZLVZIoVd1vLUUpT90vJTh2i4WUE7ED7S:8zKZd6cY0HLVSeT0vJh9P","tlshash":"05930a982fd0a3aa02d964b7722f9e5ff1165c835144e499f30bf8cc295eb15f532b60","size":94777,"data":"","first_seen":"2026-07-22T11:05:26.377678Z","last_seen":"2026-07-22T11:15:28.042817Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-22T14:43:32.646255Z","times_seen":23445,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/2a/22/c1/2a22c11f1d20256959cc34b563432273.js","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0de8305b94ec6befc224346816014b","sha1":"dbdd474e005efddb0fde7235b653c6652679c179","sha256":"7d6a9f40fd7785c4440d2f416c97625dbc3ee8ea7e5ec5d7690cd9384c209073","sha512":"81b18fa7538b2fb303ca77fc19332983e2d1902a9d71bca1d3fa077417e562cfca71b29eb498dd7211df3cc831aa18684ca9d915b040127d3dbdc7776af0193a","ssdeep":"384:pahiQJGjwKVhnbuueU87S0sTiRl6oBZxmeEWrg6ZOFgnR/17FZqXZ5:CiQJehQR9b4/WrxOFgPB4X/","tlshash":"47e26358bb92f8580293e0b6353fc01bf51a48517becd0a4e596d5fc2e79648f732b28","size":31134,"data":"","first_seen":"2026-07-22T11:15:28.057497Z","last_seen":"2026-07-22T11:15:28.057497Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"028fe7f337402121147f2a61b4a5e44f","sha1":"813ce9860d7828d646e89ee947313ea7449dc3ce","sha256":"dc3c28675bf983a014fd57951103c8024f34eda04901037e2c129d091283a3be","sha512":"314c81f3d8029f12885800d317688e986cd455690190e24afff39bed73555f85cbdea87ed374e04a4cb336dbf338d4665dec5b2dc496d7be7602ab2b3f6b07cc","ssdeep":"","tlshash":"a521e7fbd823190c91a0e8e8b9ec0df33667313eb14456e0047b08e630b2c68ab0c3e5","size":1248,"data":"","first_seen":"2026-07-22T11:15:28.061964Z","last_seen":"2026-07-22T11:15:28.061964Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-22T14:05:48.774807Z","times_seen":45444,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7ebd98df7d71026de564875c59a239f","sha1":"9fa926171e967213ab5869aec24b745ccc88f97e","sha256":"b040fcf73a3a1338e22a23470ee815ae8c3258ccd2527f71ab6089f96b620131","sha512":"e898eb89554878ae9458bd3d2197df78b7fcb5436d0306e91d3830525950e44086d65375e6212c9f7b346ba77197576132d896031c462896c2c5d53ef5c5c618","ssdeep":"","tlshash":"d8c02b8c230e0c7041e727408b3fb700f0113214a8d0ab30081d23489e20f07eb68820","size":148,"data":"","first_seen":"2026-07-22T11:05:26.391767Z","last_seen":"2026-07-22T11:15:28.062985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":true,"md5":"83cfa3dc670d4812e3d22555994422a0","sha1":"7352f87459a61da0504d1e3bb4a17bab054c8ed3","sha256":"7d290dbf1de1505bedd8d1af50de8f5d5a886e1e5ec511694a5efdf12ebefa45","sha512":"67b181f267c69d8b46d077a4ff4a8599de76f5fc53df529a249da771bf0fdc342c04f8d094be08e78bf397fb1b5d54fe7c16afe2ebdc32e4e013f9c5dda94435","ssdeep":"","tlshash":"24c02bed00c3f3140053c82b68a8d50052208d273d0e243136c058541fccc2ec4f27fe","size":147,"data":"","first_seen":"2026-07-22T11:05:26.392632Z","last_seen":"2026-07-22T11:15:28.063604Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl30474352.effectivecpmnetwork.com/fd/22/d3/fd22d32cda0b16ebc55f22846048c30d.js","fqdn":"pl30474352.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc8e6890a1368fb772afed0c9053a943","sha1":"54f38560984b585fa362608d0d37c5c097b883cb","sha256":"428bef335f2d594845d6eefa866ce0c6f50a0057adc891c2b2cb65ebd7d28b83","sha512":"dabc98784a5e2d92e960eb524036f9a227feaa48d6f36252ff31692b668bc07a50320d7488c35acdd0cd13f214008cfa501a0405d4016463b915b7b1d9ce91e6","ssdeep":"1536:0igOasyQvXsOBpRo6/kLvVp4RYWlxWvuS6FFpmiLIBs/UzmL:wCyiRX/kLdp4RYWl16wL","tlshash":"07a3a7587f91f0a8126778b6321fe40ff13a5c5aa54ce088f117ec983b7c754ea36a64","size":97814,"data":"","first_seen":"2026-07-22T11:15:28.045011Z","last_seen":"2026-07-22T11:15:28.045011Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/50e75485f9376dcd1318a735b66c9bc1/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5bb1e0821d5b5343039ac1d0e830d19","sha1":"fb621c6cb435eb86da81f04e1ad96fb8da73c6fc","sha256":"6c042eaea326864916f81f0ce50d6c2ed5d25df8f77f811f27a5839b397b5b7c","sha512":"4c7b975545f8759b0ac8aa25ac3e8df18a7ac32b08f9cacd5788dd07212570e187d1f9d610e59d605e3e29d8c92b7ee0820e4057f2d2d6ac9e8085e9af1292e6","ssdeep":"768:nuD21qUXaBHxR5iEzbIR8oFwd6XHew8hMhelNYINhE:nuyYC1G6XHw6helJ6","tlshash":"f533b58d7fa1f01412aa3077732f902ef45e4d165cfcd094e183b4a86d78739eab66a4","size":51429,"data":"","first_seen":"2026-07-22T11:05:26.386455Z","last_seen":"2026-07-22T11:15:28.058434Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K26ST509QD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c652a86cc1b08dabbefed4cc0a1364ff","sha1":"482b14207c238ad0a6685abd06ee642d90622db7","sha256":"7ecd25d64283af309f9e1cb2b95cbee2c10d455a2e88fd316c2285461b0b700c","sha512":"672c06b828b0c8e3e2934ccabceae346db96990de0af5e2cff6f4b7a8627c91873a7b89399ddbed024d120006044640a2fa4bde0b5fa59bc650194cbb1c61adf","ssdeep":"6144:/DsJy61/DTIDuJRlYYZqusTYcSn9zUZ3vHIGeL/hiq3F53Q:LsjDHcWDhiky","tlshash":"e3a4f9cdb3d674225396f478903f018ba57b29a2b44cc899f189cce42e7469a8177f7c","size":489206,"data":"","first_seen":"2026-07-22T11:05:26.343704Z","last_seen":"2026-07-22T11:15:28.010265Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e58ac921fbba156de4b2c1db2d3dd7a3","sha1":"6839f8c321de452ecf12e23cb52ec5fe59f19587","sha256":"9ad60bfffa2391beec7088cca040e86c85584087a4e1bf365f0ec77815d4da74","sha512":"961711cede8eeed932f466b563075e129375481b729b40ce2cd8c623c996d3644437db5857fe7fe9238e8682fdd4fd50caf6783cf55289ebd5cd61d69a8ae76c","ssdeep":"","tlshash":"d5c08c8c1b80ad31a941344eda82238188c00713a93f043e508480e070da83b84700cd","size":145,"data":"","first_seen":"2026-07-22T11:05:26.394376Z","last_seen":"2026-07-22T11:15:28.064281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"568e2c52921db5133d04496ae0b89b58","sha1":"b4d98d42b97e58395ba1b8a88fcd8261d0c721c3","sha256":"2b06c0ad1824b72b1a3f30696577b77e089d84576dd6f56333d87051709fb56f","sha512":"b54fc1b6d0327d3ae5391bcfbf0a84e12bd68395a3fe0bdd2bae54a0a1192ca72a05421a0a95ef4dd291ffb748af233a45b127d709dabba50a5e35d5daf16834","ssdeep":"","tlshash":"99812ba96d9161bd045320ef11762e29a630520b298c8e85785ccd44df50fb4cebced9","size":3976,"data":"","first_seen":"2026-07-22T11:15:28.064869Z","last_seen":"2026-07-22T11:15:28.064869Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"7c588183b7356cb07a22f6868346fcb9","sha1":"60325917bf118d071f2123525f6d7f9808540844","sha256":"af50455c89a9c35ce4cd73d7e010905d89278617bc6b45149f5306277d2df0c7","sha512":"68e9c828b4fcd8c445ed11b0a75b7609750ed82371cf3badf514b0f1a38bb746a399e11a3a0b33845660ce301c66364176c96ebd96003a98b5fb647d37e6c50a","ssdeep":"","tlshash":"4631f9fab18722f44496a173508bfb593e2ad51d0c214b5174349c033114ebdd23ac84","size":1518,"data":"","first_seen":"2026-07-22T11:15:28.066194Z","last_seen":"2026-07-22T11:15:28.066194Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/50e75485f9376dcd1318a735b66c9bc1/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7913442bd7479f801eb410b42bda6de4","sha1":"b805ca672c5bb212c86bd5bad4a85a0d8d3a4c9c","sha256":"59d0397b0f4ae0653e07c350eb51a8b61a7182c736f53a58989573b6b6569a4a","sha512":"dcc947703f9cecd1d9619a3edd2a6c0e98138bc572ae4049705c9918da04c2b36b7eb1e16d49dd5983d27f4a532b6ebcda8720dd9964aaa80cd08783b9c05fc0","ssdeep":"768:nuD21qUXaBHxR5iEzbIR8oFwd6XHewEhMhelNYItnhE:nuyYC1G6XHg6helpn6","tlshash":"4333b68d7fa1f01412aa3077732f902bf45e4d165cfcd094e183b4a86d78739eab66a4","size":51417,"data":"","first_seen":"2026-07-22T11:05:26.355433Z","last_seen":"2026-07-22T11:15:28.047034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"2eddb2890da74bad410665082acfe7c4","sha1":"e3e780547564b9a99496b3c6e9dd5169417de2fb","sha256":"a2783210e84e6159498531b012d4789ab3b3d2af875154e086fd8a7079a751c0","sha512":"4d85b60bde2c9cdb576576bdd93cd53574f068186464f88f4cd3bf9dac8347d7d22ba2b4a4e82e7aa49b1cb0d86ba5844e05b52a4c0aeb475cd0b6c470444b51","ssdeep":"","tlshash":"ea31f7bdb800315786ab72f701193f75d3bd630b0ccc13e6a4219d88e32da588bac947","size":1514,"data":"","first_seen":"2026-07-22T11:15:28.067154Z","last_seen":"2026-07-22T11:15:28.067154Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"36f677f9ca044504570a552189adf959","sha1":"d3d8a27e3ee5b732b40ad050c638becdb72c5cc3","sha256":"92555d452b28d2e190888cad7b08305a64b3500a70dda7989f3d15c0a21a7fb9","sha512":"421e399d401a9ddaf7af6297fb567bbaf25b1d01495995ea752ea023c687ec0c87d06f8e73d30b51009c67fd5229159b4e3e8a31970a87937398abeea8efa347","ssdeep":"","tlshash":"5721ea72755735ee04774ccf15b60e76d9320505b5d54fd405160c68e181ba0cf2ee75","size":1244,"data":"","first_seen":"2026-07-22T11:15:28.068063Z","last_seen":"2026-07-22T11:15:28.068063Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-22T14:47:07.816233Z","times_seen":19906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d69453c891d757f5bd42a8b6ef76ad9f","sha1":"119f610a6679a4cca3590634ee2f97384d234a19","sha256":"bbc9d0560030f2cfca6cdc7fa7bb9861e24e7ca4057f445590e6634114ee9aad","sha512":"b85ea40f6825a7da9226bee360aadf4c192903972b9b2d4d6edec36ac437221037d84957e1e016bd94555837e085cf4e4aa1126f1ea869a95bf99a72b1ffd90a","ssdeep":"","tlshash":"c0216b27b51483e15362f9de501956c5e633388999075623f23c15c82dcaba88bbd3b6","size":1272,"data":"","first_seen":"2026-07-22T11:15:28.068935Z","last_seen":"2026-07-22T11:15:28.068935Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"cdn.tailwindcss.com should not be used in production. To use Tailwind CSS in production, install it as a PostCSS plugin or use the Tailwind CLI: https://tailwindcss.com/docs/installation","filename":"https://cdn.tailwindcss.com/","line_number":64,"column_number":1711}]},"http":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:45.993Z","timestamp":1784718885993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::298km-1784718584920-fdad9b215fa8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 304\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtoNlbjEyUyvNp9D%2BZoq3%2F51EP5ohYf8szMNSP46V8h513mQHmuEsugai61YeMZhUFavWslYR88M9q2Rs5X3Q18ucJTyiYKRyqtJdoIrDejOJXU0poPIWZ8w5KO7H6BYBzO1e3g%3D\"}]}\r\ncf-ray: a1f206211d16dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":3149,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":5,"receive":0,"ssl":3138},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1452\u0026rd=1452\u0026fd=623\u0026bv=2026.7.0\u0026tmpl=70","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.582Z","timestamp":1784718889582,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /pixel/purst?dl=0\u0026th=0\u0026sc=0\u0026rs=1452\u0026rd=1452\u0026fd=623\u0026bv=2026.7.0\u0026tmpl=70 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Full-Version\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":806,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":518,"timings":{"blocked":-1,"dns":52,"connect":91,"send":0,"wait":98,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf\u0026eb=31dc1149c619d23f0bcb9de207fcc840\u0026te=75f4d68fa8925045ffe03962c8d834b3\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=fd22d32cda0b16ebc55f22846048c30d\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.593Z","timestamp":1784718890593,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /pxf.gif?uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf\u0026eb=31dc1149c619d23f0bcb9de207fcc840\u0026te=75f4d68fa8925045ffe03962c8d834b3\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=fd22d32cda0b16ebc55f22846048c30d\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 73dae08bc34e3c5e7e29e1d2e34990ab\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.508Z","timestamp":1784718889508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 552367\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T15:27:59.092123Z","times_seen":242404,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":23,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.177.47.