{"report_id":"012cb1fc-811e-4e65-8abe-638268919cc6","version":6,"status":"done","tags":[],"date":"2026-01-13T14:54:20Z","url":{"schema":"https","addr":"audius-eligibility.com","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":0,"asn":0,"as":"","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"audius-eligibility.com/","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"title":"Airdrop 3 Artists | Audius","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T16:56:48.763508Z","times_seen":17821057,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"audius-eligibility.com","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":0,"asn":0,"as":"","country":"Canada","country_code":"CA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-17T14:54:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"audius-eligibility.com","ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":27,"request_count":9,"received_data":7364548,"sent_data":4049,"comment":"","tags":null,"fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"audius-eligibility.com/3268500c-3724-4bb3-9565-c553635b2531","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df73988252e4e56e97ba60a379b1adb","sha1":"71fcb419a05752a6816ec8cb8d6ff66f2b286575","sha256":"795b58fa3e79ac5f0fe3f40fd1a8780febc568757a02fb88cece17317ec0a0d3","sha512":"76bbb9908159d4a89749d84c7cfc019cebaecb2a738e68d09f3e7194cd362e8991548472274377a2b829abdeccdd6a077443dca3c4c9f205ccf78d4a3568702e","ssdeep":"768:FVX6Xl2NCM1idz41CAr7cC2Iq5a87XZUXfl2rsi14UcCs+Wl4:FVLCl","tlshash":"6ca333131cbe346b048f4b63f5295e47af5ffa43da16624cb2bc26852fb7d56c982204","size":107243,"data":"","first_seen":"2025-12-16T18:55:46.047375Z","last_seen":"2026-07-18T23:39:45.24889Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/ora.fluid.min.js","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b898597655dd9d0200d88fd89a445a0","sha1":"0372d8f30d43735d40733815afedb90530b4f01f","sha256":"88d741a946ec9b113071939d75e3ac6e51d383819b7465ca5a534a6b45c9d9ca","sha512":"ddab9d2a0c8876473c46b322539b8e6782cc12c4e3aa8f13fbac9614714492954197727f561449d61eaa89027778120b15c0dfd29915e684af9d8950cd5403e7","ssdeep":"6144:lITWxpTWxhTWxD2TpPoZJKBblsmbNZTwtnu7Ehja8UuYI8NYRVpPX2cx:ll2CkTdoN+cUYRVZ","tlshash":"4794414a9bd3079fc1ee824cb8718e8cd69c4ca1bb90db5f77059889f144925edd3a23","size":427720,"data":"","first_seen":"2025-12-01T03:26:06.086576Z","last_seen":"2026-01-13T14:54:42.921104Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/06302a1b-08d5-45dd-a065-38cd424166a6","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e21c7073dd3f60811af1a791d551817","sha1":"077553740f37d68445d1ae0c7e68d14fea65789d","sha256":"3af13eb81f4adfdcca76f9f1ed24f1441a147b6319c9a0993076431dfe5b2391","sha512":"7f7c28429efa881ae4dff484c5d207d2687c1715a36f2bb6c80738e600032919e818878bff24de21fdc3f5a72dc6f03a540a9f82d216fe7485c35f40012cb96d","ssdeep":"","tlshash":"ee11ef00f670e8b612ef58d100313807f2545869f16d84a477bdecb320b18de6bab235","size":1000,"data":"","first_seen":"2025-03-11T06:37:48.554747Z","last_seen":"2026-04-30T18:33:03.078686Z","times_seen":681,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Ftauri.responsive.esm.js%3Ft%3D29471933%26u%3D41aa73c93c96f12365286b809400000025579b4c7540876f0cff4073","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","size":656642,"data":"","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/zacz4g.php","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"218ef4ee7f1e923eba5230f0f0e6f84d","sha1":"3a633f8b26a68fb6f09223b4f911d600596c0061","sha256":"f9ef61fe38e4d0f609396b7687faa510f8aa33d324e973026fa2fa12b56fb2a3","sha512":"b9873e15a92e425af172ef351ad854386aab7237b57b7456fb875c54fa815405