{"report_id":"01adc6e3-a6b1-450f-ba61-24ef75141634","version":0,"status":"done","tags":[],"date":"2026-10-14T19:44:18Z","url":{"schema":"http","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":0,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"final":{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"title":"5MTBot — Automated Polymarket Bot for 5-Minute Crypto Rounds","dom":{"size":491090,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (884)","md5":"641e23708dba83253dae25cf7c4cd723","sha1":"ba6394e6f44d7e58afbd97cf8cf78da8f4ef5bd0","sha256":"34f57dbd0c0ce3efdeaf7501c367a1c772654c76dd40c1105a01743ee1b10378","sha512":"7c1dc785719ebdd24a010d2888664c8fdd6f3ddae19e1aee4cfaf0ad58f56dca022f183276557fab6552043112b650c0d5dbc738af855581ba139c2467ed5d40","ssdeep":"3072:V0Z0Iv68OE8+DPLb09pLjpBFjBSSY2PrVW4vR3R3Fju:VdIv68OE8+DPLA9pLjpBFjBX0cQ","tlshash":"d0a42f559ad2402a7807056d27e84b5a123bc383fd230b3d3b6f72569f915ec13ee3a6","dom_hash":"domhashad6597d33f29455381a59761730e1158","first_seen":"2026-10-14T19:44:52.68619Z","last_seen":"2026-10-14T19:44:52.68619Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":0,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-18T19:44:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"5mtbot.fun","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2026-10-04","domain_rank":0,"first_seen":"2026-10-14T19:44:43.201629Z","last_seen":"2026-10-14T19:44:43.201629Z","alert_count":52,"request_count":26,"received_data":1414366,"sent_data":12894,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"gamma-api.polymarket.com","ip":{"addr":"172.64.153.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2003-02-04","domain_rank":1799602,"first_seen":"2023-09-27T09:49:57Z","last_seen":"2026-10-09T18:26:52.191075Z","alert_count":0,"request_count":3,"received_data":607303,"sent_data":1537,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-10-12T09:42:11.321807Z","alert_count":0,"request_count":9,"received_data":1225171,"sent_data":4615,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"stream.binance.com","ip":{"addr":"54.178.65.165","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"domain_registered":"2017-04-01","domain_rank":283179,"first_seen":"2021-01-29T10:54:12Z","last_seen":"2026-10-14T13:37:18.618375Z","alert_count":0,"request_count":1,"received_data":240,"sent_data":604,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-10-11T22:48:14.897501Z","alert_count":0,"request_count":1,"received_data":534502,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"874b35bdd03535be1bf52f7e17ac5c8f","sha1":"ad0b8d034384b436f6b1cda3044465d74009ef45","sha256":"e965c93e083cac08f11ca96ab4092c8ae6c731cf69571bd6a5aa1b57737b78bd","sha512":"99ed3edad48cab3ef83ff235401519febc79c2f7558c35cb74207ddc2d8a634f1889094c019c162652693c01f9215d1f8a3d4337efc73aceb9dda2caac0b3a61","ssdeep":"","tlshash":"77c09bcd210b5cb195eb2f454fbfb614b055321194d1da31191b73445f31d17db54954","size":154,"data":"","first_seen":"2026-09-12T22:51:16.960273Z","last_seen":"2026-10-14T19:44:53.005377Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4511a0edb72caef7e31a5bcd3adb25aa","sha1":"8515434fcae7f0dcc72413ad8af7b9970e564cbd","sha256":"57ae29e89897d071cf33d6d7ae3426276d0f305eb402f0f592b6e19ee6447e10","sha512":"b77ef2b2c628096cbb49e10cf438d89b2c1562d99d8534e0bb7779dde1686d6de54ca1b48593b28e15c71387337b9af511880a5114b9f90cc3483baad2dc852b","ssdeep":"","tlshash":"771102fe3a9651345dc7493d323fa3c8397a602f2942d2c1b83c40a80f94fd5216e8ea","size":1074,"data":"","first_seen":"2026-09-12T22:51:16.961806Z","last_seen":"2026-10-14T19:44:53.012034Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"80194ea28e3c1b5b48256742bc3546d1","sha1":"2c5de88728bc8bb061d8552a92a02fdcaf5e6c80","sha256":"31ad1726a79ec92d91a32d4cea27f327eca432c0ffaa30ace244d4fbfb31a81c","sha512":"d5edcf5e659a310ce8674c9d50766f1bddc16e95311386e13a5fca9918bec014b113c0674c45ced063c1574f09e8c3b80785f1f4c01c9d6ccd1cb8f1fc83aa3b","ssdeep":"","tlshash":"32b0923e20a0462514e54a9cb568f7c47972b6606a061120a56d8d8520a5ea90121fcf","size":114,"data":"","first_seen":"2026-09-12T22:51:16.963395Z","last_seen":"2026-10-14T19:44:53.02065Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"693a86fa8bf4bcc3de761da66b1c73e9","sha1":"1cb93d535761ba650051b4fe6bdc5a37a987cf6f","sha256":"49579e5532a63d439a1e6f359b109712973e0206691edb8e9c775d739383fca7","sha512":"b68365bdf909f89a242dbe471efb1f6c14154842ff75b66973d050cbd316186bb86b693604241d9f80a80bcbe3adb60bf9149bf4b7ed702c30093e415a145a04","ssdeep":"","tlshash":"52019c3f7d9115b559e7529b227fe7c4393660032406d0819a7cdd882ea0f95107adca","size":731,"data":"","first_seen":"2026-09-12T22:51:16.964941Z","last_seen":"2026-10-14T19:44:53.038194Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e00d4799a6cabf5484f178caae3a633","sha1":"e6b25b98df78fe88f7af61586d967a8e53391197","sha256":"e0205fe676c84bc45d1ccfbcca84c6cf1d31094426be47eab6b2ec26327dad2e","sha512":"6961b66f417b745de167d9c5de63f7a3f53cd99a27997a32a55866fb5048598f630fedaefb5dd9046d2b77080625f1f3b16ef382beb0ab8bf1658ba0a1e8f8f2","ssdeep":"","tlshash":"6cd02327bd8634b844e751fd975ff784362b00479941f0807d1ccd642f20992543d6d9","size":229,"data":"","first_seen":"2026-09-12T22:51:16.969218Z","last_seen":"2026-10-14T19:44:53.054957Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e39c7b19239ad856732d12daa601b256","sha1":"647f9925532404793d8bc4e0b942bb121fbf2aaa","sha256":"6725f5ef8d18077718e0a979f051f454a688bdac36f9df35d71d6450b3a76cff","sha512":"f6b7fe2e63d0c95713ac84a700ef50e636c5b3ad38f5c05101b4587a56d366646c20ee9862503ef2b7e822ae628c39d90418f81329e19fd85ed2f20cc623583e","ssdeep":"","tlshash":"1ee0220a3a6222b6a5efa83542b78988323a70645c8581a03c5e86040f1129910be5fd","size":393,"data":"","first_seen":"2026-09-12T22:51:16.970907Z","last_seen":"2026-10-14T19:44:53.070024Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e71c9005808f2724ab5cc2c52371d2bc","sha1":"c2e0214e4ff313d31b94dd2d423d13418832893b","sha256":"6c6416fbaea19cfe116436f8d0de35a7ff2cc538a6d1ec1c01c41eb698d7ebf5","sha512":"b2071daa58c9aac4004092902dc229e550db801a0ba2a88a3e0585df857c17cc4afcacc2b05578904011c129f5480c7fb129e61bb7081295b3febee6ae103a9b","ssdeep":"","tlshash":"ef01f44dbe21217a18a3267eabdf0785363481172e96c304380c56016f8897c43996f4","size":725,"data":"","first_seen":"2026-09-12T22:51:16.972416Z","last_seen":"2026-10-14T19:44:53.079414Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"95af16913a189b1226db3b16bb4c077b","sha1":"1b65a38149c5cab757e8c2f969c213489e1cd9e7","sha256":"0ebea7db7348959d3ff28cccc8ee91dc4be761e02b6b6acbe0c857f717ce373c","sha512":"f6aac4738e6b15812119edbef737a77092da956c252ec920f3499ebe0a9aceb031e81fa26688c609a658ceae124057c5d223eacec18a08ff5b40331921e947d6","ssdeep":"","tlshash":"a051325b7d21343f8013623e93ff424c3abb61530216e4913b7ca1865f9051903aeee9","size":2979,"data":"","first_seen":"2026-10-14T19:44:53.088861Z","last_seen":"2026-10-14T19:44:53.088861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"872bf2f8513f73c26ca30e056ba4f978","sha1":"87a453bf47ed0fa982aeedde741887b1ea413ff0","sha256":"b3b896a3797970ef9e0a65fe5c689c03ca57b6c4bd561cbcdf0ca1e8246c7