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.519Z","timestamp":1784718889519,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\nset-cookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; Expires=Sat, 19 Jul 2036 11:14:49 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":504,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"d5ca6df440f26cfc3127dc9c572d3cde","sha1":"de8bb4247759a9b2b0ba3af82308ce83b1d2f30f","sha256":"b8e961315eecaf6f04e6479bc85e9027e153609a80746220d5d54838acd3a075","sha512":"3cf33f9273b919a6bbd33e9942be03d89e3b2e706e5c8be1644dd1b31143f9671bac61e5efc09214719188898706f69a205ea1fafd9d1303d8be950270fd0f24","ssdeep":"","tlshash":"1e90047015130000fc01414405040415d113dd4101145454c0d3c43133111750dd1171","first_seen":"2026-07-22T11:15:28.003166Z","last_seen":"2026-07-22T11:15:28.003166Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":3,"connect":24,"send":0,"wait":25,"receive":0,"ssl":80},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image10.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.704Z","timestamp":1784718889704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image10.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 96482\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 499472e25cac3204a550f1f0658f0f42-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":96482,"size_decoded":96805,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e09f4978344d65f3657528f2c9c939b","sha1":"aac74a8ccb664a2ea1ef52322a63a315d7fcc92a","sha256":"533562cdd29e2167a93b01cf86fc47360275855201b9e86cf1bc6b3239d4845b","sha512":"a57a5f0db1e52b2b01fb01fc80e6d966e39a6687755c20ae756df4d87a266e95b838c6b1119b5b9388dfd97940049a4706a95448c7f5fd7468064e0e203f7eac","ssdeep":"1536:IN2AGnlijFj2d3fqNtxlonEFO8rehdkwehG2TGQYAfqg9CwfTKA5y2jpJnYmvS:TAG0jFjKwflPs8ChHUlP5f8wf1FhxK","tlshash":"c9931235f44b39273503d6fb1c9e6a385ea91698f8cca10c16ac716ce0a175b39c5dac","first_seen":"2026-07-22T11:05:26.34665Z","last_seen":"2026-07-22T11:15:28.00471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/vpn/classic-push/big1/js/script.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.465Z","timestamp":1784718891465,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/js/script.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa84fe-3be\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJjrGSK4Q7fY8Muvs%2F49EltB%2B7Sfwtjcn3T4mmSFESC1C1cNGobojihKavPQRVtqFd8oadczUi0nixdhsusqqMslSAEQqkvN1NTLmo665TRvXs%2BdAkFe7%2F2V%2Fil0tFvsOhyA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f2062fa9880b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 958\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":958,"size_decoded":1783,"mime_type":"application/javascript","magic":"ASCII text","md5":"89918681df9f363bb293cb027c2f1113","sha1":"cf7dca97b09ed3d03e821b407286539519a9f037","sha256":"6648e7501f858c8ffaf2b35736dbd37f2d22afb2c781ee552d7c113d77413b9e","sha512":"f8e40eb5727465e78b1f20b08e6d22f07be52165043b01566c12f1022bea70e63cda516588ea504c7e927a63c9680f439b014b72d9a88b518956e2dc5474be67","ssdeep":"","tlshash":"1a117a27156883f06257f027a1572adaea32029fe81a9717721c06cd0ec47b913fa6e7","first_seen":"2023-04-05T07:51:04Z","last_seen":"2026-07-22T11:15:28.005668Z","times_seen":1551,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":442,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1xSPY8bVRR946QDiU_RIKQpUgDC3nnz4fGQIiIiIJDYAAlECgW8j3mbF49nJvNmbMc0GwIUVEsXaBgfe3dBQhFIVBQIeSmQVgiYzhLZhp-AhESHvGspiFvce985rzj33vPxtDoiHVRs-fpr2UQnCdsIOo799BWdymxk7M3LNnU6zln7ik67_ll7vErF8Hnq-R3nGfvlWPSzDdehjkMdar-ki1hl441jFjq_S6Og0_U7lPY6NHAxLv6PmKoFwyzI4RF5FFo2D_2p3oEWC6SDb16MTb_M8ucuDKqElVmBodx_K-2n2SjF4H6rCgsq3V__RmYaQu60kKX76ymQDeerKcB1Q1pP3ANP99dSwYe7J2p5gjgFlw9gNFwgThbQbAGR3YaWvxNASGxeRDrY28yKEbt5wrIV25DTf_8FPWrI6XuPIx3cPZ_osX0pS6pSZ6nBWNXQ4wX01gJ5dYBy0oIeHUCUH0BLgnQwbUPL5RnlKCE8KtpUdXttXzqqzSNB20HXp6EIuzx2-fFutFqAmVOojIVKW6hUC1XewkAubRb1FI-6PotiFSrp0FCwwPOi0A9c1RUBKnELWu5AFB99Xb2bJ57jURp6dEr3cnmt7A_nZVHF8yoVZkq_PIFc7xjcW4GuN6XIi2309Q6MbMGUDbHe2MZQ1rsyMa6p92RiKk7X1V1Xr55l5daU7WblVpwSsGIHhaznOr9hbkOUp2YTZeQsWyXGy3rGuKxnWpYExY3lGYdGqhf1ojYNVNAOfcraEY3CtuNJ6cdh4HDfmStTVvU0PyKPrA5j_Tr6A_14abtu5DLldr0ed6Ogu9qHzx1Bo4jFHg99GF1DmxaYsTDRDbn69lXkuiHub0-CswOY5ABCPwxWPQU2qsGu1ZikXw01i8YdkQ0gsxp5eRrlTWuaHJHHZm9ePv_jsTle-OcOYnF4bvnZKj6HKGrkRY3r-ieCreTWtxfzUg_0hK3ccqlkZXwKTDfEev8XCN2QB1-9cGzcM698ApFvw-SH577_4ofhz99FMBkBzy0kmiCJD8k6wHgN8583v99PzYfYKizwxJrxpLDmPCmST09kGr20e67rOIK6kYwCP_J6Kg58GoZxQL1u7HgBStNcf2_v2X8DAAD__27vnFI6BAAA","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:52.288Z","timestamp":1784718892288,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSPY8bVRR946QDiU_RIKQpUgDC3nnz4fGQIiIiIJDYAAlECgW8j3mbF49nJvNmbMc0GwIUVEsXaBgfe3dBQhFIVBQIeSmQVgiYzhLZhp-AhESHvGspiFvce985rzj33vPxtDoiHVRs-fpr2UQnCdsIOo799BWdymxk7M3LNnU6zln7ik67_ll7vErF8Hnq-R3nGfvlWPSzDdehjkMdar-ki1hl441jFjq_S6Og0_U7lPY6NHAxLv6PmKoFwyzI4RF5FFo2D_2p3oEWC6SDb16MTb_M8ucuDKqElVmBodx_K-2n2SjF4H6rCgsq3V__RmYaQu60kKX76ymQDeerKcB1Q1pP3ANP99dSwYe7J2p5gjgFlw9gNFwgThbQbAGR3YaWvxNASGxeRDrY28yKEbt5wrIV25DTf_8FPWrI6XuPIx3cPZ_osX0pS6pSZ6nBWNXQ4wX01gJ5dYBy0oIeHUCUH0BLgnQwbUPL5RnlKCE8KtpUdXttXzqqzSNB20HXp6EIuzx2-fFutFqAmVOojIVKW6hUC1XewkAubRb1FI-6PotiFSrp0FCwwPOi0A9c1RUBKnELWu5AFB99Xb2bJ57jURp6dEr3cnmt7A_nZVHF8yoVZkq_PIFc7xjcW4GuN6XIi2309Q6MbMGUDbHe2MZQ1rsyMa6p92RiKk7X1V1Xr55l5daU7WblVpwSsGIHhaznOr9hbkOUp2YTZeQsWyXGy3rGuKxnWpYExY3lGYdGqhf1ojYNVNAOfcraEY3CtuNJ6cdh4HDfmStTVvU0PyKPrA5j_Tr6A_14abtu5DLldr0ed6Ogu9qHzx1Bo4jFHg99GF1DmxaYsTDRDbn69lXkuiHub0-CswOY5ABCPwxWPQU2qsGu1ZikXw01i8YdkQ0gsxp5eRrlTWuaHJHHZm9ePv_jsTle-OcOYnF4bvnZKj6HKGrkRY3r-ieCreTWtxfzUg_0hK3ccqlkZXwKTDfEev8XCN2QB1-9cGzcM698ApFvw-SH577_4ofhz99FMBkBzy0kmiCJD8k6wHgN8583v99PzYfYKizwxJrxpLDmPCmST09kGr20e67rOIK6kYwCP_J6Kg58GoZxQL1u7HgBStNcf2_v2X8DAAD__27vnFI6BAAA HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl30311731=1; iprc_c+19895010c316def989c20ba829fb068c=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl30373852=1; slec2292af2638b295653394b0c199ae3b74=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:52 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_l+40f5c1fa2e593f6a35c92e30e63d95eb=4323736; Path=/; Expires=Thu, 23 Jul 2026 11:14:52 GMT; Secure; SameSite=None\niprc_l-4323736=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:52 GMT; Secure; SameSite=None\r\nvary: Origin,Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: b25b7e06c2df5261a68182c37f7bf392\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:52.302Z","timestamp":1784718892302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 16 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 521834\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-22T15:27:01.489633Z","times_seen":239293,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:45.996Z","timestamp":1784718885996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:46 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18861\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXgNbspY8a7rbtkKKyY40zODoAifj9BY1XIO3r59aGhDLWsGVjsaNDg3e4PA10cxJfAL1e7iiGpMNLNaIA7yXqMqZWs1L%2B%2BgPpGLwuLEGulcRRDLcOsPYp6VtDsmoBQP4O5TuStP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f2060d8ada0b51-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102641,"size_decoded":19850,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"9402848c3d4bbc710c764326f8b887c9","sha1":"b6e555166eb1381392e00adcde9bf8863f16ff01","sha256":"c22cfb6520a7fdbb738632834019acf47c78b1279462c0eb4cb83bae83ecb5a7","sha512":"0d33903bd456087de9a46a9c59a100d41219382eb1c5a97012cc3d73641078021fb65f957a0a2f96779ed5cf505f84dcb6758c9f5dd36727be822326f1ed8bc0","ssdeep":"1536:iwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPG9ZpgSLCJ:O709gMGFiyPG9ZiSLCJ","tlshash":"79a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-07-22T14:48:37.804542Z","times_seen":33350,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":2,"connect":12,"send":0,"wait":45,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image4.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.665Z","timestamp":1784718889665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image4.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 56828\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: c92afa2f0b6baa7322d4c20fabbdfc7a-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":56828,"size_decoded":57151,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1aab2e1bb68b9c316ca6491017350e75","sha1":"ead70043d61a144c0a9ae8db08852487a6777769","sha256":"fd32127a2137503583f81ec525445962e816867552ece3fb934922e3564af461","sha512":"1c7093341462ecbc5a9bf133d056bd442ec40058b3ad7b0d2487ac1d691dda9ce546c76ab79242f8fd7b2ab75f6f7d87696c3d67fe54eca3b836622df7735f2d","ssdeep":"1536:jLyBX7Jdwk9fKDm3CP38SDMl0phJFfS81Q2y:XQ9ak9SDWs37EeJtQv","tlshash":"884302e2db78364a919ce2fc9bfa17fed541c8ed810808529f5c8998df903460b6e469","first_seen":"2026-07-22T11:05:26.345591Z","last_seen":"2026-07-22T11:15:28.008497Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-K26ST509QD","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:46.006Z","timestamp":1784718886006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:37:33 GMT","end":"Mon, 21 Sep 2026 08:37:32 GMT"},"fingerprint":{"sha1":"85:82:80:E9:F0:BC:08:B5:D8:5D:91:B4:E5:D3:DB:B1:A7:2F:E3:F3","sha256":"E3:94:E9:DA:2C:F1:36:09:33:63:D3:69:08:E7:E6:91:8D:F3:61:7F:0F:D0:5F:8E:B6:E9:D7:F3:DD:10:3C:DC"}}},"request":{"raw":"GET /gtag/js?id=G-K26ST509QD HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 22 Jul 2026 11:14:46 GMT\r\nexpires: Wed, 22 Jul 2026 11:14:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 166533\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":489206,"size_decoded":167137,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6033)","md5":"c652a86cc1b08dabbefed4cc0a1364ff","sha1":"482b14207c238ad0a6685abd06ee642d90622db7","sha256":"7ecd25d64283af309f9e1cb2b95cbee2c10d455a2e88fd316c2285461b0b700c","sha512":"672c06b828b0c8e3e2934ccabceae346db96990de0af5e2cff6f4b7a8627c91873a7b89399ddbed024d120006044640a2fa4bde0b5fa59bc650194cbb1c61adf","ssdeep":"6144:/DsJy61/DTIDuJRlYYZqusTYcSn9zUZ3vHIGeL/hiq3F53Q:LsjDHcWDhiky","tlshash":"e3a4f9cdb3d674225396f478903f018ba57b29a2b44cc899f189cce42e7469a8177f7c","first_seen":"2026-07-22T11:05:26.343704Z","last_seen":"2026-07-22T11:15:28.010265Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":38,"receive":49,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image3.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.663Z","timestamp":1784718889663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image3.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 49730\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a061ddd973d52438534843baa0c24358-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":49730,"size_decoded":50053,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"53594b5022c6f0e303c76b85aa24296a","sha1":"bedf0e3c4c89944a8a1b9f20d661df08aaba1cfd","sha256":"6b24ae907b8a658e218940e59d49d2be4708302907f9d1f92a649331b5b87c4b","sha512":"3d8501e0ccc2853bbdb46f8f6ff3964d6c7ac4682587c65b3f584e6425167e95ee98b2c9ca9b7c660adb525a93d92f3e874d8d949725bf80f52b16beb490dedf","ssdeep":"768:FZnerBBCJsDt82NOXEdmxjLsSB2W8ocllqdLP6+azak11Zul9qTmWJTrJd2n:F56Baia4OXEcxLswfCukfZuj2dJXJ6","tlshash":"b82302b162b24ef2cdb4487ecfbb14305c2c90d415bca6eaa6ec71996c430977c5a792","first_seen":"2026-07-22T11:05:26.38277Z","last_seen":"2026-07-22T11:15:28.022828Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image6.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.668Z","timestamp":1784718889668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image6.