a15377e859e2a15cac671a75dde6187f48671ff45037dc92527270ab68ed9f66","ssdeep":"768:ZFCLNc+nBSq4ggxoY67+pxoethuBVchcs3tk0VZwCQJzv3T+F/+dMU71dASmc3ce:QBH4x+Y67WxrwBV/qLZfj2","tlshash":"9fa3bf9e1d0244944f0927afd0f6a48e9514df718dedb06ac92edc807629fbac4cb16f","size":104929,"data":"","first_seen":"2026-01-13T14:52:14.15542Z","last_seen":"2026-01-13T14:54:42.918595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"introduction_type":"Function","is_inline":false,"md5":"ff9f69899e827deb7e33e071f7c1190a","sha1":"9b71e5747b0cae45b9a67c89e1ac3c8bfccec22a","sha256":"29e1eef2f87ed46e0014b83a86258c047f864f966c2e88bc7b1afae3b6882565","sha512":"6c034abae8a97eace82d552c91593e344f52f6c7ecb5a27c91af4d979115257bea80888f6f50b02591e3afd30500070e2ab7f2249a7b85daf6cccbf2b08870b0","ssdeep":"6144:m6SLBSLpSL1UDDFeTLKxBlyAbBfTcH5s7E1NM8+cK8w30RVnP3+c5:m6SlS9SyDpexMs+KRVb","tlshash":"4194620a9be3079ec1eec25db8728f88d69c4ca6b754db6f36159408f140535eee3836","size":413182,"data":"","first_seen":"2025-12-01T03:26:06.111119Z","last_seen":"2026-01-13T14:54:42.926835Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"audius-eligibility.com/","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-13T14:53:55.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:00 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 24 Nov 2025 13:35:10 GMT\r\netag: W/\"69245f0e-22fe87\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2293383,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (53063), with CRLF line terminators","md5":"171eea37eb507f59a2587017d40cc650","sha1":"0841e195d15e76a2361f8f21d8226d3a32a91a4e","sha256":"c384bacb3272f3d6b824695679b46d2fe74dccde4ea14e2cf2da7d88ad21539c","sha512":"512b5bf05705fd76637a4724430c495c41fdb7b2878363cbca47891dc06de234bd3363cf9bb48a73fe375b77b9021b3f8701990ce6ff6d67270ffad4e944df1a","ssdeep":"24576:nV7qmquMAqgxXmZaVVbFb6C5DJS3xpmFn:4GdE8rwqD0BIR","tlshash":"412523b50f32fc378b6ca135303f3f6b91819a45d04ab1e1977874d6a6cbae24817329","first_seen":"2025-12-01T03:26:06.094122Z","last_seen":"2026-01-13T14:54:42.90814Z","times_seen":3,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":47,"dns":1,"connect":19,"send":0,"wait":38,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/eth1.png","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:55.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET /eth1.png HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 119812\r\nlast-modified: Sat, 15 Nov 2025 14:24:02 GMT\r\netag: \"69188d02-1d404\"\r\nx-powered-by: PleskLin\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]}],"data":{"size":119812,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"b3bea9a354b5cfe47e0551b46cdaa95c","sha1":"9504b356b31870f6a7419600e220792ce608af71","sha256":"4dbc1ea30e89fae53b056855ec56b159f59d17ad8682f363147cd52ca878f999","sha512":"39b39b2db17f0b0e1d41503126f14fd75e39774d0165780b3ecc4bf541c283e80e669b8d4c543d93632ee3668901c86d571ea37b406685dc22aeba1512800edf","ssdeep":"3072:hYW6n2uDuP3RSvpixu6Zwc9k6zNQEtTFQB1R4Q:hYW6NDuIxiI6Zwc9zNQEtTo4Q","tlshash":"c5c31253ceec798c5c6bf062745221ffa6ad3e643dec1b2938d844d122921a57e643ec","first_seen":"2025-12-01T03:26:06.088398Z","last_seen":"2026-01-13T14:54:42.911341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/config.php?s=%2F%40v1%2Fcdn%2Fjs%2Ftauri.responsive.esm.js%3Ft%3D29471933%26u%3D41aa73c93c96f12365286b809400000025579b4c7540876f0cff4073","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:56.