a20","sha512":"0e8e929879ba5ab738aab4bf0dab26e820a183be0eccbabfeb61c998d76e0cfa39ff345cd3ea4d42c6340bed40878303f0acff5fd137ef0f8b28db67505fa419","ssdeep":"192:OSLWC2XaUn9fqe4DoQ+sadAbeaSUeKhE5MnWcCzyI/VARBxWYQwTM:OdTnYAQP/bhgQMr","tlshash":"0702c76578e33579387722ba9bdf428636714323084ac4207d2cf3442faa558176eafc","size":8350,"data":"","first_seen":"2026-10-14T19:44:53.096425Z","last_seen":"2026-10-14T19:44:53.096425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"d343f5fa77332e9250a0059ed1ca08fa","sha1":"a9e5e9234fbc37650687616b1b652b666159786c","sha256":"056afc429d7ddd01257d8f7724a6b73106ac65ca73280629df64ab27f2c2b32c","sha512":"524b0a51de7a7bddfe309f75f1bc68ea2ce1dd76d12029d4f873d613f0e99290e05aa131dce2060463d38fc4828dbc49c649abadfa0000cb548be9b7ca1be983","ssdeep":"96:ac4U6gIuBwxBmdDuhFFU/ryT+pPwpEUK9fpH3PGvFbOSsHC/ryx/HM:ac4RgIuBwxMdysyr6hfGojHwya","tlshash":"c3b177fb35a2016062ab307a934f6209593690d33e52f07b3d6c55c09fe6d28d1d6be5","size":5281,"data":"","first_seen":"2026-10-14T19:44:53.121498Z","last_seen":"2026-10-14T19:44:53.121498Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"7dddff50a1473bc5ee8c142573d427fb","sha1":"9a09f98ad1bd07940eb6125fff16414c8ef345d5","sha256":"6cec262f33d8f1af59c672da1a80faf01c8046c9f4a16e9af0c43971c99a8efc","sha512":"b6f37aa8f2579e19ba28aa75f8823ab23f6fa2c0b5d4510ff1a6c742f2aa6cc1eb4bef4cc04b408218533272545d0cf20049b6a206615bbf5bcf16fe3cad12f5","ssdeep":"192:Natop3IZDCMCqoBYyH/dsFvaefisGdvfaY3ziZ8AMCQA7L0pz:NbyuMCqoBYwAG32qb","tlshash":"a6f1416f71e7383a8463a2bea65fc1282a7a49034586d8107c6cd5515fe0828577bffc","size":7912,"data":"","first_seen":"2026-10-08T14:28:31.458126Z","last_seen":"2026-10-14T21:10:08.854027Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"355f5250687e5e50d1aab9a3a7486201","sha1":"c229dc12cf58507e62c5cd5684181f277f8c42c8","sha256":"588dd241469527f5b4589f5e522ed21b01ae4ac599fe0f6f12b804e7191876cd","sha512":"4a3f94c6cef860c806c783bbf1eb0ce4ca7275380947c239746b716f4427bc3a7271158f6384cf781f35d12f23c1d9861f8703f0c98615ad43490cfa70ad88a5","ssdeep":"192:GKALqDv18VnQMOvqAF+7PPKnQRZRoGtQYIHpz49RwgGHWmxjtQR:x7DhLs7PPiQR8GrsZ47m2mA","tlshash":"80f1c7b551f3243a103380f9a26b231654a49a03f54bc495736c76e15fcac69f8b7bec","size":8045,"data":"","first_seen":"2026-10-14T19:44:53.14238Z","last_seen":"2026-10-14T19:44:53.14238Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"4136d1b54b25beb3fcb5d64da04ad3dd","sha1":"0188cd799799488a8d73267ddad7a25ca47df070","sha256":"16d918fcac0da579f6a41656a916ffc17d7e8f7bd205baac1378ec7b84dec5d9","sha512":"9291082d79ce9efb01c65fdab77a12304df70f52affa8eb972fdbcc31684824e3112d0ee9ba4a49f20d423a4f868639a41841883cb72b55c1223b0e95f48a94a","ssdeep":"","tlshash":"cf3152ee363f203c5513e079534b61153d629e238221e2583c5c91599fe192083b6df8","size":1642,"data":"","first_seen":"2026-10-14T19:44:53.151131Z","last_seen":"2026-10-14T19:44:53.151131Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea077d0d65de0a1fa3cb61754a387ee2","sha1":"7f722a4f65710b7920f43dc9351c647ed21f8ddc","sha256":"ee2343a670de711c1b11025908ecfd90cd0328cbc765e529a26b3048994a5aec","sha512":"10462d3edb51a90d89d2677626c8f01d638bc61421697c84efd486c034c865850ebeb7bd6ad0076caba1ce3fc912e896e4efe3b15c3b499b7936a554db2e072b","ssdeep":"192:eZHb5FLjdSVi+vbAsbdE2rArMoHOKhEkv+uiBioUBRQTvdBsohRu+lFDbftvKEwG:eUjkUyA/ZS0nvuVf590Phx/i4v+m","tlshash":"7852d865bee73e37b123d07e974f52043254a4275f0ad5203a6c71581fc5da882f6af8","size":14412,"data":"","first_seen":"2026-09-12T22:51:16.975745Z","last_seen":"2026-10-14T19:44:53.153883Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/Pass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cf0b671c9de036eed02ae665fb267a1d","sha1":"3d6f7043d9b64984e55e8fb8b9116e64072d5fa6","sha256":"12935bfd5f3f9b9f4dadf91eec99845bbb19534718aa1667e5e091b8c72d52ff","sha512":"ad55f79288e6ef73f304c86c451101b9948736405ed15b3bf5909fadb0fc2e47863c602d4797e7eae5b147935e9b39d067ce30469a5f6f28216c9c8623b0b882","ssdeep":"","tlshash":"e63100012b9c212cd25c33e9d19e4deb1b756435a19d54fb3918c5fe9ad883c032d7aa","size":1578,"data":"","first_seen":"2026-04-02T13:35:17.640769Z","last_seen":"2026-10-14T19:44:52.893741Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/shaders/LuminosityHighPassShader.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"10e5a2df6b32729991f182c68cc967b8","sha1":"15ecaca202b6ee6173dc20d0f9d284e7138d6df9","sha256":"de07c2be685b883034b9d1af42b8cc5268d5ef5bb0916daf93b843a9bafb4f3e","sha512":"3593a444739873443ab4eb4961904a697152998aee0cb7581f200d44907958b342154bd48aa91d4d20d2d900c1778b39cae071134a21c41f9a74802ed59968db","ssdeep":"","tlshash":"0021fe07205ce1c25d47b14c1638d884a37bafeb19419f9a3d7d6a3d4c4180ee3a0bd7","size":1245,"data":"","first_seen":"2026-09-12T22:51:16.933032Z","last_seen":"2026-10-14T19:44:52.990851Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/shaders/CopyShader.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5e6f499ade857e08fc1645b66a0ea4f0","sha1":"8ed4d72ec36aa2a33271b057bca706990ba7e474","sha256":"4ce95e3eaad7d3af47789bd94808a339398a2df8c3fb4a7958c4cc86fde552c9","sha512":"d33c40b2c1dfbbd118231c04ec83bae2e6d9e06a78cfe41a38598940a1df0ed0bd5db91a85322891ec7be5429c020cedfc259adb90e23a16cde9d62fecc85d01","ssdeep":"","tlshash":"23f08b0b008da04a4c0ff084ba79ccc0e178abdb7954d2db3d32a86d2dda848f361b59","size":593,"data":"","first_seen":"2026-09-12T22:51:16.931221Z","last_seen":"2026-10-14T19:44:52.959187Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/MaskPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"cd3c62f33563faea5c5ff2d4e83b70c4","sha1":"6873c735d350b53a17b6973863f9ad4af873782b","sha256":"9c684ccdcb62c1e98ae5bb3d62d447802093bf918fc3246fcd2d5375a6de8589","sha512":"06a4955f1781dbeeb0db8a129d2956bf283b4ad2a723a435fd0774193156216f88b118fb4497adaf68186bb34653623005073eaafb6ecaeae003b481323777c6","ssdeep":"","tlshash":"3941adc1df69502de778b0aad99e4dae17b44028430ac4357e21d4fd28e957dc26df38","size":2336,"data":"","first_seen":"2026-09-12T22:51:16.922339Z","last_seen":"2026-10-14T19:44:52.749373Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DVMSY1F0JM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a70bb17683c9f2da7f47d15d97a8c69","sha1":"3866287ebef62c2d2e919da5b6922b7f60cf5860","sha256":"17cbd686280af34b8ee0343ba6f17842ee9862c35338a7f16a09c8e405b9c731","sha512":"858c363a584ecdcca3a2c43c56ef036646de81c22899c633c3981ac5d07a49d7e2e3f61541346fc1071e7e817bb170a78b617ed8849d0b82ff71ff94f389336a","ssdeep":"6144:/cDveGmbsEDAhIsmbcs0cGFccFEbTExW3yTzB93dAy8/q0RN:/dLDAhEYPPdAyup","tlshash":"adb41aceb3d674229396f078903f01cba57b29a2b45cc996b189cce01d34a9a4177f7d","size":533898,"data":"","first_seen":"2026-10-14T19:44:52.909885Z","last_seen":"2026-10-14T19:44:52.909885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/UnrealBloomPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6f72588b2399d724e149861e1ba6cec7","sha1":"48b1b7ac3d4cccfec3c49fbd68c30074703af503","sha256":"caf04e222e63c896d19fc8b633f340a180f180b29a6a6ed4f5a5c161eb2396d1","sha512":"967b271b9c55bd8ef9fc524313d55bc2e39a8b86fea908cecfe2923d18b4f984e76e782afb70b39c43b191eb075833b00a25add4a47a029fa2335ecc94da2b8e","ssdeep":"384:Ld/i5geTG6pPszHe/tWUW2W0W6W3NiXjzGIa6aOvA+4RsmQ+QbIAQ5YWWJaHCfH+:Lc5ar8tndTVuEjPNrvA++smQXUAhWtCm","tlshash":"e6427546639c646e0e56b594c19e0ac0017e627b110fd9eebe1cb4be58f582c836cfb7","size":12672,"data":"","first_seen":"2026-09-12T22:51:16.941286Z","last_seen":"2026-10-14T19:44:52.948225Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/ShaderPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"b8f27596d88624a07678452f0cb1dc5f","sha1":"994838076669df7aca094246a944e9a233a38a47","sha256":"2d13f64efcbd7c8af58e49b9bf012c67d380941e2de6fc62484928d98bf36b2c","sha512":"6b381928f7090a55c53f5e24cd122e1d169d3ef0e64c6c2e0517709ca79f6aaf7deb264a998fd91f6de1d19a02ecbd7ffcc3b01d8120204a0504058240455a0e","ssdeep":"","tlshash":"7031ac8651fc690d4616358ac4990ec7423ed16ad04d809a7f2875bd4cfd868c75cf39","size":1554,"data":"","first_seen":"2026-09-12T22:51:16.954382Z","last_seen":"2026-10-14T19:44:52.73205Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/RenderPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3ffbb7da6f7a763303ca1ea0afe999a5","sha1":"828dbb6f006e03a48f74e7ec64e6886f786eddd9","sha256":"b3d7f72e54e89b267a4d922ab451e1e9b15a8f21969dd843d6320a53f3a009c2","sha512":"a6b84120aef02f2c5eaa5abb6c7854bedf4ee2ab350b85839fc2f0b0d7247a31e62d1e1e03b513ea21a81d8ec8e544440908bdca5d421f8ca08f67f6954f3dc7","ssdeep":"","tlshash":"3831b084a2ada00f5171605dc5998a46033f7496e55ed0e9ff2483be6cf812d03ddb74","size":1790,"data":"","first_seen":"2026-09-12T22:51:16.926707Z","last_seen":"2026-10-14T19:44:52.878794Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/build/three.module.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c6c8036b30eaa325dc6e3375f89fa623","sha1":"9ba497e81e1c006fdc045af7014d67de4601b59b","sha256":"501123f7fb3ea937d2b4e3839e6dea803c11c1ab1dd8bc314bc597f35b7ba36f","sha512":"bf6e5f18ba54146706cfb8d95b1b167b905f5b0fcead4ae662a9819f67aa6cdbb9f7ccf4aa51ed8e64da439bead462c1d1bf72b8feac724c4b5d8ad100f3dceb","ssdeep":"24576:zT8OXkqvQ+GazWsQN40PdBLkjew0XQGhmYnNV6+/QSlDvu0Dp:sqvQ+GazWsQN40PdBLkjew0XQUmYX6+L","tlshash":"ef45d7852bbd112e8a6631a8952d05c5653c9473b502c4ffbc0c99ea68d183cc7bef7e","size":1189145,"data":"","first_seen":"2026-09-12T22:51:16.979721Z","last_seen":"2026-10-14T19:44:53.165116Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/EffectComposer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"815acdb239201c9e969b2ad4ebf8b543","sha1":"12eefdc486db327efda8619a066c0e4d45a5ec76","sha256":"6b9a33129ddfd55d1bfe409f255d97cb198a6fecb79905842c6b0fa307adf7d2","sha512":"ba4be2e0c377ffb5acf47101e5d59c2e3a077eabab83aaa2fb528248fb56d5494d0fd1c8bac1cbc9455d1035abb4f382db23ce6fe280a965c2f9eb975ab8d5b9","ssdeep":"192:+L+iu78BVRQlU6tmXgbg79gZKgHSW35Rm3iqqm3ziYM1YhbWXfWgJ9QNhNUzt8gG:zgASuKAJpRm3iqV3zigWX+NbsKskZ","tlshash":"48d1dc55279c335d85503693d96c0dcb263680b9920a886f3f25f1fe0adc83c5729fba","size":6398,"data":"","first_seen":"2026-09-12T22:51:16.919695Z","last_seen":"2026-10-14T19:44:52.767016Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"5mtbot.fun/land-skin.css?v=4","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.181Z","timestamp":1792006980181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /land-skin.css?v=4 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Sat, 03 Oct 2026 09:34:13 GMT\r\netag: W/\"7bb6-1a1011d3408\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\ntraceparent: 00-8d210d912da598e7ceefe30b85997e38-f449e56dd5087d1c-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":31670,"size_decoded":10621,"mime_type":"text/css; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (380)","md5":"6a645ed77d4dceea373dbe46cec4b9e6","sha1":"bf7f05ab50a60684780c785c1f1fd32862e4d3c2","sha256":"f8fa1bb3a1f7f77a6be5ea6c1c2576075f2bc877285a84ea938fd2eac742bee8","sha512":"006e48614c663e4e40ea27d6be6545a97b692c6dd16b8b43428b9ddcffc92562dd78588bcb5100ccfb868142be109720e7d1a919fb7a20718e078ff068a7342b","ssdeep":"384:3YLjzTdyogR2RAhdRKB16MoXwznOgQQ7XVVUsxCEmK/vvlohy9L9289aEjx30mzM:cyrNawMoXwXxmSWkWV","tlshash":"d6e2d8b2fbc1512cb4178c997731bfbe652c6412d6015eb4d52eb2e04fe62ebce20654","first_seen":"2026-10-14T19:44:52.697293Z","last_seen":"2026-10-14T19:44:52.697293Z","times_seen":1,"resource_available":true,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamma-api.polymarket.com/events?slug=texas-senate-election-winner","fqdn":"gamma-api.polymarket.com","domain":"polymarket.com","tld":"com"},"ip":{"addr":"172.64.153.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.810Z","timestamp":1792006980810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Oct 2026 14:41:48 GMT","end":"Tue, 12 Jan 2027 15:41:45 GMT"},"fingerprint":{"sha1":"27:E0:53:74:78:07:F9:25:15:6D:3C:A6:FB:EF:18:18:8D:68:ED:F1","sha256":"68:96:EE:95:15:9F:70:AF:DB:1B:E5:67:5E:D4:85:8F:11:AE:97:02:E6:62:92:98:FE:11:99:7A:51:31:2C:35"}}},"request":{"raw":"GET /events?slug=texas-senate-election-winner HTTP/1.1\r\nHost: gamma-api.polymarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 19:43:04 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Accept, Authorization, Content-Type, X-CSRF-Token, Token, traceparent, tracestate, baggage\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 2592000\r\ncontent-encoding: gzip\r\ndeprecation: true\r\nserver: cloudflare\r\nsunset: Fri, 01 May 2026 00:00:00 GMT\r\nvary: Accept-Encoding,Origin\r\nwarning: 299 - \"use /events/keyset\"\r\nx-envoy-upstream-service-time: 27\r\nlast-modified: Wed, 14 Oct 2026 19:43:04 GMT\r\nexpires: Wed, 14 Oct 2026 19:48:04 GMT\r\ncache-control: public, max-age=300\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=7776000; includeSubDomains\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nset-cookie: __cf_bm=ekkuZT0CCErKIQOL6bCS8wKWRJnain.MkrVERno1Tac-1792006984.1678426-1.0.1.1-cfCJKvy4ZDlNfrom7g6_I5aB50O091gAYWSkOrJLvkQ3lBR1bdb5nzqctAdPGdc7rLSHBqMb3if3KbdPWuWEBn6CAHW3EdeeZ6.k40Mmm8sP3t9mLx2SEmVxtsoc6VEh; HttpOnly; SameSite=None; Secure; Path=/; Domain=polymarket.com; Expires=Wed, 14 Oct 2026 20:13:04 GMT\r\ncf-ray: a4a912230bf23181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"ekkuZT0CCErKIQOL6bCS8wKWRJnain.MkrVERno1Tac-1792006984.1678426-1.0.1.1-cfCJKvy4ZDlNfrom7g6_I5aB50O091gAYWSkOrJLvkQ3lBR1bdb5nzqctAdPGdc7rLSHBqMb3if3KbdPWuWEBn6CAHW3EdeeZ6.k40Mmm8sP3t9mLx2SEmVxtsoc6VEh","quoted":false,"path":"/","domain":"polymarket.com","expires":"2026-10-14T20:13:04Z","raw_expires":"Wed, 14 Oct 2026 20:13:04 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=ekkuZT0CCErKIQOL6bCS8wKWRJnain.MkrVERno1Tac-1792006984.1678426-1.0.1.1-cfCJKvy4ZDlNfrom7g6_I5aB50O091gAYWSkOrJLvkQ3lBR1bdb5nzqctAdPGdc7rLSHBqMb3if3KbdPWuWEBn6CAHW3EdeeZ6.k40Mmm8sP3t9mLx2SEmVxtsoc6VEh; HttpOnly; SameSite=None; Secure; Path=/; Domain=polymarket.com; Expires=Wed, 14 Oct 2026 20:13:04 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":57284,"size_decoded":8077,"mime_type":"application/json","magic":"JSON text data","md5":"58ddc32bd7f0c1aa7cd8dfe19bcbd035","sha1":"6f879ed5fcb00300307d5a55942ef3a3e5b4c393","sha256":"a84d1bcc5c89c7131371194600a5158a0e090e42b75cb84b0822fe66c4159a14","sha512":"babad31012d1804c2eec3ab567fca86b3990793544a51a4d27553fab2c918a683ddf6f83686fde745a2a7909816ea9b3b9a80910d33ab59a181b3ff5e4378ed9","ssdeep":"768:665eKm387r8JPDG65QwvXoAb72AP2zUghe3P0NuuBIWiKMo4FF3Mt:tesORVdx20Xqt","tlshash":"4543c5b912183b7a471b2b50855f3f854aa822f22fb41058f67ecdc42166df7172f4ab","first_seen":"2026-10-14T19:44:52.727867Z","last_seen":"2026-10-14T19:44:52.727867Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3521,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":162,"receive":0,"ssl":3352},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/ShaderPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:01.151Z","timestamp":1792006981151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/postprocessing/ShaderPass.