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 32822\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: ed5aea01b07372e545221c8d024dea54-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":32822,"size_decoded":33145,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a79818cc3368af24c94f42056e05daae","sha1":"f9e8b8f55bccd552baa96548f47b95d06356baf3","sha256":"256434f2049d410e176f4f32a952d6d3b7c012911a768ba897afb2789aaed512","sha512":"6ea3729c49ba84197a943fc03db69b8c022b20bdcb2b85a177afe482dcaac3a5d84f2ba61c65d946529e79063d883263c36d7f93c402338544396207035d89f6","ssdeep":"768:DJGtFi55k/JV+FeZqh/2+GcI2/h6iGqxy4nuarPpEi:t10+FeAUX24rl4uiPl","tlshash":"dce2e1c6df7b64b37fb61e34480a8fe21018e935f6b4f652f09418610bbe1016ee56ad","first_seen":"2026-07-22T11:05:26.388219Z","last_seen":"2026-07-22T11:15:28.024633Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image8.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.700Z","timestamp":1784718889700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image8.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35008\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a88867a30e3c0e7472217d10352b6fa0-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.027\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":35008,"size_decoded":35331,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ae4106972b11fdea75bab156e71d01d","sha1":"43d5574229df952950c5c00f84292c76df856f09","sha256":"6f62f4ec6967536f542e61839007b28feb1ec7ae8b063a9ef58fa3ccadee11cb","sha512":"8eab75e5e013b34bc0e7141d4de7b014c8c9cfd4b719fe910bbc76ea540c998c184058ca1fe24f0361c8a5d6e8c6a67bfa1947ee00ad571795b9e1a8262c5470","ssdeep":"384:GeuoKMRQOUV6+diF7meoStU1ZIpzODEjs3aJGMXaMbe+q2zPBCg70blf5HcyMO6p:GuLREtid81e9gaJpqAPc9fv6Qvs9NTGq","tlshash":"51f2f180b1708b5fd3c4d0b682b4862f58fdc12b627ee724614d9c72c888b6d7856ec9","first_seen":"2026-07-22T11:05:26.36077Z","last_seen":"2026-07-22T11:15:28.027025Z","times_seen":2,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.510Z","timestamp":1784718889510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 552367\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T15:27:59.092123Z","times_seen":242404,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":30,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/2a/22/c1/2a22c11f1d20256959cc34b563432273.js","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.802Z","timestamp":1784718889802,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /2a/22/c1/2a22c11f1d20256959cc34b563432273.js HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 44fc54a0d17c16a15e9dc43089eaa4ee\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":31138,"size_decoded":10066,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31138), with no line terminators","md5":"7ae73d4a3536c5cf03c337a4a20139a1","sha1":"c5ca672d109b5d21596211274384d6b9a1411f15","sha256":"f6e0f8f7346d877e8ceb2c643a2f9a0e43f5cca99302d6728d4ac473ceea0f49","sha512":"76d2ad8c536974dfaab72b35c26d94e33bba5ce801020b22813cf77996a95fbee189f7e64d8566a2a749a5dececafe8b87edc210814e196c714fadebb1c4fcbe","ssdeep":"384:pahiQJGjwKVhnbuueU87S0sTiRl6oBZxmeEWrg6ZOFgnR/m7FZqXZ5:CiQJehQR9b4/WrxOFg8B4X/","tlshash":"0be26458bb92f8580293e0b6353fc01bf51a48517becd0a4e596d5fc2e79648f732b28","first_seen":"2026-07-22T11:15:28.027909Z","last_seen":"2026-07-22T11:15:28.027909Z","times_seen":1,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":100,"receive":91,"ssl":193},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbs?c=1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:52.290Z","timestamp":1784718892290,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbs?c=1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl30311731=1; iprc_c+19895010c316def989c20ba829fb068c=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl30373852=1; slec2292af2638b295653394b0c199ae3b74=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:52 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Operamini-Phone-Ua, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Device-User-Agent\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600\u0026amp;family=Space+Grotesk:wght@500;600\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:46.004Z","timestamp":1784718886004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css2?family=Inter:wght@300;400;500;600\u0026amp;family=Space+Grotesk:wght@500;600\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 11:14:46 GMT\r\ndate: Wed, 22 Jul 2026 11:14:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9492,"size_decoded":1435,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6f2a803048f646462ef6ce30d544b2c1","sha1":"366f235deb1021e119b1363859063465528f42f7","sha256":"31f82ca0f92b6d588348e44f2376ab5303c3b787dcbff53f1a95b2a6818c34bc","sha512":"05cec0eed7b25bdc2e3d0d3cd9a515a9bc6867e44722261b1792430932152d1b4b41f368fa39bd49b64cb6a880bcdf8ef7a22a5482fd486eced4f3fba3efed7b","ssdeep":"192:yNineO33lxopNP6TO3Kkxx2NkdIO3tPx+PNpYNO3o2x3x:akYVOKczf","tlshash":"d5127c92002be40067931dc363cf7e39aece5088a086d5796bfd0dc59cead66537436e","first_seen":"2025-09-26T19:58:23.800826Z","last_seen":"2026-07-22T11:15:28.029845Z","times_seen":32,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":33,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.645Z","timestamp":1784718889645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 156496\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Fri, 01 Dec 2023 00:32:25 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32l280F7u1FaVVdDal0DUiSREUFNxG5fmBOLISACxwXoVNu%2B3MMRY8wKnXTgNAn8TLWwVS%2FwzGBCAwkhfKXh%2BqEF4IFjjtHmFFbuhY%2F%2BBs6%2FjgLB44AnbgH1CzwaYSEHvKhHmi5O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a1f206245a3d0883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156496,"size_decoded":157488,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156496, version 773.768","md5":"6c4eee562650e53cee32496bdfbe534b","sha1":"1aae708e3b94ee981b452a918d28ed037fbb5e18","sha256":"9fc85f3a4544ab0d570c7f8f9bbb88db8d92c359b2707580ea8b07c75673eae2","sha512":"ebcb5a2e2a908228f77ecd03b45491778cad73ddc39fa3a6334b129aaf9fa36c16c0307aeaad74d77f616b5b34aac52d91e9f4816945253dc9a826ddd71f4d12","ssdeep":"3072:OvM6gZMLmY8uGpjVnlooQ+GQs8jic0f/KkMdE:OU65LoP5QSsuic0f/cdE","tlshash":"8ce31200d620498d9978fd5b2a1fa1ffa7a939c95ed210bad3c30cb93257143bbc2556","first_seen":"2023-12-02T04:06:15Z","last_seen":"2026-07-22T14:39:30.527809Z","times_seen":48410,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":1,"connect":11,"send":0,"wait":26,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image7.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.698Z","timestamp":1784718889698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image7.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 35068\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 44a42b2d0d7aed74abadbcb251cb519a-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":35068,"size_decoded":35391,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a543ddc49461f923cb7cf58a4dc5204","sha1":"001fb66418ff7216436fe9215df1f05254de0e14","sha256":"8ec6e8405dfde87d8fad386d3bec760cf954c876ea6692c6572a31786c1efb85","sha512":"b8fffeb3c342eafd0f36599603b4f8846e8e91b71e4ddafd94f29adbda546d7c86fee9f4642cd23fc7e21c5937a08d90b16c2796684364e76818680321cd6923","ssdeep":"768:rm4o4oq6Qjl2P3NtgBM00liYtr9ugN4NC+CuVeUhTREybswK2M:QCl2PNtgJYXugN4NeujGOM","tlshash":"a5f2f188ae154d0ee5f499385411abe737baa17200f6cf7186c919c087229e2cff1e74","first_seen":"2026-07-22T11:05:26.329301Z","last_seen":"2026-07-22T11:15:28.031363Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/watch.822072780255.js?key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.799Z","timestamp":1784718889799,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /watch.822072780255.js?key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\nlocation: https://workdeadlinededicate.com/watch.822072780255.js?dev=e\u0026fstu=019f8989-14a0-752c-82ed-ebd9a5998720\u0026key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026ps1=1784718890\u0026rb=e\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=6zNrtlY-HyJmalaAK2g5xzIdQo2jpkHP2O8Oz5279uk\u0026shv=2\u0026st1=da1ee947318cdd9e93a15ad6cff2fdcc\u0026tz=0\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1\r\nset-cookie: uid_id2=37c253e7-656c-40c9-8aca-d6a707b64cdf:3:1; Path=/; Expires=Wed, 29 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjozMDMxMTczMSwiayI6IjUwZTc1NDg1ZjkzNzZkY2QxMzE4YTczNWI2NmM5YmMxIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1OTIwMzQ2LCJwaWQiOjMzMzAwNzUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6MjMsInB0Ijo0LCJwayI6Ink5NTNwMmFwIiwiY3BrcyI6eyIyOCI6IjJhMjJjMTFmMWQyMDI1Njk1OWNjMzRiNTYzNDMyMjczIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MCwibiI6Ii0ifSwicmciOnsiaWQiOjAsIm4iOiItIn0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwiaXdmIjp0cnVlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vdmlhOXguY29tLyIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; Path=/; Expires=Wed, 22 Jul 2026 11:15:50 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7d60d9c4b7b6c1307870a690baeae0fc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":98,"send":0,"wait":101,"receive":0,"ssl":201},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.838Z","timestamp":1784718889838,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 10:51:11 GMT","end":"Wed, 16 Sep 2026 10:51:10 GMT"},"fingerprint":{"sha1":"4C:59:13:2E:71:EC:2C:13:DB:DC:E0:9C:09:5F:B6:92:AE:E0:AE:1B","sha256":"7B:33:44:1A:37:E0:26:00:C9:1A:0C:93:61:FF:49:14:7B:7F:82:27:76:99:C7:FE:74:D6:43:5A:20:70:42:F4"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:49 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: zstd\r\nVary: Accept-Encoding\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 93adc01c72e8ecebe503fa38d8232262\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":31055,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-22T14:43:32.646255Z","times_seen":23445,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realizationnewestfangs.com/pop.json?key=2a22c11f1d20256959cc34b563432273\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1","fqdn":"realizationnewestfangs.com","domain":"realizationnewestfangs.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.005Z","timestamp":1784718890005,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realizationnewestfangs.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:15:34 GMT","end":"Fri, 25 Sep 2026 02:15:33 GMT"},"fingerprint":{"sha1":"FF:25:5D:E6:54:B9:D0:3D:09:93:4C:6D:F1:36:1E:6B:76:95:60:03","sha256":"CD:7F:E8:D7:F1:F6:2D:E4:4B:DD:0E:FA:8E:7F:AD:95:D8:80:7E:24:D7:F9:95:F4:40:18:83:7F:BA:71:6F:FC"}}},"request":{"raw":"GET /pop.json?key=2a22c11f1d20256959cc34b563432273\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1 HTTP/1.1\r\nHost: realizationnewestfangs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: application/json\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\nset-cookie: uid_id2=37c253e7-656c-40c9-8aca-d6a707b64cdf:3:1; Path=/; Expires=Wed, 29 Jul 2026 11:14:50 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 22\r\nHost: realizationnewestfangs.