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET /config.php?s=%2F%40v1%2Fcdn%2Fjs%2Ftauri.responsive.esm.js%3Ft%3D29471933%26u%3D41aa73c93c96f12365286b809400000025579b4c7540876f0cff4073 HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:02 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":656642,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"96c2ff1601099c21c598c24e6f43c7c4","sha1":"d78fa2e81b7b5ccf287c793c5a9985caaa0f6162","sha256":"7fd19c564761e2c8c9b583cf30db810e313417c7d3572f637f8cedf4d2cc1e91","sha512":"d7df68372670f0173ac5dc3c54ee38f13b29703dde9f71ec74827b535735e99b2b253e07960d66d8c3230f13cf29f20aa0f083db014cee0710379ffab68932be","ssdeep":"6144:0ujB8gltIeTM5/S8g6zRh5gDVLU2GIt/KJAsJRrydM147u/lhDlEqH96lm:vhltVM/g61sNUWsSdG7R","tlshash":"1ed438c2821814f684eb0ab6d133a21fdb4cce9dc69f2d20bfe55c9553c87a292f655c","first_seen":"2026-01-02T13:08:19.247086Z","last_seen":"2026-08-04T05:59:25.953933Z","times_seen":2650,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com//config.php?s=%2Fjmpd%2F","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:58.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"POST //config.php?s=%2Fjmpd%2F HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\ncontent-type: application/json\r\nContent-Length: 1748\r\nOrigin: https://audius-eligibility.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1748,"data":"{\"route\":\"8XUwkBv9vhPYfVpD1fxb7EC65sUXJdqr\",\"payload\":\"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\"}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:04 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-max-age: 3600\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\naccess-control-allow-headers: *\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cfafccc2551441e7701b519ab440113e","sha1":"5d230c15eb2533c6eeaf205ff0a246b8c4ed5989","sha256":"ba63cd17021e423838a4a355bd497d562eff99c1b2287d93c959fdfba60697c7","sha512":"079e0b28ab6ff8cdd44b1c9a89f679b44c70e7f446caa1706805a5c4c12cda2e5372be50fb5f08030df48d6881b5561ab52560b9b5a9f1adae7470c60404f1b3","ssdeep":"","tlshash":"ecd023e8c208d805a00d8702c04a40f73b11b563f821154dff06e8c2700107393c1b22","first_seen":"2026-01-13T14:54:42.915126Z","last_seen":"2026-01-13T14:54:42.915126Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/zacz4g.php","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:55.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET /zacz4g.php HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://audius-eligibility.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:01 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=3600\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":104929,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"218ef4ee7f1e923eba5230f0f0e6f84d","sha1":"3a633f8b26a68fb6f09223b4f911d600596c0061","sha256":"f9ef61fe38e4d0f609396b7687faa510f8aa33d324e973026fa2fa12b56fb2a3","sha512":"b9873e15a92e425af172ef351ad854386aab7237b57b7456fb875c54fa815405a15377e859e2a15cac671a75dde6187f48671ff45037dc92527270ab68ed9f66","ssdeep":"768:ZFCLNc+nBSq4ggxoY67+pxoethuBVchcs3tk0VZwCQJzv3T+F/+dMU71dASmc3ce:QBH4x+Y67WxrwBV/qLZfj2","tlshash":"9fa3bf9e1d0244944f0927afd0f6a48e9514df718dedb06ac92edc807629fbac4cb16f","first_seen":"2026-01-13T14:52:14.15542Z","last_seen":"2026-01-13T14:54:42.918595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/ora.fluid.min.js","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:55.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET /ora.fluid.min.js HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://audius-eligibility.