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unpkg.com/three@0.120.0/examples/jsm/postprocessing/EffectComposer.js\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01M4BP6ZQHW5893YZ8N3QG5P2T-cdg\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a912102e80712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 18325\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:01 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:LRP2Tvy9fIr1jkm5vwEsZ9OAlB4t5vxiSEko2Yvzayw=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1554,"size_decoded":1530,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"b8f27596d88624a07678452f0cb1dc5f","sha1":"994838076669df7aca094246a944e9a233a38a47","sha256":"2d13f64efcbd7c8af58e49b9bf012c67d380941e2de6fc62484928d98bf36b2c","sha512":"6b381928f7090a55c53f5e24cd122e1d169d3ef0e64c6c2e0517709ca79f6aaf7deb264a998fd91f6de1d19a02ecbd7ffcc3b01d8120204a0504058240455a0e","ssdeep":"","tlshash":"7031ac8651fc690d4616358ac4990ec7423ed16ad04d809a7f2875bd4cfd868c75cf39","first_seen":"2026-09-12T22:51:16.954382Z","last_seen":"2026-10-14T19:44:52.73205Z","times_seen":3,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/fonts/ibm-plex-mono-600.woff2","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.179Z","timestamp":1792006980179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /fonts/ibm-plex-mono-600.woff2 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15620\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 28 Sep 2026 21:17:35 GMT\r\netag: W/\"3d04-1a0e9e15b34\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc15\r\ncache: MISS\r\naccept-ranges: bytes\r\ntraceparent: 00-a4b006d9df8b1dad7b1ce50acd8783b0-ba09151e0f6db6ba-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":15620,"size_decoded":16607,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15620, version 1.0","md5":"5a2ce7798732476dec03a9561de231fe","sha1":"ce9a5ca3a874da9201c2630c5cb7bfaa9688c052","sha256":"0d1f0b8d0722224e32e9f28261bdc86c79115be73444ae5eceb73976a1bcdf83","sha512":"5c4ebd97feaabdb478b615990f286b114ee3b76ce43dfe4122b4e6ec998ae3d4110a4a893b65f6ba81c25da0d3ad7e5a5221fb8c8efb58e5d06e9b3c890f9832","ssdeep":"384:AcHslrQJgsgNQhzVr/oaqSeH04dAM4PmV:7slrULvz9/NqSZLZOV","tlshash":"4162d010270e7176dc461378dd56c9e30476ffbec8120f6b7e91a9a258c5fd4722127a","first_seen":"2025-09-19T17:22:27.512197Z","last_seen":"2026-10-14T20:27:01.889726Z","times_seen":3020,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/tutorial-poster.jpg?v=3","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.194Z","timestamp":1792006980194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /tutorial-poster.jpg?v=3 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 151030\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 13 Oct 2026 19:12:31 GMT\r\netag: W/\"24df6-1a136ae3e36\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc15\r\ncache: MISS\r\naccept-ranges: bytes\r\ntraceparent: 00-ce5853586336c68fee37228d212ad7b9-b8113daca003a662-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":151030,"size_decoded":152019,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"a3347c45e0e6d96a4342a0b8f266dd58","sha1":"e94b9615f84dd5663e7447e73975aa1d65f3206d","sha256":"4a954e4d8961f8def85f82da8c2eab8cf3575577d6ba3046c1f51079f7eeea55","sha512":"88a00b821110f934f31cc60e5a58c2d61a0ef6c508be3328a5c66a464dd684e9427f222f260bfa4b51b1f9bb95c6db46171f3efbc3d90b0065d72b6d749320cf","ssdeep":"3072:IGuGGbwK56EMWxKE3RFX2Z0fiQ+/hVck8fXn3ih:IGuGx8MyKWX2Sr+/hVck8f3Sh","tlshash":"65e34a5bed19c617d52a0fa2bf17bd0e42622bcdb8837eea0225adf3b60531c5d1409d","first_seen":"2026-10-14T19:44:52.737024Z","last_seen":"2026-10-14T19:44:52.737024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/MaskPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:01.154Z","timestamp":1792006981154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/postprocessing/MaskPass.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unpkg.com/three@0.120.0/examples/jsm/postprocessing/EffectComposer.js\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01M3X6J2FSHP4FG0HE9KEK03Y2-arn\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a912103e83712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1099397\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:01 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:nGhMzctiwemK5bs9YtRHgCCTv5GPwyRvzS1TdabehYk=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2336,"size_decoded":1603,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"cd3c62f33563faea5c5ff2d4e83b70c4","sha1":"6873c735d350b53a17b6973863f9ad4af873782b","sha256":"9c684ccdcb62c1e98ae5bb3d62d447802093bf918fc3246fcd2d5375a6de8589","sha512":"06a4955f1781dbeeb0db8a129d2956bf283b4ad2a723a435fd0774193156216f88b118fb4497adaf68186bb34653623005073eaafb6ecaeae003b481323777c6","ssdeep":"","tlshash":"3941adc1df69502de778b0aad99e4dae17b44028430ac4357e21d4fd28e957dc26df38","first_seen":"2026-09-12T22:51:16.922339Z","last_seen":"2026-10-14T19:44:52.749373Z","times_seen":3,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/tutorial-hd.mp4?v=4","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:03.617Z","timestamp":1792006983617,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /tutorial-hd.mp4?v=4 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://5mtbot.fun/\r\nRange: bytes=131072-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/EffectComposer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.666Z","timestamp":1792006980666,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/postprocessing/EffectComposer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01M0V0CJKEXCDR0K6A8RX4VN5F-fra\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a9120d4e15712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 18325\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:00 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:a5ozEp3f1V0b/kCfJV2XyxmKb+y3mQWELGsPowet99I=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":6398,"size_decoded":2664,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"815acdb239201c9e969b2ad4ebf8b543","sha1":"12eefdc486db327efda8619a066c0e4d45a5ec76","sha256":"6b9a33129ddfd55d1bfe409f255d97cb198a6fecb79905842c6b0fa307adf7d2","sha512":"ba4be2e0c377ffb5acf47101e5d59c2e3a077eabab83aaa2fb528248fb56d5494d0fd1c8bac1cbc9455d1035abb4f382db23ce6fe280a965c2f9eb975ab8d5b9","ssdeep":"192:+L+iu78BVRQlU6tmXgbg79gZKgHSW35Rm3iqqm3ziYM1YhbWXfWgJ9QNhNUzt8gG:zgASuKAJpRm3iqV3zigWX+NbsKskZ","tlshash":"48d1dc55279c335d85503693d96c0dcb263680b9920a886f3f25f1fe0adc83c5729fba","first_seen":"2026-09-12T22:51:16.919695Z","last_seen":"2026-10-14T19:44:52.767016Z","times_seen":3,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/fonts/ibm-plex-mono-400.woff2","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.177Z","timestamp":1792006980177,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /fonts/ibm-plex-mono-400.woff2 