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 94ebe23f9df284d993da33e5a9bca0ae\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":954,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":0,"dns":2,"connect":91,"send":0,"wait":115,"receive":0,"ssl":279},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"realizationnewestfangs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:52.283Z","timestamp":1784718892283,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nContent-Type: application/json\r\nContent-Length: 218\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":218,"data":"[{\"placement_key\":\"2292af2638b295653394b0c199ae3b74\",\"template_body\":\"body_social-bar_pl_general\",\"event_name\":\"base.impression.success\",\"id_frontend_invoke\":\"019f8989-136b-7aad-83d0-cd6274a74266\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:52 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-Ua, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Operamini-Phone-Ua, Sec-Ch-Ua-Full-Version-List\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1534,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"185.196.197.71","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.559Z","timestamp":1784718889559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 18 Jun 2026 10:51:11 GMT","end":"Wed, 16 Sep 2026 10:51:10 GMT"},"fingerprint":{"sha1":"4C:59:13:2E:71:EC:2C:13:DB:DC:E0:9C:09:5F:B6:92:AE:E0:AE:1B","sha256":"7B:33:44:1A:37:E0:26:00:C9:1A:0C:93:61:FF:49:14:7B:7F:82:27:76:99:C7:FE:74:D6:43:5A:20:70:42:F4"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:49 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nContent-Encoding: zstd\r\nVary: Accept-Encoding\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: cf10a94fee12af7bd361058ee23f1468\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":31055,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-07-22T14:43:32.646255Z","times_seen":23445,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":4,"connect":33,"send":0,"wait":26,"receive":21,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image5.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.667Z","timestamp":1784718889667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image5.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27216\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 3edecc915b5dc33f8270ec47d38273c7-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":27216,"size_decoded":27539,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd52fc671acfcbaf74d438a261c097ec","sha1":"7ce4801c7365cd705d179208976c89b0320cace4","sha256":"5407b6ba487da656c3085c8276e468c38df66603de796bfed1fd23799634ac6d","sha512":"f5ba80e9bf0043788fca209af9d5787953cb6ff5a3ca60e8f08059507eb09b1a69995df6945225a0b15446a0758a5c7fefeefcee1f155fa8a0bc0b80297e1e0d","ssdeep":"384:WLa+9/OFM9kcH7L4bfgyI61MF/zA3bh0qQjSIvypp5SLCYPLX/x4w/Dg:WLaRa7L4TfaBc3pqyppgvOwU","tlshash":"02c2e165d15428d6e8c30bb32b05bf495ef0cf51926a9dac390a0b41d6a72dd8c78dcd","first_seen":"2026-07-22T11:05:26.384128Z","last_seen":"2026-07-22T11:15:28.033671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/watch.1218564739402.js?key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b%3A3%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.766Z","timestamp":1784718889766,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /watch.1218564739402.js?key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b%3A3%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\nlocation: https://spendsdetachment.com/watch.1218564739402.js?dev=e\u0026fstu=019f8989-1466-7506-9004-222ce8c61c93\u0026key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026ps1=1784718890\u0026rb=e\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=HUnCtOUSeVbA1JVFXp2sXUuWSfqABsec8iHkY5wGduY\u0026shv=2\u0026st1=42c8ed19210f7d706eb0be75e06abb11\u0026tz=0\u0026uuid=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b%3A3%3A1\r\nset-cookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; Path=/; Expires=Wed, 29 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; Path=/; Expires=Wed, 22 Jul 2026 11:15:50 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d90915dcee4f00f48158c306cfb2e37d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":91,"send":0,"wait":97,"receive":0,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:52.305Z","timestamp":1784718892305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 16 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 521834\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-22T15:27:01.489633Z","times_seen":239293,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image2.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.661Z","timestamp":1784718889661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image2.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25606\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a085c17c6cb5c43c992da4507d2e3955-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":25606,"size_decoded":25929,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"192987744c2b4d87806f27b3ce2e7bcd","sha1":"e2023d786f7f94686408d57c73b07c071c4ea193","sha256":"c1ac23bb86fc259aebc08a9196a787f4e6a5b982d61dbd2124e74e8b5ac57e87","sha512":"225d7cede0cc7d4cf92dd3771c8140b9917ead3eb512c9b308b15e178223ae98c3c33f811b693a50fb5469b5256a824032f2ae36b96ab3b53f149c4d106f6b97","ssdeep":"768:et/9uXLAWAavUKMvrLIPcBtxA5o1eNZQOXNYRhDaLI:qFuXLATaiza5o1eNZfeRdaLI","tlshash":"2cb2e1333b4def549f51ed024faab387b60966c97b800f4115066388365fb0f8e56ae6","first_seen":"2026-07-22T11:05:26.379548Z","last_seen":"2026-07-22T11:15:28.036174Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/vpn/classic-push/big1/css/animate.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.276Z","timestamp":1784718891276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/css/animate.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65aa84fe-13365\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oJeR%2FEkJ7I3pV%2FYtRmMMlCeB90vPmnbAD%2BmjXonx1SIwwCe6ArcoJUiJIVZmpNCpGqlu3Tgzu8ek74kVV04eIaJYbJnJ%2FTAU4ZeaKsQtDUPDGb1JEfMPgNz7Ldx4EU25d%2FOJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f2062e99810b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78693,"size_decoded":5677,"mime_type":"text/css","magic":"ASCII text","md5":"5982c5377696d20476871062646b253f","sha1":"8bf2c93fa9ccc908f7df0fb7abb911bbac3e4242","sha256":"4e23a6449e6ef4614f0107cecf5c9eda75d2041c7c71f4a55d45f2a7e75450f4","sha512":"92592dac2a817293e8ec1d94bf99df639626a90d524420b01a12210398927c0650cc26fa8e730300096b29961563aa02efb707478c6d51ac8616bb1bde5a0cb2","ssdeep":"384:jvuAuF81dghu3uFlZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uhu7uNKwZiMUL6Vpaj7F","tlshash":"1d731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-02-12T20:28:38Z","last_seen":"2026-07-22T15:14:28.53466Z","times_seen":9331,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":4,"connect":12,"send":0,"wait":472,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js\u0026l=958\u0026fd=459","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.915Z","timestamp":1784718891915,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fjs%2Fscript.js\u0026l=958\u0026fd=459 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl30311731=1; iprc_c+19895010c316def989c20ba829fb068c=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl30373852=1; slec2292af2638b295653394b0c199ae3b74=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platformuser-Agent, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.504Z","timestamp":1784718889504,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:25 GMT","end":"Mon, 21 Sep 2026 08:39:24 GMT"},"fingerprint":{"sha1":"4E:F2:73:C6:27:16:58:35:FE:55:D5:30:6B:E8:6D:2B:DA:B0:E8:7B","sha256":"82:EF:6A:61:96:A5:23:D6:2C:2C:9D:77:67:04:D8:7B:3B:6A:50:DA:3C:6C:6A:5F:4E:2D:55:F3:FC:DA:0B:EE"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 16 Jul 2026 01:48:42 GMT\r\nexpires: Fri, 16 Jul 2027 01:48:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 552367\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-22T15:27:59.092123Z","times_seen":242404,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":20,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/28/1e/17/281e174b5b2affe555c47782a4e9c738/1779116061.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.357Z","timestamp":1784718890357,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /cti/28/1e/17/281e174b5b2affe555c47782a4e9c738/1779116061.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 82226\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 18 May 2026 14:54:22 GMT\r\netag: \"6a0b281e-14132\"\r\nexpires: Fri, 24 Jul 2026 11:14:50 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82226,"size_decoded":82575,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3","md5":"f24b3c78ce26555a4cdc7a42fc17fd8e","sha1":"a0b7daadc87826b769c54cc409d725178e528241","sha256":"268c691de52369c916ba5e8d97b2eec2e0eaa53172f5ed90938c9e8eb487f6b6","sha512":"aa177e5ba1b58e6b625739690269a6a6d53892adea81212b2ae92f36efdc879e99e48b84388d4d7cee09ca48964e4e67b8d160336d6bf08a9e7673d7e320aa3d","ssdeep":"1536:BGHewJt4hsYtBPrlWFaHebyBr4jn28H3loas2hgR2kie1ow+0F:sHvJteNhR26G281QB5ieiwd","tlshash":"8383020fdc974580b70d0170e565ec58d02ab2fa11857e8ebb06bf1ff5ed841919a9ec","first_seen":"2026-05-19T14:56:39.730499Z","last_seen":"2026-07-22T14:02:19.088511Z","times_seen":174,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":38,"connect":19,"send":0,"wait":20,"receive":45,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F48%2F48%2Feb%2F4848ebd6f7295875a5d388ec2488aba3%2F1648542421.html\u0026l=1538\u0026fd=487","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.282Z","timestamp":1784718891282,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F48%2F48%2Feb%2F4848ebd6f7295875a5d388ec2488aba3%2F1648542421.html\u0026l=1538\u0026fd=487 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl30311731=1; iprc_c+19895010c316def989c20ba829fb068c=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl30373852=1; slec2292af2638b295653394b0c199ae3b74=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Device-User-Agent, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platformuser-Agent, X-Operamini-Phone-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=494","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.780Z","timestamp":1784718891780,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fanimate.css\u0026l=78693\u0026fd=494 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl30311731=1; iprc_c+19895010c316def989c20ba829fb068c=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl30373852=1; slec2292af2638b295653394b0c199ae3b74=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Model\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image12.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.707Z","timestamp":1784718889707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image12.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 201260\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: a38832de4573866e97c35dcbf00e8d56-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.011\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":201260,"size_decoded":201584,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1bb151adb90854e917cec6bf3be14d9","sha1":"79ebed8f57ee7461a4d86dbc1e4ecd44f2f48d12","sha256":"d1681432084fe2f76827ec7c0c0c15baac56dcea0e873b59c40c69e29ccdd0b0","sha512":"839b71259de179de127062dba9d095a27bb07f3c6a22b4c8ec62d2023614ddc0a25b5883d1e177b9928ef63282ace706eb1804fcca51c5ebb492c2e664db16d8","ssdeep":"3072:Lys5U+XSuR18cHM4Vz5Em+1Fg5BMI++XXNMlWRgicT6wal9dqEtXu1PYIVw9S:LywUaSEhfOFKggX0WpgEtIhVw9S","tlshash":"42142301c8ffaf150e5ea49fecec91621a8ba7c734c37498be2480193a66b9f158d5d4","first_seen":"2026-07-22T11:05:26.357381Z","last_seen":"2026-07-22T11:15:28.04179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pl30474351.effectivecpmnetwork.com/22/92/af/2292af2638b295653394b0c199ae3b74.js","fqdn":"pl30474351.