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:01 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 24 Nov 2025 13:35:21 GMT\r\netag: W/\"69245f19-686c8\"\r\nx-powered-by: PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Plesk","description":"Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.","website":"https://www.plesk.com","common_platform_enumeration":"cpe:2.3:a:parallels:parallels_plesk_panel:*:*:*:*:*:*:*:*","icon":"Plesk.svg","categories":["Hosting panels"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":427720,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65287)","md5":"4b898597655dd9d0200d88fd89a445a0","sha1":"0372d8f30d43735d40733815afedb90530b4f01f","sha256":"88d741a946ec9b113071939d75e3ac6e51d383819b7465ca5a534a6b45c9d9ca","sha512":"ddab9d2a0c8876473c46b322539b8e6782cc12c4e3aa8f13fbac9614714492954197727f561449d61eaa89027778120b15c0dfd29915e684af9d8950cd5403e7","ssdeep":"6144:lITWxpTWxhTWxD2TpPoZJKBblsmbNZTwtnu7Ehja8UuYI8NYRVpPX2cx:ll2CkTdoN+cUYRVZ","tlshash":"4794414a9bd3079fc1ee824cb8718e8cd69c4ca1bb90db5f77059889f144925edd3a23","first_seen":"2025-12-01T03:26:06.086576Z","last_seen":"2026-01-13T14:54:42.921104Z","times_seen":3,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/secureproxy?e=ping_proxy","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:55.887Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET /secureproxy?e=ping_proxy HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://audius-eligibility.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:01 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T16:54:53.08717Z","times_seen":548260,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/favicon.ico","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:56.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://audius-eligibility.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:01 GMT\r\ncontent-type: text/html\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-08-10T16:54:53.08717Z","times_seen":548260,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"audius-eligibility.com/zacz4g.php?m=2947193","fqdn":"audius-eligibility.com","domain":"audius-eligibility.com","tld":"com"},"ip":{"addr":"223.29.226.66","port":443,"asn":0,"as":"","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://audius-eligibility.com/","date":"2026-01-13T14:53:56.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"audius-eligibility.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Dec 2025 11:52:21 GMT","end":"Sat, 28 Mar 2026 11:52:20 GMT"},"fingerprint":{"sha1":"ED:41:8B:5C:CC:84:9F:EB:3C:89:F3:AE:AC:04:7C:55:F2:2A:61:76","sha256":"F5:17:A6:AD:92:42:FA:0E:1B:4F:6D:60:95:C3:41:DB:7C:71:F3:C1:D5:A9:F9:DC:93:7D:3B:B2:37:4D:BE:C2"}}},"request":{"raw":"GET /zacz4g.php?m=2947193 HTTP/1.1\r\nHost: audius-eligibility.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 13 Jan 2026 14:54:02 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\naccess-control-max-age: 3600\r\ncache-control: public, max-age=300\r\nx-powered-by: PHP/8.2.30, PleskLin\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3759146,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"283a4197ff4a2092e2e4c5f94af1af9f","sha1":"31227e533a50efed060ab197fec55cfaee76bdc8","sha256":"a9d77772172584a739a09731bd48ac26612beab4f2329ac612e2725dcdcd7716","sha512":"1a77575ed94682271dd3142f20cb7c5467c69b89db6a06b658a9f7070f4cc913f63a3470bb6bf028bb09058335d670552c3cc0e002cd953fccc0d7670a1a2374","ssdeep":"24576:WWN1v++yjCq4rCMBZ849RxN4soD5JaHTRsq4BWLi:91vPWdMhfxNeeHFV72","tlshash":"8425f1cd6c4e9095874816eee0f36d095290ba1789e891bbdccacd837f29f61b1c605f","first_seen":"2026-01-13T14:52:14.144197Z","last_seen":"2026-01-13T14:54:42.923055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-13","alert":"Phishing Block","trigger":"audius-eligibility.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-13","alert":"Sinkholed","trigger":"audius-eligibility.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}