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14708\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 28 Sep 2026 21:17:35 GMT\r\netag: W/\"3974-1a0e9e15b34\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\naccept-ranges: bytes\r\ntraceparent: 00-38f5d4716507d611e246e06273d3fca2-8eddaceebb5e9df4-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":14708,"size_decoded":15695,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14708, version 1.0","md5":"79936b18df9f734fb6b0a256b20d36b4","sha1":"bb87500e3204a3a7c65d6633c79c5c840c3be8d3","sha256":"08949f728dc52d528e69b1667d15c89a5686a4ee9a296ff90983985f99c380f7","sha512":"d5b9ed102916ebc2e1ddfe322a5dee1302329de23c0c7895639106766a52906b8ec2b9bf3ac7884dbdce6166e27d315808128d35d9609e45841e3c8c2818031a","ssdeep":"384:i54PnCNUhrlC/trZov44r9cmuyWPCZpMbyKdlm+:i2P0mrlC/cv46VuyVZSFdl","tlshash":"c962b073691e2539e1c2afb0c6c81f6c50f8d70b5ba5c6109378a063b7615ae361e9b1","first_seen":"2025-09-19T06:27:38.321624Z","last_seen":"2026-10-14T22:12:52.499883Z","times_seen":5839,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/tutorial-hd.mp4?v=4","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:01.163Z","timestamp":1792006981163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /tutorial-hd.mp4?v=4 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://5mtbot.fun/\r\nRange: bytes=7045120-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:02 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 143985\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 13 Oct 2026 19:13:13 GMT\r\netag: W/\"6db271-1a136aee276\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\ncontent-range: bytes 7045120-7189104/7189105\r\ntraceparent: 00-61c53fa6854225feef26978bdcf14a63-e99810c7044d0427-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":143985,"size_decoded":144998,"mime_type":"video/mp4","magic":"data","md5":"8d5200efb2fcf5d6a7bb4a7298a97e1e","sha1":"1a222a1587ec99f5dda5f41bc62d5b669a15b1ce","sha256":"810972321ebd2916ae2103a60e81971089780bb0bf51dc0c5318cecc3d7a82e8","sha512":"06454166ee29af4ea4ae8f6d8bd2b80bca0e5c83db9f715e5391c1e18ff658a9353c50d357d9c43a6f703d7333dce6f584b5c87b66dcbb28869c2118f11edcda","ssdeep":"1536:olcVuHWeMl6R83NpwF8ledwoABhT7innuLDy0w91rvbDW38t8mq:0GuHWee6R83NpCMeOWnYsFvbDWM5q","tlshash":"2ce34b18f3a1a16bd961837488e603187378da74234b539f93d9277deca77b82d432d8","first_seen":"2026-10-14T19:44:52.783346Z","last_seen":"2026-10-14T19:44:52.783346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1428,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1419,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/whales","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:16.799Z","timestamp":1792006996799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:16 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\netag: W/\"5d1-Dr2eB7iEoJEiPrXAhKQyhFLmmkc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\nage: 15\r\ncache: HIT\r\nx-cached-since: 2026-10-14T19:43:01+00:00\r\ntraceparent: 00-81d1a14d4028933276b24349a7f81dc8-2c5fab7292f86cbf-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1489,"size_decoded":1746,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59a9975b9da38deffa4ad4ee982fc224","sha1":"0ebd9e07b884a091223eb5c084a4328452e69a47","sha256":"da577ff5f58776ae8b836f5cf2c3ebc1fa91f04ecde38b32c77d1256edb8b852","sha512":"cc4715f6863c1b924e4f19e3283b5a573fe0ae466bd9d685d30f7f9ca5b4d2730e19b673db0a3a868c47fc3c418d595ee338e8c59d2968ee80e4d3737fa2e923","ssdeep":"","tlshash":"6d31f488621aedbd54c8cf003d56d9bdb2db035b1dcd19d6d49bce4899a0d249633cc6","first_seen":"2026-10-14T19:44:52.791389Z","last_seen":"2026-10-14T19:44:52.791389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/whales","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:24.802Z","timestamp":1792007004802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\netag: W/\"5d1-Dr2eB7iEoJEiPrXAhKQyhFLmmkc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\nage: 23\r\ncache: HIT\r\nx-cached-since: 2026-10-14T19:43:01+00:00\r\ntraceparent: 00-1bd70c6815b1e36832db41931264f016-a91875ad36fa1748-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1489,"size_decoded":1746,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59a9975b9da38deffa4ad4ee982fc224","sha1":"0ebd9e07b884a091223eb5c084a4328452e69a47","sha256":"da577ff5f58776ae8b836f5cf2c3ebc1fa91f04ecde38b32c77d1256edb8b852","sha512":"cc4715f6863c1b924e4f19e3283b5a573fe0ae466bd9d685d30f7f9ca5b4d2730e19b673db0a3a868c47fc3c418d595ee338e8c59d2968ee80e4d3737fa2e923","ssdeep":"","tlshash":"6d31f488621aedbd54c8cf003d56d9bdb2db035b1dcd19d6d49bce4899a0d249633cc6","first_seen":"2026-10-14T19:44:52.791389Z","last_seen":"2026-10-14T19:44:52.791389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/prices","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:30.796Z","timestamp":1792007010796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/prices HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 251\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\netag: W/\"fb-mGEen5AEXTGr7htGfjN9oQUfQg8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc15\r\nage: 30\r\ncache: HIT\r\nx-cached-since: 2026-10-14T19:43:00+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-8671d3955e6c5523f8a80f1274057f42-19477de08a750091-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":251,"size_decoded":1242,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b7d71e2d7c837e4248ae3e5e3b20e1f4","sha1":"98611e9f90045d31abee1b467e337da1051f420f","sha256":"b372f19c9ef5e9e27a17d3eee209a2b71f51d8c2e1f67554d7b512b11eed35dc","sha512":"09334cf0529fd0c9c296648593608feee458ca0cf69448df798b66bd19cbc5e8622759a1eee5935915d05a33c0afa65e187fa173f808d7a5bd1ee156f9aac9f3","ssdeep":"","tlshash":"c6d0924b8a2901378938f3784d096781a83b877951addb8d1b6ce92c6c5cdff60542e2","first_seen":"2026-10-14T19:44:52.797017Z","last_seen":"2026-10-14T19:44:52.797017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/politics/brazil-presidential-election","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.807Z","timestamp":1792006980807,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/politics/brazil-presidential-election HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: no-cache\r\netag: W/\"1f646-2Wzzp1B4k2DWXHwgm2reW+DXHsg\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\ntraceparent: 00-5e1f8360d3396d9f0510897834cf02fe-b3d20751b8ba59c7-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":128582,"size_decoded":44870,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c0150b275fda0b66331b17b5ca739767","sha1":"d77f3dab1b1f47ab64759f7a7c83478d7ed4f11f","sha256":"526a9888194c81261b4b62e90ba2009fa31bd73ef48c13e3a08e0cdbde844576","sha512":"be11d45c921b01107cc746b89f48980ccc4b20484c25e5c6e3ef22e4a2ec95a3868c8346cf7dc95a552905dab88c73adc0abfadb5b92554a940a0184c3f62065","ssdeep":"1536:du2EnguV4graRZsiqRSgaSdi3X0gyF8nHA9BP51QA3P1/O:XETM0z5G","tlshash":"afc34e99079807ea7e2e8f088eda9bdb9076a57236c2dcc4d1c39cf4c014ed963796c5","first_seen":"2026-10-14T19:44:52.803441Z","last_seen":"2026-10-14T19:44:52.803441Z","times_seen":1,"resource_available":true,"data":null}},"time_used":661,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":661,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamma-api.polymarket.com/events?slug=who-will-be-the-next-prime-minister-of-israel-after-the-next-election","fqdn":"gamma-api.polymarket.com","domain":"polymarket.com","tld":"com"},"ip":{"addr":"172.64.153.