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:46.016Z","timestamp":1784718886016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 22:12:12 GMT","end":"Sun, 11 Oct 2026 22:12:11 GMT"},"fingerprint":{"sha1":"0C:E4:9E:97:82:CC:3E:2D:41:19:24:86:F0:A7:44:A5:A8:46:DD:89","sha256":"38:78:44:2C:B3:B0:37:C7:47:EA:FA:8C:DF:E3:6C:FD:0C:A1:DF:6B:99:D4:29:51:84:38:50:6D:37:23:D4:37"}}},"request":{"raw":"GET /22/92/af/2292af2638b295653394b0c199ae3b74.js HTTP/1.1\r\nHost: pl30474351.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: pl30474351.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 41731dccb320306b2ef73b1f37122ffd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":94777,"size_decoded":34415,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5ad03a426e72f3756aca393d335f7942","sha1":"0dc66a474ec43a4bb5e0b1837fbe96b8909c9a96","sha256":"00a3e486262eecc7eb78ceadab3e07efdceaca9d6128c46bad8e14f0f5e9a5b7","sha512":"e12c124675091fb4fe35eefb5f04ad64b0bc989f59137d73af5e4959fd6d721f3c1f47990a038a3cf172657a59f6843f90713b8cb30f90735440c6e6da9fcd9c","ssdeep":"1536:Sy4rImzKyAnYdP2brRYIDn0cEJ1nD08YZLVZIoVd1vLUUpT90vJTh2i4WUE7ED7S:8zKZd6cY0HLVSeT0vJh9P","tlshash":"05930a982fd0a3aa02d964b7722f9e5ff1165c835144e499f30bf8cc295eb15f532b60","first_seen":"2026-07-22T11:05:26.377678Z","last_seen":"2026-07-22T11:15:28.042817Z","times_seen":2,"resource_available":true,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":52,"connect":91,"send":0,"wait":98,"receive":92,"ssl":536},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"pl30474351.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"63.177.47.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.561Z","timestamp":1784718889561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\nset-cookie: uid_id2=37c253e7-656c-40c9-8aca-d6a707b64cdf:3:1; Expires=Sat, 19 Jul 2036 11:14:49 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":504,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"f2428f1a812bfa721b4ddd402ee40297","sha1":"23e1fd927c454c228eecfb20d85f69236ec86c40","sha256":"47cebbe6e9dda5827fc3c3de13329ab3469205b3964e83550aecf208c8e0e8b4","sha512":"e3e228da5416330a01d14683f073f3fd70a54faaf76af2b26aa59ec7889d9f64885b71a98d833af8ba55f5e457d1c9dc05152952e0a0e17b0b53f1e3ef2aa659","ssdeep":"","tlshash":"11900454305444d05d741504554d143dc01313113475c5fd0034dc5047f1411744d451","first_seen":"2026-07-22T11:15:28.043534Z","last_seen":"2026-07-22T11:15:28.043534Z","times_seen":1,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":23,"send":0,"wait":26,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css\u0026l=4143\u0026fd=495","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.784Z","timestamp":1784718891784,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Fvpn%2Fclassic-push%2Fbig1%2Fcss%2Fstyle.css\u0026l=4143\u0026fd=495 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl30311731=1; iprc_c+19895010c316def989c20ba829fb068c=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl30373852=1; slec2292af2638b295653394b0c199ae3b74=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Mobile, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Model\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":802,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pl30474352.effectivecpmnetwork.com/fd/22/d3/fd22d32cda0b16ebc55f22846048c30d.js","fqdn":"pl30474352.effectivecpmnetwork.com","domain":"effectivecpmnetwork.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:46.012Z","timestamp":1784718886012,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"effectivecpmnetwork.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 13 Jul 2026 22:12:12 GMT","end":"Sun, 11 Oct 2026 22:12:11 GMT"},"fingerprint":{"sha1":"0C:E4:9E:97:82:CC:3E:2D:41:19:24:86:F0:A7:44:A5:A8:46:DD:89","sha256":"38:78:44:2C:B3:B0:37:C7:47:EA:FA:8C:DF:E3:6C:FD:0C:A1:DF:6B:99:D4:29:51:84:38:50:6D:37:23:D4:37"}}},"request":{"raw":"GET /fd/22/d3/fd22d32cda0b16ebc55f22846048c30d.js HTTP/1.1\r\nHost: pl30474352.effectivecpmnetwork.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: pl30474352.effectivecpmnetwork.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c39f5342be557f7f4620dddb0a3f0710\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97814,"size_decoded":33056,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc8e6890a1368fb772afed0c9053a943","sha1":"54f38560984b585fa362608d0d37c5c097b883cb","sha256":"428bef335f2d594845d6eefa866ce0c6f50a0057adc891c2b2cb65ebd7d28b83","sha512":"dabc98784a5e2d92e960eb524036f9a227feaa48d6f36252ff31692b668bc07a50320d7488c35acdd0cd13f214008cfa501a0405d4016463b915b7b1d9ce91e6","ssdeep":"1536:0igOasyQvXsOBpRo6/kLvVp4RYWlxWvuS6FFpmiLIBs/UzmL:wCyiRX/kLdp4RYWl16wL","tlshash":"07a3a7587f91f0a8126778b6321fe40ff13a5c5aa54ce088f117ec983b7c754ea36a64","first_seen":"2026-07-22T11:15:28.045011Z","last_seen":"2026-07-22T11:15:28.045011Z","times_seen":1,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":48,"connect":91,"send":0,"wait":98,"receive":93,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"pl30474352.effectivecpmnetwork.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/sbar.json?key=2292af2638b295653394b0c199ae3b74\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.442Z","timestamp":1784718890442,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /sbar.json?key=2292af2638b295653394b0c199ae3b74\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl30311731=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Device-User-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; Path=/; Expires=Wed, 29 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nuncs=2; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nu_pl30373852=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nslec2292af2638b295653394b0c199ae3b74=[4323736]; Path=/; Expires=Wed, 22 Jul 2026 11:14:55 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 213\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 39398351f7c812e0fa9eb2acd6b4d1fd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5869,"size_decoded":4998,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"4b1eec432296abcafa724862c0279f60","sha1":"12ded95d0a7db47836b2bc5a97b9afa0f853730f","sha256":"a2076d3e45443496f0f9703ffd32557d496b7b915f03893776a6f42097ffb1e0","sha512":"1f53e4c9c868569a4f9b86ed3588970ed44e4e5987854bcf97460599aa1d90de88422ec813e289eb67bd3dbb9c316eaea8988d20253caedc851c2e5ef3c79fc6","ssdeep":"96:9z46THR73c6d3ElJ6TfwyThlAtVFj4wNNVDqZVYZuzCyQGytjRzLX35:9z4oHx766Tf7TAtV54wNDuYVyQ9RfXp","tlshash":"5cc16e5a702824b7bf499d94e2870df24cc80e1e67d4e1cfca32429b4936f7635ca56a","first_seen":"2026-07-22T11:15:28.046033Z","last_seen":"2026-07-22T11:15:28.046033Z","times_seen":1,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/ren.gif?sid=H4sIAAAAAAAC_1xSPY8bVRR946QDiU_RIKQpUgDC3nnz4fGQIiIiIJDYAAlECgW8j3mbF49nJvNmbMc0GwIUVEsXaBgfe3dBQhFIVBQIeSmQVgiYzhLZhp-AhESHvGspiFvce989pzj3vvPxtDoiHVRs-fpr2UQnCdsIOo799BWdymxk7M3LNnU6zln7ik67_ll7vErF8Hnq-R3nGfvlWPSzDdehjkMdar-ki1hl441jFDq_S6Og0_U7lPY6NHAxLv4_MVULhlmQwyPyKLRsHvpTvQMtFkgH37wYm36Z5c9dGFQJK7MCQ7n_VtpPs1GKwf1WFRZUur9mIzMNIXdayNL99RbIhvPVFuC6Ia0n7oGn-2up4MPdE7U8QZyCywcwGi4QJwtotoDIbkPL3wkgJDYvIh3sbWbFiN08QdkKbcjpv_-CHjXk9L3HkQ7unk_02L6UJVWps9RgrGro8QJ6a4G8OkA5aUGPDiDKD6AlQTqYtqHl8oxylBAeFW2qur22Lx3V5pGg7aDr01CEXR67_Pg2Wi3AzClUxkKlLVSqhSpvYSCXNot6ikddn0WxCpV0aChY4HlR6Aeu6ooAlbgFLXcgio_mVSrMlH6Zy2tlf-h687Ko4r3V0PWm9Ovq3TzxHI_S0KNTunfCOuYgL7bR1zswsgVTNsR6YxtDWe_KxLim3pOJqThdV3ddvXqWlVtTtpuVW3FKwIodFLKe6_yGuQ1RnppNlJGzbJUYL-sZ47KeaVkSFDeWZxwaqV7Ui9o0UEE79ClrRzQK244npR-HgcN9Z65MWdXT_Ig8svoY69fRH-jHS9t1I5cpt-v1uBsF3dU9fO4IGkUs9njow-ga2rTAjIWJbsjVt68i1w1xf3sSnB3AJAcQ-mGw6imwUQ12rcYk_WqoWTTuiGwAmdXIy9Mob1rT5Ig8Nnvz8vkfj83xwj93EIvDc8vPVvE5RFEjL2pc1z8RbCW3vr2Yl3qgJ2zllkslK-NTYLoh1vu_QOiGPPjqhWPjnnnlE4h8GyY_PPf9Fz8Mf_4ugskIeG4h0QRJfEjWAcZrmP-8-f1-aj7EVmGBJ9aMJ4U150mRfHoi0-il7Ug_piJiQajiIAh44LtCKe6ErvI8txehNM319_ae_TcAAP__rgisWDoEAAA=","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.757Z","timestamp":1784718890757,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSPY8bVRR946QDiU_RIKQpUgDC3nnz4fGQIiIiIJDYAAlECgW8j3mbF49nJvNmbMc0GwIUVEsXaBgfe3dBQhFIVBQIeSmQVgiYzhLZhp-AhESHvGspiFvce989pzj3vvPxtDoiHVRs-fpr2UQnCdsIOo799BWdymxk7M3LNnU6zln7ik67_ll7vErF8Hnq-R3nGfvlWPSzDdehjkMdar-ki1hl441jFDq_S6Og0_U7lPY6NHAxLv4_MVULhlmQwyPyKLRsHvpTvQMtFkgH37wYm36Z5c9dGFQJK7MCQ7n_VtpPs1GKwf1WFRZUur9mIzMNIXdayNL99RbIhvPVFuC6Ia0n7oGn-2up4MPdE7U8QZyCywcwGi4QJwtotoDIbkPL3wkgJDYvIh3sbWbFiN08QdkKbcjpv_-CHjXk9L3HkQ7unk_02L6UJVWps9RgrGro8QJ6a4G8OkA5aUGPDiDKD6AlQTqYtqHl8oxylBAeFW2qur22Lx3V5pGg7aDr01CEXR67_Pg2Wi3AzClUxkKlLVSqhSpvYSCXNot6ikddn0WxCpV0aChY4HlR6Aeu6ooAlbgFLXcgio_mVSrMlH6Zy2tlf-h687Ko4r3V0PWm9Ovq3TzxHI_S0KNTunfCOuYgL7bR1zswsgVTNsR6YxtDWe_KxLim3pOJqThdV3ddvXqWlVtTtpuVW3FKwIodFLKe6_yGuQ1RnppNlJGzbJUYL-sZ47KeaVkSFDeWZxwaqV7Ui9o0UEE79ClrRzQK244npR-HgcN9Z65MWdXT_Ig8svoY69fRH-jHS9t1I5cpt-v1uBsF3dU9fO4IGkUs9njow-ga2rTAjIWJbsjVt68i1w1xf3sSnB3AJAcQ-mGw6imwUQ12rcYk_WqoWTTuiGwAmdXIy9Mob1rT5Ig8Nnvz8vkfj83xwj93EIvDc8vPVvE5RFEjL2pc1z8RbCW3vr2Yl3qgJ2zllkslK-NTYLoh1vu_QOiGPPjqhWPjnnnlE4h8GyY_PPf9Fz8Mf_4ugskIeG4h0QRJfEjWAcZrmP-8-f1-aj7EVmGBJ9aMJ4U150mRfHoi0-il7Ug_piJiQajiIAh44LtCKe6ErvI8txehNM319_ae_TcAAP__rgisWDoEAAA= HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjozMDMxMTczMSwiayI6IjUwZTc1NDg1ZjkzNzZkY2QxMzE4YTczNWI2NmM5YmMxIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1OTIwMzQ2LCJwaWQiOjMzMzAwNzUsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MTYsImFpZCI6MjMsInB0Ijo0LCJwayI6Ink5NTNwMmFwIiwiY3BrcyI6eyIyOCI6IjJhMjJjMTFmMWQyMDI1Njk1OWNjMzRiNTYzNDMyMjczIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MCwibiI6Ii0ifSwicmciOnsiaWQiOjAsIm4iOiItIn0sImEiOmZhbHNlLCJjciI6eyJuIjoiQmxpeCBTb2x1dGlvbnMifSwieGYiOiIiLCJpeGYiOmZhbHNlLCJpZ3hmIjpmYWxzZSwiaXdmIjp0cnVlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vdmlhOXguY29tLyIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=2; pdhtkv23=true; uncs23=1; u_pl30311731=1; iprc_c+19895010c316def989c20ba829fb068c=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl30373852=1; slec2292af2638b295653394b0c199ae3b74=[4323736]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin,Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e4ed39aae6790de6fd3b6e7a43b80ef1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/pixel/ase","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:52.286Z","timestamp":1784718892286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"OPTIONS /pixel/ase HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:52 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":552,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":91,"send":0,"wait":92,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/50e75485f9376dcd1318a735b66c9bc1/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:46.010Z","timestamp":1784718886010,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 22:27:03 GMT","end":"Sat, 05 Sep 2026 22:27:02 GMT"},"fingerprint":{"sha1":"54:46:9A:99:5D:9F:19:5B:67:21:55:1F:5C:6F:38:A2:52:41:7E:57","sha256":"35:BA:52:C1:31:7C:AD:F1:9A:03:6D:D2:37:B7:E5:67:B2:0A:BF:BB:B5:70:84:A4:4D:4E:AE:90:2A:2A:72:47"}}},"request":{"raw":"GET /50e75485f9376dcd1318a735b66c9bc1/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 03650e5373669a96922c26f7ebacc221\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51417,"size_decoded":19771,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51417), with no line terminators","md5":"7913442bd7479f801eb410b42bda6de4","sha1":"b805ca672c5bb212c86bd5bad4a85a0d8d3a4c9c","sha256":"59d0397b0f4ae0653e07c350eb51a8b61a7182c736f53a58989573b6b6569a4a","sha512":"dcc947703f9cecd1d9619a3edd2a6c0e98138bc572ae4049705c9918da04c2b36b7eb1e16d49dd5983d27f4a532b6ebcda8720dd9964aaa80cd08783b9c05fc0","ssdeep":"768:nuD21qUXaBHxR5iEzbIR8oFwd6XHewEhMhelNYItnhE:nuyYC1G6XHg6helpn6","tlshash":"4333b68d7fa1f01412aa3077732f902bf45e4d165cfcd094e183b4a86d78739eab66a4","first_seen":"2026-07-22T11:05:26.355433Z","last_seen":"2026-07-22T11:15:28.047034Z","times_seen":2,"resource_available":true,"data":null}},"time_used":849,"timings":{"blocked":-1,"dns":3,"connect":92,"send":0,"wait":99,"receive":91,"ssl":564},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image1.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:48.092Z","timestamp":1784718888092,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image1.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:48 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18840\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 4a51ddfe7ce881d24580d6f9a81ca988-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.013\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":18840,"size_decoded":19163,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"617508c5cf9f9729179c164a4bfcb2f1","sha1":"ea61a534957e872139a0e7f71b34007b3e14483b","sha256":"b29e24e259700daf1075d60f962097a84f50cfff3461c98adde890f34e06edd8","sha512":"d4fe4011556cb6a6eed843119886d10bcccf245e6f0ec3d55dc467a4f4d10113be2bfd9bdeadbdc34357fe3cbb1b6d7eea4fcdb429c87dbef62575bb66e8a0ab","ssdeep":"384:DnamUWG2GR0cXdcjAL9ZQaaUf5HiaoZwySKzH55d4zNHe5jJUXi:DamUWGIcXlaTZwqVYNwjey","tlshash":"2482d17a3b7dc6d085bc7df832581c9c9042dd098e7556650e936e3eec22392c6ac8da","first_seen":"2026-07-22T11:05:26.344658Z","last_seen":"2026-07-22T11:15:28.04839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image11.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.705Z","timestamp":1784718889705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image11.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 27610\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 44262396a5655e1e8bc3ae1da9415020-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.022\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":27610,"size_decoded":27933,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01bb8c2a31741c3274bbbc8db09bff46","sha1":"087a47267dc8026290ec60c5965af732acd25492","sha256":"9608b64b61bf7fb1b0350506ed8514f04f35bc884391cde323e46af158a93782","sha512":"9ad8e015ac0add171bbc3aa46249a620de073550130168a4e050c75fb7a99a5fbc3e193459e8f668221c623c91020efe9d3d2bee95fd4a2661b9f64542ab0073","ssdeep":"768:WBznwZ7YlcM7D4T0qNbnRMKHSJ+vdvlbL:WhnO7Ya+MxN9Sgvdvh","tlshash":"19c2e0a97a8cd955f3e0e13442f447582d2d6adf35220752b36e35740fb373e3541a80","first_seen":"2026-07-22T11:05:26.361708Z","last_seen":"2026-07-22T11:15:28.049675Z","times_seen":2,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/watch.1218564739402.js?dev=e\u0026fstu=019f8989-1466-7506-9004-222ce8c61c93\u0026key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026ps1=1784718890\u0026rb=e\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=HUnCtOUSeVbA1JVFXp2sXUuWSfqABsec8iHkY5wGduY\u0026shv=2\u0026st1=42c8ed19210f7d706eb0be75e06abb11\u0026tz=0\u0026uuid=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b%3A3%3A1","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.145Z","timestamp":1784718890145,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /watch.1218564739402.js?dev=e\u0026fstu=019f8989-1466-7506-9004-222ce8c61c93\u0026key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026ps1=1784718890\u0026rb=e\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=HUnCtOUSeVbA1JVFXp2sXUuWSfqABsec8iHkY5wGduY\u0026shv=2\u0026st1=42c8ed19210f7d706eb0be75e06abb11\u0026tz=0\u0026uuid=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b%3A3%3A1 HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://via9x.com\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; Path=/; Expires=Wed, 29 Jul 2026 11:14:50 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\npdhtkv23=true; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nuncs23=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nu_pl30311731=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 12\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5b34e64a5902cc12ef7b1f6012a5b1f1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4008,"size_decoded":4017,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3132)","md5":"0553fe4f11210940b767ae3be7fe551c","sha1":"c845f567c9c9e653e139725dc955263ea3a91c0d","sha256":"9fa516a6a7c54fd3b6c1996983374aa176bd2b3fc94865bd341501235c4aae96","sha512":"098d915c57dcb52d960f81598c8b725d43bb579f74b95a5d1f51e93eef8b8b15107c8afbcb9d63a60d3dbcbab621d955ba99c371191f6345c27f82ef81649822","ssdeep":"","tlshash":"27813bb96d91b1bd045320ef21762e29a630520b2a8c8e85784cdd54ef50fb0cebcedd","first_seen":"2026-07-22T11:15:28.050523Z","last_seen":"2026-07-22T11:15:28.050523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flushpersist.com/pxf.gif?uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf\u0026eb=31dc1149c619d23f0bcb9de207fcc840\u0026te=75f4d68fa8925045ffe03962c8d834b3\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=2292af2638b295653394b0c199ae3b74\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11","fqdn":"flushpersist.com","domain":"flushpersist.com","tld":"com"},"ip":{"addr":"172.240.127.242","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.596Z","timestamp":1784718890596,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /pxf.gif?uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf\u0026eb=31dc1149c619d23f0bcb9de207fcc840\u0026te=75f4d68fa8925045ffe03962c8d834b3\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0\u0026dev=e\u0026res=14.1055\u0026b_frame=0\u0026pk=2292af2638b295653394b0c199ae3b74\u0026bl=en-US\u0026sr=1024x1280\u0026sz=1024x1280\u0026hjs=11 HTTP/1.1\r\nHost: flushpersist.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:51 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: flushpersist.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dd1e59b27042268feeeaf45750eb5670\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"flushpersist.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"172.67.170.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.755Z","timestamp":1784718890755,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 02 Jun 2026 04:04:12 GMT","end":"Mon, 31 Aug 2026 05:00:57 GMT"},"fingerprint":{"sha1":"28:6F:05:E4:28:4E:C4:2B:34:02:67:C3:E1:F5:19:EB:20:E8:C4:A7","sha256":"0B:AF:1B:3F:5D:C6:E2:7F:31:2A:ED:02:73:11:9E:2B:13:55:A8:F3:39:07:61:B5:D6:1E:58:D1:59:D9:22:99"}}},"request":{"raw":"GET /sb/au/48/48/eb/4848ebd6f7295875a5d388ec2488aba3/1648542421.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 29 Mar 2022 08:27:10 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UB6d%2BpbeDIxY%2FThQ4Dl4sYk0nINdd4XUZpJvt3lIp2JEPoPsIBeaabWC7wU%2BL%2Feo4a%2FGqunMiyeaMWzp8HUO%2BToegyQTVp%2BBtj6qyDw%2B7A9%2BzUAxP4FwGNkwa3LjwXrLAls%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a1f2062b4ee849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1538,"size_decoded":1311,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"5a7df8dcac4cde2aeadb9f07a622d3fa","sha1":"4044f12fce935458c93ef71de58ac6bf97b28bba","sha256":"ccec003eccd7e299f825c7e48ba721d529f1c110bb5b60c60a18dca61cb6b45a","sha512":"4d075a467bec7bf6b68a5da10f2547cb101bf9ed75390e2d0629f7f35430a67b850253fb6b4c5381a1dfeaa642299088afce7a6d65e76ef173705c40a34fbc8f","ssdeep":"","tlshash":"6531055a2ee9c57701e35484bb342f2bed91aa83880a690173fc59a48f96dd1ce63407","first_seen":"2023-04-07T07:09:28Z","last_seen":"2026-07-22T11:15:28.051664Z","times_seen":1427,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":5,"connect":11,"send":0,"wait":467,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.386Z","timestamp":1784718891386,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Jun 2026 08:39:27 GMT","end":"Mon, 21 Sep 2026 08:39:26 GMT"},"fingerprint":{"sha1":"50:37:CF:61:33:A1:EE:47:D9:3D:A6:5E:07:BA:4C:FF:F7:25:9F:76","sha256":"7D:4D:21:06:63:E2:5E:F0:8C:59:8E:EB:B7:94:2B:81:70:11:D3:F4:C0:A0:81:A6:1B:E7:27:FD:56:10:1A:11"}}},"request":{"raw":"GET /css?family=Roboto:300,400,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 22 Jul 2026 11:14:51 GMT\r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":2347,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1936a90eef3ebd4c6b40eb59d72e164d","sha1":"4c698f8dc97e2e6186d46215e209aca1b1194a5d","sha256":"412d98c2f4410a048131a7d9362fb38456ce2ff67cd4731ea411708a7996a021","sha512":"07ad2431175e5566ae435738d94d4da3e96e4856a1fe1d5917c52474cab28808cd940fec0e8f75eb2f3d573e6fe8497fc12636ef4738d1b67e9144725192b580","ssdeep":"384:p9f59g9P9r9yU9/qY4+949Y9p9fM919W969yh9/qY4X9N9t949fd9k9D939yQ9/O:pDS99YURRuWDyjooYhREHPWP2ZZYQRVs","tlshash":"48721091041704009b834ce223cebf35fe1f52117142d0b5abfd9b6b9ddbca6526939d","first_seen":"2026-02-19T22:28:01.752187Z","last_seen":"2026-07-22T15:28:05.617837Z","times_seen":9609,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/vpn/classic-push/big1/js/jquery.min.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.391Z","timestamp":1784718891391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/js/jquery.min.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa84fe-1499c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1836090\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z9prcQS7xQhOQnIRRs1Iu5a5IYqVZ6q1sHYy9ldlgVEH39cdRtVy%2FAXp3j1CsO6Wa52Uz8QmUlBA0%2BHQP9Klsvu9QPn9A3rdAr9RUWxFr9fKrWAWQFX2MU4MeVn04Flfyuk7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f2062f29850b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84380,"size_decoded":85216,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-07-22T14:47:07.816233Z","times_seen":19906,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/vpn/classic-push/big1/img/close.png","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.393Z","timestamp":1784718891393,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/img/close.png HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\npriority: u=5,i\r\netag: \"65aa84fe-24f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 3622986\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gsHP8RA%2BqfFkKfcwkzgD3Yqk3QtXvj3B2Urzpbv4BgBDR72TSbWfEbpGcnuls52K%2FkD2KfbOPKDbABVb34q29eDgsKx1mxhHSObhKv%2B0w3FwIYETaSpFaFFw12v1YTpjIrIT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f2062f39860b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 591\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":591,"size_decoded":1409,"mime_type":"image/png","magic":"PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced","md5":"9fd5bcb6103d86e317bd1eb019bcbe71","sha1":"6b5a52ea669dcb74946f2bed4bdd7ec985026113","sha256":"0ddd3be104ac7945fb062096df62034a6a24ecc76ba92493c35c62c3c25982ae","sha512":"e244a8842c009fa83e8d9d1088ec5b76ca2a42660568b7886e01724977b9ebd4e43690e0c651e25287c64dcc4826391b34cae6a106e2148139450dd05fc5a562","ssdeep":"","tlshash":"b0f0414e7c5903a1874caf3b18dd00119c27898077c82e0db689eed20e008e215471da","first_seen":"2023-04-11T11:09:41Z","last_seen":"2026-07-22T14:32:20.717045Z","times_seen":6357,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"172.67.68.11","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.150Z","timestamp":1784718889150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 17 Jul 2026 20:38:38 GMT","end":"Thu, 15 Oct 2026 21:38:35 