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.809Z","timestamp":1792006980809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Oct 2026 14:41:48 GMT","end":"Tue, 12 Jan 2027 15:41:45 GMT"},"fingerprint":{"sha1":"27:E0:53:74:78:07:F9:25:15:6D:3C:A6:FB:EF:18:18:8D:68:ED:F1","sha256":"68:96:EE:95:15:9F:70:AF:DB:1B:E5:67:5E:D4:85:8F:11:AE:97:02:E6:62:92:98:FE:11:99:7A:51:31:2C:35"}}},"request":{"raw":"GET /events?slug=who-will-be-the-next-prime-minister-of-israel-after-the-next-election HTTP/1.1\r\nHost: gamma-api.polymarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Accept, Authorization, Content-Type, X-CSRF-Token, Token, traceparent, tracestate, baggage\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 2592000\r\ncontent-encoding: gzip\r\ndeprecation: true\r\nserver: cloudflare\r\nsunset: Fri, 01 May 2026 00:00:00 GMT\r\nvary: Accept-Encoding,Origin\r\nwarning: 299 - \"use /events/keyset\"\r\nx-envoy-upstream-service-time: 31\r\nlast-modified: Wed, 14 Oct 2026 19:43:00 GMT\r\nexpires: Wed, 14 Oct 2026 19:48:00 GMT\r\ncache-control: public, max-age=300\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=7776000; includeSubDomains\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nset-cookie: __cf_bm=KV5x5TGSjvWb9JbQjcFVE5R8cAgN_Em8hOp7vIHLRGQ-1792006980.8210628-1.0.1.1-VK1aDbqfVIADS2WerGiLhQ92qgczjh6qpwE_SJc1r9YCgfiIlKToyISeUL97V3XfFi42nzromNWlKy5pACuC5GqqO4DU2IfoOrpRMu5zWbxDaMfZw3D6pF.ccLa6zr93; HttpOnly; SameSite=None; Secure; Path=/; Domain=polymarket.com; Expires=Wed, 14 Oct 2026 20:13:00 GMT\r\ncf-ray: a4a9120e1be43181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"KV5x5TGSjvWb9JbQjcFVE5R8cAgN_Em8hOp7vIHLRGQ-1792006980.8210628-1.0.1.1-VK1aDbqfVIADS2WerGiLhQ92qgczjh6qpwE_SJc1r9YCgfiIlKToyISeUL97V3XfFi42nzromNWlKy5pACuC5GqqO4DU2IfoOrpRMu5zWbxDaMfZw3D6pF.ccLa6zr93","quoted":false,"path":"/","domain":"polymarket.com","expires":"2026-10-14T20:13:00Z","raw_expires":"Wed, 14 Oct 2026 20:13:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=KV5x5TGSjvWb9JbQjcFVE5R8cAgN_Em8hOp7vIHLRGQ-1792006980.8210628-1.0.1.1-VK1aDbqfVIADS2WerGiLhQ92qgczjh6qpwE_SJc1r9YCgfiIlKToyISeUL97V3XfFi42nzromNWlKy5pACuC5GqqO4DU2IfoOrpRMu5zWbxDaMfZw3D6pF.ccLa6zr93; HttpOnly; SameSite=None; Secure; Path=/; Domain=polymarket.com; Expires=Wed, 14 Oct 2026 20:13:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":110295,"size_decoded":14015,"mime_type":"application/json","magic":"JSON text data","md5":"449772228b3e115dc044d0be88d4f404","sha1":"c4bab68171e8d6c84fff00370c11b35af666d61b","sha256":"7466e95aafdfb3227284340c44291283b67532b9c8df570e629d998b8195da09","sha512":"17187f132ec53fb63ac7bad3277cbae569288307f5c3043f44341ed240f406330b34fb0ffce8fe0b0b1e1b238afb5f2834b8d513548811a70373e806143c44eb","ssdeep":"768:8ydjxF8dPRAxj6RP1wpY0d3ngbMYAiJ1dwCI0QeNFuEq5/H/OfDhOiO3CXrGbnat:5Z611jgglRIehOiOFlV0jASmvmQQh","tlshash":"53b3e7aea61c27740f5b638488ee3f618a6011f34ad4094ce97f858415abcf7693fc5b","first_seen":"2026-10-14T19:44:52.806579Z","last_seen":"2026-10-14T19:44:52.806579Z","times_seen":1,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":4,"connect":1,"send":0,"wait":138,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/whales","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.816Z","timestamp":1792006980816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\netag: W/\"5d1-Dr2eB7iEoJEiPrXAhKQyhFLmmkc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\ntraceparent: 00-54ac2d5830f9fb330003c6bc0ce15f94-ef3567f778bd2a93-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1489,"size_decoded":1695,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59a9975b9da38deffa4ad4ee982fc224","sha1":"0ebd9e07b884a091223eb5c084a4328452e69a47","sha256":"da577ff5f58776ae8b836f5cf2c3ebc1fa91f04ecde38b32c77d1256edb8b852","sha512":"cc4715f6863c1b924e4f19e3283b5a573fe0ae466bd9d685d30f7f9ca5b4d2730e19b673db0a3a868c47fc3c418d595ee338e8c59d2968ee80e4d3737fa2e923","ssdeep":"","tlshash":"6d31f488621aedbd54c8cf003d56d9bdb2db035b1dcd19d6d49bce4899a0d249633cc6","first_seen":"2026-10-14T19:44:52.791389Z","last_seen":"2026-10-14T19:44:52.791389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":602,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/whales","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:08.793Z","timestamp":1792006988793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/whales HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\netag: W/\"5d1-Dr2eB7iEoJEiPrXAhKQyhFLmmkc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\nage: 7\r\ncache: HIT\r\nx-cached-since: 2026-10-14T19:43:01+00:00\r\ntraceparent: 00-2e05f28d84439d2e696bbbe065772349-a73fa31d0d3726c2-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1489,"size_decoded":1745,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59a9975b9da38deffa4ad4ee982fc224","sha1":"0ebd9e07b884a091223eb5c084a4328452e69a47","sha256":"da577ff5f58776ae8b836f5cf2c3ebc1fa91f04ecde38b32c77d1256edb8b852","sha512":"cc4715f6863c1b924e4f19e3283b5a573fe0ae466bd9d685d30f7f9ca5b4d2730e19b673db0a3a868c47fc3c418d595ee338e8c59d2968ee80e4d3737fa2e923","ssdeep":"","tlshash":"6d31f488621aedbd54c8cf003d56d9bdb2db035b1dcd19d6d49bce4899a0d249633cc6","first_seen":"2026-10-14T19:44:52.791389Z","last_seen":"2026-10-14T19:44:52.791389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/announce.css?v=3","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.183Z","timestamp":1792006980183,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /announce.css?v=3 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 28 Sep 2026 21:17:35 GMT\r\netag: W/\"b86-1a0e9e15b2c\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\ntraceparent: 00-083b4713cc7406176c4449a998b17a3e-c91fe376875f66b6-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2950,"size_decoded":2196,"mime_type":"text/css; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"fec9796dc11f14b49b49f4fa07b4d529","sha1":"bcff4216f1b537bb166b0a0ced35f36149ccfa90","sha256":"05d1432aedb46b369f6303c48187fb61748e81d6069e3b8f2e2defbd3c2c6fa8","sha512":"223b34145d27473d5b804b82215c68121575fd35e9b948941ec3738ad8809c397cae4daa5e705e5f26b5a3ab847d7a6634768ddc5a77fdd62ca5371383ded96b","ssdeep":"","tlshash":"f45140509301391db8338f1e29f1bd4a6420b00ed917c72c995676c88cb63baee6978b","first_seen":"2026-09-12T22:51:16.952765Z","last_seen":"2026-10-14T19:44:52.814865Z","times_seen":3,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/prices","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.814Z","timestamp":1792006980814,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/prices HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 251\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\netag: W/\"fb-mGEen5AEXTGr7htGfjN9oQUfQg8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc15\r\ncache: MISS\r\naccept-ranges: bytes\r\ntraceparent: 00-169b3c006472c18affcf6b09aff80727-8f8bd78b8e76e984-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":251,"size_decoded":1191,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b7d71e2d7c837e4248ae3e5e3b20e1f4","sha1":"98611e9f90045d31abee1b467e337da1051f420f","sha256":"b372f19c9ef5e9e27a17d3eee209a2b71f51d8c2e1f67554d7b512b11eed35dc","sha512":"09334cf0529fd0c9c296648593608feee458ca0cf69448df798b66bd19cbc5e8622759a1eee5935915d05a33c0afa65e187fa173f808d7a5bd1ee156f9aac9f3","ssdeep":"","tlshash":"c6d0924b8a2901378938f3784d096781a83b877951addb8d1b6ce92c6c5cdff60542e2","first_seen":"2026-10-14T19:44:52.797017Z","last_seen":"2026-10-14T19:44:52.797017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/replay/rounds?limit=1","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.818Z","timestamp":1792006980818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/replay/rounds?limit=1 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 111\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: no-cache\r\netag: W/\"6f-WyleqX/Fz1hEZtfIkaGvilNeArc\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\naccept-ranges: bytes\r\ntraceparent: 00-1098a92606abc67b1eef6b3f69b90c3d-46f5b8a56969c7e0-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":111,"size_decoded":1076,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e764516aa078872d609c957ba9df370","sha1":"5b295ea97fc5cf584466d7c891a1af8a535e02b7","sha256":"7c24325f86c939f0afc4b636bc3c94012b90682573d0a3e5f7da065b6f363ea4","sha512":"d0ca8c4d1d60b284a96edb0df5bad5048bb2f5fbad3e4a9df8af072ff944331fae19c91c0f73f79f6be8189681980f265cd20d7a3aa354cf848e34c02f849049","ssdeep":"","tlshash":"6ab01254941c1dac23534321041379031bef91372c440f20c4f9c63883b123d0371e92","first_seen":"2026-10-14T19:44:52.827524Z","last_seen":"2026-10-14T19:44:52.827524Z","times_seen":1,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/favicon.svg","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:03.741Z","timestamp":1792006983741,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:03 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 28 Sep 2026 21:17:35 GMT\r\netag: W/\"35d-1a0e9e15b19\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\ntraceparent: 00-b753303c7f7dd3b7f6c3f6fe9d6cf358-6d8a9c71d110afc7-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":861,"size_decoded":1417,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b87ee3144974d256bdd740dec0f32eb","sha1":"71027e1ba165997eff5f553022fa8a7673636801","sha256":"a4b75c69d2bf582fc4c720db9e1c5d7f26056e154e7d3ce16beb3502bf4ad65b","sha512":"f1c2ed123e79e90ed830b0208fa86d36033c4c9b7f09423e31f61f4ae3c5880296f5800432b9ce8c2b38e79ffbf1089eb7b1443104e9972a5ede7c94471fc1f7","ssdeep":"","tlshash":"fb11ef56d31c592fe60ac26ddb627175232c32c7e981c328b0e55f3a88540872e1a774","first_seen":"2026-09-12T22:51:16.92784Z","last_seen":"2026-10-14T19:44:52.831451Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/politics/next-french-presidential-election","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.805Z","timestamp":1792006980805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/politics/next-french-presidential-election HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: no-cache\r\netag: W/\"23e2b-mn4g3kzrdm0Ox7h3RsEvIa38MsU\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\ntraceparent: 00-53bbc44788369d7e2efd6fa72d9088eb-5ba6d5f1658a64fd-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":146987,"size_decoded":49437,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0b470538c341fdf42f473290b9495f6b","sha1":"9a7e20de4ceb766d0ec7b87746c12f21adfc32c5","sha256":"1608504caf892c75231ff3431d889565efbd35da19abd8ca19bdb9310e876336","sha512":"6ccabdf567d13663cda95d69e0124f24892547c724a1f78a448b63923e258a5cde3e2182cee17a535fac970ea2f848092599227c9a975da9049e2d6ae45e4f1e","ssdeep":"1536:14FCuOKoWViUM72Xzxnd+Z8y6l8+vG7E4wyB1morg:yemZ","tlshash":"27e34e6d075447a93e1e9f0c8dde5aef95b6a6b235c28dc8c0879df48000a91b7fd2c9","first_seen":"2026-10-14T19:44:52.837647Z","last_seen":"2026-10-14T19:44:52.837647Z","times_seen":1,"resource_available":true,"data":null}},"time_used":662,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":662,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"gamma-api.polymarket.com/events?slug=presidential-election-winner-2028","fqdn":"gamma-api.polymarket.com","domain":"polymarket.com","tld":"com"},"ip":{"addr":"172.64.153.51","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.811Z","timestamp":1792006980811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polymarket.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Oct 2026 14:41:48 GMT","end":"Tue, 12 Jan 2027 15:41:45 GMT"},"fingerprint":{"sha1":"27:E0:53:74:78:07:F9:25:15:6D:3C:A6:FB:EF:18:18:8D:68:ED:F1","sha256":"68:96:EE:95:15:9F:70:AF:DB:1B:E5:67:5E:D4:85:8F:11:AE:97:02:E6:62:92:98:FE:11:99:7A:51:31:2C:35"}}},"request":{"raw":"GET /events?slug=presidential-election-winner-2028 HTTP/1.1\r\nHost: gamma-api.polymarket.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: application/json\r\naccess-control-allow-headers: Accept, Authorization, Content-Type, X-CSRF-Token, Token, traceparent, tracestate, baggage\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 2592000\r\ncontent-encoding: gzip\r\ndeprecation: true\r\nserver: cloudflare\r\nsunset: Fri, 01 May 2026 00:00:00 GMT\r\nvary: Accept-Encoding,Origin\r\nwarning: 299 - \"use /events/keyset\"\r\nx-envoy-upstream-service-time: 37\r\nlast-modified: Wed, 14 Oct 2026 19:43:01 GMT\r\nexpires: Wed, 14 Oct 2026 19:48:01 GMT\r\ncache-control: public, max-age=300\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=7776000; includeSubDomains\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nset-cookie: __cf_bm=mPR7ezXD.dOTxB74LcA1iTvXSbXDNXAsgz5enKf3Mfg-1792006981.0325553-1.0.1.1-3TnmLUozUxpsSKfYZnT5R9hBRjnshA9uHYo8UZ1ZSiC84iWAnPAZzTwZc3udeL22MFBgIZ7Ok6PVOihoo.68olcnuxJiGsyzKnNdoontc5k254oyynNtjrknINMRZLVP; HttpOnly; SameSite=None; Secure; Path=/; Domain=polymarket.com; Expires=Wed, 14 Oct 2026 20:13:01 GMT\r\ncf-ray: a4a9120f78d63181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"mPR7ezXD.dOTxB74LcA1iTvXSbXDNXAsgz5enKf3Mfg-1792006981.0325553-1.0.1.1-3TnmLUozUxpsSKfYZnT5R9hBRjnshA9uHYo8UZ1ZSiC84iWAnPAZzTwZc3udeL22MFBgIZ7Ok6PVOihoo.68olcnuxJiGsyzKnNdoontc5k254oyynNtjrknINMRZLVP","quoted":false,"path":"/","domain":"polymarket.com","expires":"2026-10-14T20:13:01Z","raw_expires":"Wed, 14 Oct 2026 20:13:01 