GMT"},"fingerprint":{"sha1":"AF:4F:AD:59:FA:ED:77:04:0D:32:56:48:B0:E5:1B:38:67:6D:7D:02","sha256":"E7:FC:CF:2D:6A:CC:F5:3C:4C:1E:9D:CD:21:8A:72:A3:DB:7C:B1:50:0F:83:D1:DC:E4:AD:25:90:8F:98:37:0F"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::bj55r-1781146628084-40ce7f37f405\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 3572260\r\nlast-modified: Wed, 01 Jul 2026 01:49:34 GMT\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5SZYc1PdrZFK3K4wSrGY7q0bhvD29rFRx84ogrGPKyxYmh6Tl8rfTKeucYk0HbXLea1Rwo4S98LIKaaOiDR4cvXM2D12iOsv8rnWY37VIZEnI%2BDAGdNdbxOlB0DAe9uZ%2FzDkKg%3D\"}]}\r\ncf-ray: a1f206212d40dfec-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":127120,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-22T14:05:48.774807Z","times_seen":45444,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1xSu44cRRStHq-QEAFvCEg6cACInq3qd-PM4hGxRthgySTUo3spb093u6t7ZjzRmgXiNRFhz5l9iMSCP0CzSARIiJ1sAk_CJ4Aco1mPtEAF996656p0Tt3z7bRdkT5avvz4o3Ki85xvB31qv3lbF6ocGXvnls1on16zb-si9K_Z43Woh-8yz-_Tt-wPU7lXbruUUcoosz_QdZqV4-0LFLp6xJKgH_p9xuI-C1yM6_93TGvBcAtquCIvQavF839mn0PLOYrBj--lZq8pq3feH7Q5b8oaQ3X6abFXlKMCg8syqy1kxelmGqVZEPJ9D2VxulGBcni0VgGhF6T32mOI4nRDFWJ4_JStyJEWEOo5jIZzpPkZNJ9DlgfQ6pwAUmHnBorByU5Zj_j9pyhfowuy9eQv6NGCbD1-BcXg0fVcj-2bZd42uiwMxlkHPZ5D785RtWdoJj3o0Rlk8xW0IigGUwdaLa9mNJPSY9JhWRg7vqKZIxLJnCD0WSSjUKSuuPgbnc3BzRW0xkKrLbRZD23Vw0AtbZ7EmUhCnydpFmWKskjywPOSyA_cLJQBWvkAWh1C1vuo6n3s6e_OrYfnwa8wyoJpCIaqO1a5cU13onLTCrbJ7iZ73axsdqf8uGx204KA14eoVXekq3vmALK5MptkRs3KdeCi6WZcqG6mVUNQ31tepSzJ4iROHOYr6kQsTpyYC-YoEYee50lPuuFRZpr2P6Nh6EQBDZ2EUt9xXVemsQyZTLxptSIvrtdg_f6Nh710aQc0jQI_DrLEi0IlFfNYzCMvEGEoEyEZjO6gTQ_cWJjoBbnz2R1UekHcP96A4Gcw-RmkfgG8fR18NIvcGPxLJBST4oeh5sm4L8sBVNmharbQ3Lem-Yq8PPvk1vWfL_yQTp5FKn8jmwNZd6jqDnf1LwS7-YOfblSNHugJXxvkZsOb9BlwvSDWlYeQekFe_fvgwqvJkxVktQ9TXb5lSgJREeSaIE8v-1x0MP-6i8t6ar7Gbm1B5NZM5DU5EnmdH8LopR27LqWSuYlKAj_x4iwNfBZFacC8MKVegMYs7n5x8vY_AQAA___XZ5OZKAQAAA==","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.359Z","timestamp":1784718890359,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSu44cRRStHq-QEAFvCEg6cACInq3qd-PM4hGxRthgySTUo3spb093u6t7ZjzRmgXiNRFhz5l9iMSCP0CzSARIiJ1sAk_CJ4Aco1mPtEAF996656p0Tt3z7bRdkT5avvz4o3Ki85xvB31qv3lbF6ocGXvnls1on16zb-si9K_Z43Woh-8yz-_Tt-wPU7lXbruUUcoosz_QdZqV4-0LFLp6xJKgH_p9xuI-C1yM6_93TGvBcAtquCIvQavF839mn0PLOYrBj--lZq8pq3feH7Q5b8oaQ3X6abFXlKMCg8syqy1kxelmGqVZEPJ9D2VxulGBcni0VgGhF6T32mOI4nRDFWJ4_JStyJEWEOo5jIZzpPkZNJ9DlgfQ6pwAUmHnBorByU5Zj_j9pyhfowuy9eQv6NGCbD1-BcXg0fVcj-2bZd42uiwMxlkHPZ5D785RtWdoJj3o0Rlk8xW0IigGUwdaLa9mNJPSY9JhWRg7vqKZIxLJnCD0WSSjUKSuuPgbnc3BzRW0xkKrLbRZD23Vw0AtbZ7EmUhCnydpFmWKskjywPOSyA_cLJQBWvkAWh1C1vuo6n3s6e_OrYfnwa8wyoJpCIaqO1a5cU13onLTCrbJ7iZ73axsdqf8uGx204KA14eoVXekq3vmALK5MptkRs3KdeCi6WZcqG6mVUNQ31tepSzJ4iROHOYr6kQsTpyYC-YoEYee50lPuuFRZpr2P6Nh6EQBDZ2EUt9xXVemsQyZTLxptSIvrtdg_f6Nh710aQc0jQI_DrLEi0IlFfNYzCMvEGEoEyEZjO6gTQ_cWJjoBbnz2R1UekHcP96A4Gcw-RmkfgG8fR18NIvcGPxLJBST4oeh5sm4L8sBVNmharbQ3Lem-Yq8PPvk1vWfL_yQTp5FKn8jmwNZd6jqDnf1LwS7-YOfblSNHugJXxvkZsOb9BlwvSDWlYeQekFe_fvgwqvJkxVktQ9TXb5lSgJREeSaIE8v-1x0MP-6i8t6ar7Gbm1B5NZM5DU5EnmdH8LopR27LqWSuYlKAj_x4iwNfBZFacC8MKVegMYs7n5x8vY_AQAA___XZ5OZKAQAAA== HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=f0fcc31c-1f68-4d0f-b9c1-56417c76be2b:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl30311731=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+19895010c316def989c20ba829fb068c=1438851; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\r\nvary: Origin,Accept-Encoding\r\nx-envoy-upstream-service-time: 5\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e5661397c388c29868c3dddf6d50ef15\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-22T11:14:45.094Z","timestamp":1784718885094,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 21 Jul 2026 20:58:55 GMT\r\netag: \"41c3-6a5fdd8f-ee0f0d0135b637cc;br\"\r\ncontent-encoding: br\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 2d7364c56c125ab54993f38229b3a3d4-fra-edge1\r\nx-hcdn-cache-status: DYNAMIC\r\nx-hcdn-upstream-rt: 0.102\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]},{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":16835,"size_decoded":3465,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (435), with CRLF line terminators","md5":"fd48b4cf1b98ec92e01fcd2678bca817","sha1":"4e8bfb5df642d1404bb2364dcf33c842e4c2f30d","sha256":"81c7e341ae2df57e9dd8dc4a482ec0b221d266ea3df5605279926641877e4a99","sha512":"7cfc3300c7bb83a4a6c1dd27b8eb0bb0a5cc8b313eb69e2d8c2062ec6f5f0755ff4c7ef3b6e2795bca0e08fc18631ebdd7f4c5e4295da0919295a7b6e216cb6a","ssdeep":"192:zQahSrIOO7/9Q2TehlGwEqVcjmQAZIHcrTcNowEE:0akkJD9QUerEqVcpAZIHcrTckE","tlshash":"f7726433554206bf41138ab1e326eb5ce195c52acb27c65af6ee07d743dada3c613348","first_seen":"2026-07-22T11:05:26.349779Z","last_seen":"2026-07-22T11:15:28.054546Z","times_seen":2,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":35,"connect":27,"send":0,"wait":128,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image1.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.657Z","timestamp":1784718889657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image1.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18840\r\ncache-control: public, max-age=604800\r\nage: 1\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 6b20c63faea0d30e7ce476332ec2f61e-fra-edge5\r\nx-hcdn-cache-status: HIT\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":18840,"size_decoded":19143,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"617508c5cf9f9729179c164a4bfcb2f1","sha1":"ea61a534957e872139a0e7f71b34007b3e14483b","sha256":"b29e24e259700daf1075d60f962097a84f50cfff3461c98adde890f34e06edd8","sha512":"d4fe4011556cb6a6eed843119886d10bcccf245e6f0ec3d55dc467a4f4d10113be2bfd9bdeadbdc34357fe3cbb1b6d7eea4fcdb429c87dbef62575bb66e8a0ab","ssdeep":"384:DnamUWG2GR0cXdcjAL9ZQaaUf5HiaoZwySKzH55d4zNHe5jJUXi:DamUWGIcXlaTZwqVYNwjey","tlshash":"2482d17a3b7dc6d085bc7df832581c9c9042dd098e7556650e936e3eec22392c6ac8da","first_seen":"2026-07-22T11:05:26.344658Z","last_seen":"2026-07-22T11:15:28.04839Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/6f/8f/ef/6f8fefa6447554571085566ee4c3443e/1779116078.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.517Z","timestamp":1784718890517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /cti/6f/8f/ef/6f8fefa6447554571085566ee4c3443e/1779116078.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:50 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51720\r\nserver: nginx/1.21.6\r\nlast-modified: Mon, 18 May 2026 14:54:39 GMT\r\netag: \"6a0b282f-ca08\"\r\nexpires: Fri, 24 Jul 2026 11:14:50 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51720,"size_decoded":52068,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3","md5":"b6957de897cb323a38dc34a688e70052","sha1":"6e182d39840574562a5bc55aadd8b023ac2482e3","sha256":"ae7ce5096147dcde1a0e1b851808d6d16357c50eaa23ffde86920a67a719da89","sha512":"614ebc2afb4e44442d0b0fc1d4c54b60d1f3456dbfcf887fbb89ea390653e11f06ba7182416eb66843559052dfb35b201068b8d76dae6c457218eda3762f0fbd","ssdeep":"768:BAy9QMQeGshvjUFBZa1oZQm1CrSL4eN7bsImcKbdBgzI8F4x5XRBr:BAMLGeaZa19m1+eN7be+zI8ux1r","tlshash":"8a33f264ebe7d3439b432013504d7c971812aceb60c925535a7f6c71c1dafa3a862e3d","first_seen":"2026-05-19T19:15:08.471779Z","last_seen":"2026-07-22T11:15:28.05542Z","times_seen":186,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/impr.gif?sid=H4sIAAAAAAAC_1xSv4_cRBQe751oUvAbChoXKQDhPf8a20O6iB8VF0QCkULDeGZ8TM5rOx57d7PVhQPqCxWl99v7IZoI_gO0h0SBhLjttsgJiT8BlBrtZaWLMsV7b973NPq-ed_30_ac9NHy5aeflBOd53yL9l377du6kOXI2Nu3bM_tu9fs27qIwmv2eBXq4fteEPbdd-yPldgtt3zXc13P9eyPdK2ycrx1gUJXjzxG-1HY97yk71Ef4_r5jmktGG5BDs_JK9By8eI_2ZfQYo5i8PMHyuw2ZfXeh4M2501ZYyhPPi92i3JUYHBZZrWFrDhZT6M0C0J-7KEsTtYqUA4PVyqQ6gXpvfEYaXGypop0ePSUbZpDFUjlFYyGc6j8FJrPIcp9aHlGACGxfQPF4Hi7rEf8_lOUr9AF2XzyL_RoQTYfv4Zi8Oh6rsf2zTJvG10WBuOsgx7PoXfmqNpTNJMe9OgUovkGWhIUg6kDLZdXg1j4NFCxE9FIOKErmJNwwR0Z8diN0ygUMrv4G53Nwc0GWmOh1RbarIe26mEglzZnSZayKORMZXEmXS8WnAYBi0PqZ5GgaMUDaHkAUe-hqvewq384sx6e0d9hpAXTEAxldyRz45vuWOamTb119tc56GZlszPlR2WzowoCXh-glt2hru6ZfYhmYzbJjJyVq8DTppvxVHYzLRuC-t7yquuxLGEJczzqCieWWeokiscOowmjEVcJTehhZpr22dGQu05MfeEkvpKOSiXjlLEk9t1pdU5eXq3B-vO7ALtqaVNXxTRMaMaCOJJCeoGX8DigaRQJlgoPRnfQpgduLEz0gtz54g4qvSD-X28h5acw-SmEfgm8fRN8NIv9BPxrMBeT4qeh5mzcF-UAsuxQNZto7lvT_Jy8Ovvs1vVfL_ygJlegxB9kfSDqDlXd4a7-jWAnf_DLjarRAz3hK4PcbHijXgDXC2JtPITQC_L6f_sXXmVP_oao9mCqy7dMSZBWBLkmyNVln6cdzDP39LKemm-xU1tIc2uW5jU5TPM6P4DRSzvxfdcVns8koyELkkzR0ItjRb0gUm5A0ZjF3a-O3_0_AAD__0VIM8soBAAA","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.518Z","timestamp":1784718890518,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSv4_cRBQe751oUvAbChoXKQDhPf8a20O6iB8VF0QCkULDeGZ8TM5rOx57d7PVhQPqCxWl99v7IZoI_gO0h0SBhLjttsgJiT8BlBrtZaWLMsV7b973NPq-ed_30_ac9NHy5aeflBOd53yL9l377du6kOXI2Nu3bM_tu9fs27qIwmv2eBXq4fteEPbdd-yPldgtt3zXc13P9eyPdK2ycrx1gUJXjzxG-1HY97yk71Ef4_r5jmktGG5BDs_JK9By8eI_2ZfQYo5i8PMHyuw2ZfXeh4M2501ZYyhPPi92i3JUYHBZZrWFrDhZT6M0C0J-7KEsTtYqUA4PVyqQ6gXpvfEYaXGypop0ePSUbZpDFUjlFYyGc6j8FJrPIcp9aHlGACGxfQPF4Hi7rEf8_lOUr9AF2XzyL_RoQTYfv4Zi8Oh6rsf2zTJvG10WBuOsgx7PoXfmqNpTNJMe9OgUovkGWhIUg6kDLZdXg1j4NFCxE9FIOKErmJNwwR0Z8diN0ygUMrv4G53Nwc0GWmOh1RbarIe26mEglzZnSZayKORMZXEmXS8WnAYBi0PqZ5GgaMUDaHkAUe-hqvewq384sx6e0d9hpAXTEAxldyRz45vuWOamTb119tc56GZlszPlR2WzowoCXh-glt2hru6ZfYhmYzbJjJyVq8DTppvxVHYzLRuC-t7yquuxLGEJczzqCieWWeokiscOowmjEVcJTehhZpr22dGQu05MfeEkvpKOSiXjlLEk9t1pdU5eXq3B-vO7ALtqaVNXxTRMaMaCOJJCeoGX8DigaRQJlgoPRnfQpgduLEz0gtz54g4qvSD-X28h5acw-SmEfgm8fRN8NIv9BPxrMBeT4qeh5mzcF-UAsuxQNZto7lvT_Jy8Ovvs1vVfL_ygJlegxB9kfSDqDlXd4a7-jWAnf_DLjarRAz3hK4PcbHijXgDXC2JtPITQC_L6f_sXXmVP_oao9mCqy7dMSZBWBLkmyNVln6cdzDP39LKemm-xU1tIc2uW5jU5TPM6P4DRSzvxfdcVns8koyELkkzR0ItjRb0gUm5A0ZjF3a-O3_0_AAD__0VIM8soBAAA HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=37c253e7-656c-40c9-8aca-d6a707b64cdf:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl30311731=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+19895010c316def989c20ba829fb068c=1438851; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\r\nvary: Origin,Accept-Encoding\r\nx-envoy-upstream-service-time: 7\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 67caa33d6da234d96b4c22383ce095f9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T15:24:28.854524Z","times_seen":17453387,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/vpn/classic-push/big1/css/style.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.278Z","timestamp":1784718891278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Jun 2026 12:56:57 GMT","end":"Mon, 07 Sep 2026 13:56:51 GMT"},"fingerprint":{"sha1":"D8:30:A0:FC:44:CC:CB:CC:41:34:6E:58:73:90:EB:8D:41:F2:56:BA","sha256":"85:56:6E:35:A5:13:48:28:ED:D2:1D:3C:B6:6B:C0:81:82:08:BB:68:8A:C5:D5:9E:CA:8A:77:EE:DD:4B:78:A4"}}},"request":{"raw":"GET /sb/ssp/vpn/classic-push/big1/css/style.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nOrigin: https://via9x.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:42 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65aa84fe-102f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=48kYmTAZmmrfHcRVw9s0cK7bcGVrqBtY3XDK6ngIncFTrQf0M5Af7niqjTUC0xyljvkhEDHjJuvIGimpa2g75xi7vPZKmxZk%2B8oTrwJgzuIRBm4tGgHEx1xxTyvgD7L4O9Dc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1f2062e99820b45-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4143,"size_decoded":1893,"mime_type":"text/css","magic":"ASCII text","md5":"42edbe7ea0d50c15a58bcf3cd1f43df2","sha1":"5a96da3c26cc968e5d1e60959aaaf5bad7e69e0c","sha256":"e12dbbf55a5eca972392177c56db92c2d803a1f3d3052caed3fb8d48a1eb45ae","sha512":"3fedfc13ddece3079276d608e54e48e96cf1111800c0c3a89e7ada26676ece61e6454103e8f00d573f6853ee34fec799e4c2211f3d2361b9cedc9a3611d020d4","ssdeep":"96:iTMXPnMbz7yHP/qmJxMX5fivTMXEtsBxkTMG2bCIbkOWfQbkOWfAbkO3oYQD9ytP:IMXUXg3JxMX5oMXEt+x/nbP3T3D3jV","tlshash":"7381315367230e40b506c9a63fa57b4323284523864be9793fc1674c8fca69dd2d238f","first_seen":"2024-03-15T10:41:13Z","last_seen":"2026-07-22T11:15:28.055966Z","times_seen":1200,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":474,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/2f/d2/30/2fd230184f9add96378a4e3b877096dc/1680149814.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.389Z","timestamp":1784718891389,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /si/2f/d2/30/2fd230184f9add96378a4e3b877096dc/1680149814.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 90423\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:17:03 GMT\r\netag: \"64250d3f-16137\"\r\nexpires: Fri, 24 Jul 2026 11:14:51 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90423,"size_decoded":90771,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"b94ddc39cf647a5388cb1de541a2a069","sha1":"8e26ee8b4f0524f8aed42f40c6f1b27bcb4b1f14","sha256":"44086e75b8415c02b421630e1d39698d72dbc015718f499f0e1bfeab9fd79d91","sha512":"1ccd5d961861bf7daf5abade81061240677585a1829d45e6d67dcbb3bd1193efdadabb5298f703417c41d54aebb2da69656cf3e02d27bde74512a6ccac73250e","ssdeep":"1536:88M4ztR5y8kYp5nIe2/gWF0LVXxdO9kdaZjvYALzjhPvPB8hnRJ3lEViCbcZb83j:bI8kze2hFCBA9k0hvYoFPhCT3aAqcZoT","tlshash":"17931233ac1f149a437881a55a0975d2cc9c72f80b6b898f531cecb5bcb279c5178376","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-07-22T11:15:28.056504Z","times_seen":1210,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/si/71/36/d9/7136d9d7eb7ce81a8bf8a865955ce95d/1680149780.png","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:51.396Z","timestamp":1784718891396,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /si/71/36/d9/7136d9d7eb7ce81a8bf8a865955ce95d/1680149780.png HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 22 Jul 2026 11:14:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 126360\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 30 Mar 2023 04:16:29 GMT\r\netag: \"64250d1d-1ed98\"\r\nexpires: Fri, 24 Jul 2026 11:14:51 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":126360,"size_decoded":126709,"mime_type":"image/png","magic":"PNG image data, 320 x 180, 8-bit/color RGBA, non-interlaced","md5":"41f4b2ca195f511c887edd41139628b2","sha1":"e5d89c34cd328a03dff19ea3e4dac96d46dcccad","sha256":"68643d88434bb202c0a963a1330d3bfb7679fd3bc177f2f64d3ac76fded15eb7","sha512":"e852323c5190d9e721ebfdd687169ce71ed866085d0d2593fdfa73f63ecfa6a1cb038c210651628696ba48568e0084f375d7e5716525dd742337cd88c342a6a9","ssdeep":"3072:tdoVkGljQsodkkuIsC2tphyGTlIeSmV9x4/pY7LSCq0BLO:noSGF2dkzIsC2tpht+eSii/pWY","tlshash":"48c312cdf46973d54c29cdcc8b6e60a8dfeb9d81502c6d03992554c5e2bd8fea88078e","first_seen":"2023-06-24T15:48:47Z","last_seen":"2026-07-22T11:15:28.057009Z","times_seen":1207,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spendsdetachment.com/2a/22/c1/2a22c11f1d20256959cc34b563432273.js","fqdn":"spendsdetachment.com","domain":"spendsdetachment.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.520Z","timestamp":1784718889520,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"spendsdetachment.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 02:47:50 GMT","end":"Fri, 25 Sep 2026 02:47:49 GMT"},"fingerprint":{"sha1":"ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B","sha256":"E0:B2:A3:F1:B9:7C:A9:81:4F:7A:12:BA:2B:56:9A:DB:6D:7F:DC:37:71:1C:4D:EA:08:FB:A8:46:A6:C3:D1:53"}}},"request":{"raw":"GET /2a/22/c1/2a22c11f1d20256959cc34b563432273.js HTTP/1.1\r\nHost: spendsdetachment.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:49 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: spendsdetachment.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f69b6b1f8bc09461b0db9db61d6884d6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31134,"size_decoded":10058,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (31134), with no line terminators","md5":"fb0de8305b94ec6befc224346816014b","sha1":"dbdd474e005efddb0fde7235b653c6652679c179","sha256":"7d6a9f40fd7785c4440d2f416c97625dbc3ee8ea7e5ec5d7690cd9384c209073","sha512":"81b18fa7538b2fb303ca77fc19332983e2d1902a9d71bca1d3fa077417e562cfca71b29eb498dd7211df3cc831aa18684ca9d915b040127d3dbdc7776af0193a","ssdeep":"384:pahiQJGjwKVhnbuueU87S0sTiRl6oBZxmeEWrg6ZOFgnR/17FZqXZ5:CiQJehQR9b4/WrxOFgPB4X/","tlshash":"47e26358bb92f8580293e0b6353fc01bf51a48517becd0a4e596d5fc2e79648f732b28","first_seen":"2026-07-22T11:15:28.057497Z","last_seen":"2026-07-22T11:15:28.057497Z","times_seen":1,"resource_available":true,"data":null}},"time_used":474,"timings":{"blocked":0,"dns":4,"connect":93,"send":0,"wait":96,"receive":91,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"spendsdetachment.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/50e75485f9376dcd1318a735b66c9bc1/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.649Z","timestamp":1784718889649,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 07 Jun 2026 22:27:03 GMT","end":"Sat, 05 Sep 2026 22:27:02 GMT"},"fingerprint":{"sha1":"54:46:9A:99:5D:9F:19:5B:67:21:55:1F:5C:6F:38:A2:52:41:7E:57","sha256":"35:BA:52:C1:31:7C:AD:F1:9A:03:6D:D2:37:B7:E5:67:B2:0A:BF:BB:B5:70:84:A4:4D:4E:AE:90:2A:2A:72:47"}}},"request":{"raw":"GET /50e75485f9376dcd1318a735b66c9bc1/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:49 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 415ab7755118269d3ece6947160b0a44\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":51429,"size_decoded":19773,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (51429), with no line terminators","md5":"a5bb1e0821d5b5343039ac1d0e830d19","sha1":"fb621c6cb435eb86da81f04e1ad96fb8da73c6fc","sha256":"6c042eaea326864916f81f0ce50d6c2ed5d25df8f77f811f27a5839b397b5b7c","sha512":"4c7b975545f8759b0ac8aa25ac3e8df18a7ac32b08f9cacd5788dd07212570e187d1f9d610e59d605e3e29d8c92b7ee0820e4057f2d2d6ac9e8085e9af1292e6","ssdeep":"768:nuD21qUXaBHxR5iEzbIR8oFwd6XHew8hMhelNYINhE:nuyYC1G6XHw6helJ6","tlshash":"f533b58d7fa1f01412aa3077732f902ef45e4d165cfcd094e183b4a86d78739eab66a4","first_seen":"2026-07-22T11:05:26.386455Z","last_seen":"2026-07-22T11:15:28.058434Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"via9x.com/images/image9.jpg","fqdn":"via9x.com","domain":"via9x.com","tld":"com"},"ip":{"addr":"84.32.84.132","port":443,"asn":47583,"as":"Hostinger International Limited","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:49.702Z","timestamp":1784718889702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"via9x.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 17 Jul 2026 18:52:55 GMT","end":"Thu, 15 Oct 2026 18:52:54 GMT"},"fingerprint":{"sha1":"3C:A0:04:14:EB:15:74:73:FD:32:E8:53:F5:75:00:94:22:17:78:A5","sha256":"73:E6:8B:41:82:15:90:E6:E1:7F:AA:96:56:A4:94:37:58:31:C8:19:50:0C:0D:ED:E6:17:BA:90:ED:84:D4:48"}}},"request":{"raw":"GET /images/image9.jpg HTTP/1.1\r\nHost: via9x.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://via9x.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 22 Jul 2026 11:14:49 GMT\r\ncontent-type: image/webp\r\ncontent-length: 113134\r\ncache-control: public, max-age=604800\r\nserver: hcdn\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-hcdn-request-id: 8280e302b0236358c4c703342717fc93-fra-edge5\r\nx-hcdn-cache-status: MISS\r\nx-hcdn-upstream-rt: 0.012\r\naccept-ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Hostinger CDN","description":"Hostinger Content Delivery Network (CDN).","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["CDN"]}],"data":{"size":113134,"size_decoded":113458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cba255486cbd85b0000acb52c87fd3bc","sha1":"88d1e9be888da0a0450b512b0074c48cb2e7be47","sha256":"fcffeb0fe150c863e769c2a8e0dbeb9c22d8f1033e4951bd751c51c37ecccc3f","sha512":"7f8bb8ad1e98c6a0d31f78c2191603030349c7e498a8ab292679d4fe5918432dcaf15863d23bfd6d89c821e177f15af662b830637df5d044e78a46ae8a0ce0cb","ssdeep":"3072:8FM3q1QnEZEZnWI8UknEjPHQrL7dVw3Nx+37X:8F2qy8658DePHys9x+rX","tlshash":"a2b312f1cba9cc99e635360a6da98b540c1b145cf73621cf0de827e4e78499bd44a336","first_seen":"2026-07-22T11:05:26.387345Z","last_seen":"2026-07-22T11:15:28.059437Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"workdeadlinededicate.com/watch.822072780255.js?dev=e\u0026fstu=019f8989-14a0-752c-82ed-ebd9a5998720\u0026key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026ps1=1784718890\u0026rb=e\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=6zNrtlY-HyJmalaAK2g5xzIdQo2jpkHP2O8Oz5279uk\u0026shv=2\u0026st1=da1ee947318cdd9e93a15ad6cff2fdcc\u0026tz=0\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1","fqdn":"workdeadlinededicate.com","domain":"workdeadlinededicate.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://via9x.com/","date":"2026-07-22T11:14:50.207Z","timestamp":1784718890207,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"workdeadlinededicate.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:50:31 GMT","end":"Fri, 25 Sep 2026 03:50:30 GMT"},"fingerprint":{"sha1":"10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39","sha256":"D3:7C:24:3F:AE:83:AA:B8:BE:F8:93:F7:33:46:24:C5:B4:D3:32:B8:10:D0:21:AA:C0:0A:65:7B:33:B8:AA:5B"}}},"request":{"raw":"GET /watch.822072780255.js?dev=e\u0026fstu=019f8989-14a0-752c-82ed-ebd9a5998720\u0026key=50e75485f9376dcd1318a735b66c9bc1\u0026kw=%5B%22via9x%22%2C%22com%22%2C%22-%22%2C%22premium%22%2C%22viral%22%2C%22videos%22%2C%22hot%22%2C%22leaks%22%2C%22exclusive%22%2C%22content%22%5D\u0026ps1=1784718890\u0026rb=e\u0026refer=https%3A%2F%2Fvia9x.com%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=6zNrtlY-HyJmalaAK2g5xzIdQo2jpkHP2O8Oz5279uk\u0026shv=2\u0026st1=da1ee947318cdd9e93a15ad6cff2fdcc\u0026tz=0\u0026uuid=37c253e7-656c-40c9-8aca-d6a707b64cdf%3A3%3A1 HTTP/1.1\r\nHost: workdeadlinededicate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://via9x.com\r\nReferer: https://via9x.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=37c253e7-656c-40c9-8aca-d6a707b64cdf:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JkuVTEUO5PuycxWl2HpMOLoDLnSCMhENuprSFbOIX8o\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Wed, 22 Jul 2026 11:14:50 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Device-Stock-Ua,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platformuser-Agent\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://via9x.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=37c253e7-656c-40c9-8aca-d6a707b64cdf:3:1; Path=/; Expires=Wed, 29 Jul 2026 11:14:50 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\npdhtkv23=true; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nuncs23=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\nu_pl30311731=1; Path=/; Expires=Thu, 23 Jul 2026 11:14:50 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 9\r\nHost: workdeadlinededicate.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4950fb7722cbfbd3fbf128c3f25f65cd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4016,"size_decoded":4209,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3140)","md5":"75ca3742695bce2f1b7ce72db0fb7147","sha1":"81189e97599db8abf1d76fe2b8a41077665b9e04","sha256":"4b096001c071af7c4879fe487f29ed544faa87e1aa42b1c7232369f7e2991371","sha512":"9d4b156261b1c4cd14ddd05ddec3bb74f5956cb54b93f01eee484cd4ae36667483005d8f70f2fdf25e35af3222d667cfd45ad7928e70133f4f434b1d5686e4a9","ssdeep":"","tlshash":"da813befacc295785452607e70bb8a553921a11f2908ce41786ddc922b60fb8cf3dedc","first_seen":"2026-07-22T11:15:28.060084Z","last_seen":"2026-07-22T11:15:28.060084Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-22","alert":"Sinkholed","trigger":"workdeadlinededicate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}