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=mPR7ezXD.dOTxB74LcA1iTvXSbXDNXAsgz5enKf3Mfg-1792006981.0325553-1.0.1.1-3TnmLUozUxpsSKfYZnT5R9hBRjnshA9uHYo8UZ1ZSiC84iWAnPAZzTwZc3udeL22MFBgIZ7Ok6PVOihoo.68olcnuxJiGsyzKnNdoontc5k254oyynNtjrknINMRZLVP; HttpOnly; SameSite=None; Secure; Path=/; Domain=polymarket.com; Expires=Wed, 14 Oct 2026 20:13:01 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":436205,"size_decoded":42091,"mime_type":"application/json","magic":"JSON text data","md5":"4d3a5ef298b346bc7aed689b9d5a2798","sha1":"1df6398051d4fe5cd810df9d8ce32e83f7284f9d","sha256":"9dfa43b6b1adb843c780779fcc1be85f477361e57292399fee3b5c1dce121ba4","sha512":"f63e4b3d8cfd82168d9f194eebfae67eb2eb9db3b9dc4ec304cceefa8fcb9dcc2712caba3c43486f7141049c5aeb8ddd0179ecc182a31e0902e0bccf4a6bca83","ssdeep":"1536:4HTUJcAkSiOWQWcD4f6ok3Rb5DjvVAOCuV3oTBosIS1xMkuRY:4hAkS1D40y6uf7EY","tlshash":"3794d76c15542776871bab95c8ef3f824ee421f31ed00098f47ec9c051aaaf79b1b897","first_seen":"2026-10-14T19:44:52.859079Z","last_seen":"2026-10-14T19:44:52.859079Z","times_seen":1,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":180,"receive":0,"ssl":218},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/RenderPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.671Z","timestamp":1792006980671,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/postprocessing/RenderPass.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01M0V0CJF7Y946G0MRS7V80DPP-fra\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a9120d4e16712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 18325\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:00 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s9f3LlTomyZ6TZIqtFHh6bFajyGWndhD1jIKU/OgCcI=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1790,"size_decoded":1535,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"3ffbb7da6f7a763303ca1ea0afe999a5","sha1":"828dbb6f006e03a48f74e7ec64e6886f786eddd9","sha256":"b3d7f72e54e89b267a4d922ab451e1e9b15a8f21969dd843d6320a53f3a009c2","sha512":"a6b84120aef02f2c5eaa5abb6c7854bedf4ee2ab350b85839fc2f0b0d7247a31e62d1e1e03b513ea21a81d8ec8e544440908bdca5d421f8ca08f67f6954f3dc7","ssdeep":"","tlshash":"3831b084a2ada00f5171605dc5998a46033f7496e55ed0e9ff2483be6cf812d03ddb74","first_seen":"2026-09-12T22:51:16.926707Z","last_seen":"2026-10-14T19:44:52.878794Z","times_seen":3,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://stream.binance.com:9443/ws/btcusdt@miniTicker","fqdn":"stream.binance.com","domain":"binance.com","tld":"com"},"ip":{"addr":"54.178.65.165","port":9443,"asn":16509,"as":"AMAZON-02","country":"Japan","country_code":"JP"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.688Z","timestamp":1792006980688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.binance.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 09 Dec 2025 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"B3:E9:9C:BE:88:3B:90:E1:A2:3A:98:81:FA:0E:51:08:F0:80:5E:57","sha256":"B4:FC:8D:3D:AB:BE:3E:3B:A7:86:50:B8:92:3B:52:62:7C:FE:48:A9:1F:28:F2:45:AB:CC:DE:F7:68:0C:44:BB"}}},"request":{"raw":"GET /ws/btcusdt@miniTicker HTTP/1.1\r\nHost: stream.binance.com:9443\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://5mtbot.fun\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: aKdGvRqDMV2Rta2bkhho4Q==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 14 Oct 2026 19:43:02 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: hfvWyD5RDPC0tPi4VAuce1LGJN4=\r\nSec-WebSocket-Extensions: permessage-deflate; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":240,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-14T22:38:34.668783Z","times_seen":19107718,"resource_available":true,"data":null}},"time_used":2892,"timings":{"blocked":0,"dns":1055,"connect":1313,"send":0,"wait":261,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/fonts/ibm-plex-mono-500.woff2","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.800Z","timestamp":1792006980800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /fonts/ibm-plex-mono-500.woff2 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://5mtbot.fun/land-skin.css?v=4\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 14888\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 28 Sep 2026 21:17:35 GMT\r\netag: W/\"3a28-1a0e9e15b34\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc15\r\ncache: MISS\r\naccept-ranges: bytes\r\ntraceparent: 00-469663f1c827e16a458a07243c9cd30c-99bd4e043103c7b1-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14888,"size_decoded":15875,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14888, version 1.0","md5":"b1c8a895f5fd3fe6cbf5b4cf95c58d87","sha1":"d32f0e0701ac62043840131a800ce717a86e4ee2","sha256":"01d285447409c8a588692162439a038b8cbd7871309ee20267b0d2d91c6e8e22","sha512":"8e5f116c757f033e001d1622798ef0e689d860b6e4102c6d760398ebe653c6ec257bdcee0d8ec1ca7cf5663269ae36b79f8d44b5a0a81298c816ac5ed9a020ed","ssdeep":"192:0oK9+lgWZm57bYBeze/iw+Lp3HIpY4uY8rHcT1DHC4cIIK/Cgb2n5ZXwMEBHr5F3:9K+nro0uYQ6cECVnTXwRtQnyYS5qb/f2","tlshash":"f962be3785690217eb1df96f6133e205ccdede83877bc23262b2955b01cfbea5019255","first_seen":"2025-09-19T17:22:27.509445Z","last_seen":"2026-10-14T21:34:02.621249Z","times_seen":3332,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/Pass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:01.049Z","timestamp":1792006981049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/postprocessing/Pass.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unpkg.com/three@0.120.0/examples/jsm/postprocessing/RenderPass.js\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01KZ4Z03XYJPZFDKGYQ5JNAPHV-fra\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a9120f8e66712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 18325\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:01 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:EpNb/V8/m59Nrfke7JmEW7sZU0cYqhZn5eCRuMctUv8=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1578,"size_decoded":1591,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"cf0b671c9de036eed02ae665fb267a1d","sha1":"3d6f7043d9b64984e55e8fb8b9116e64072d5fa6","sha256":"12935bfd5f3f9b9f4dadf91eec99845bbb19534718aa1667e5e091b8c72d52ff","sha512":"ad55f79288e6ef73f304c86c451101b9948736405ed15b3bf5909fadb0fc2e47863c602d4797e7eae5b147935e9b39d067ce30469a5f6f28216c9c8623b0b882","ssdeep":"","tlshash":"e63100012b9c212cd25c33e9d19e4deb1b756435a19d54fb3918c5fe9ad883c032d7aa","first_seen":"2026-04-02T13:35:17.640769Z","last_seen":"2026-10-14T19:44:52.893741Z","times_seen":4,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-14T19:42:59.360Z","timestamp":1792006979360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:42:59 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 13 Oct 2026 19:13:39 GMT\r\netag: W/\"6f080-1a136af4806\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\ntraceparent: 00-813c1c1a6fdcff3f8e452721fb4a2f4a-f4c15ef10c20f3b9-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454784,"size_decoded":75137,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (884)","md5":"e4ca346a291748c89c73caf0a5b22b6d","sha1":"3aa752541affdb3a94e69ce5d23bf6a0cb72dcd0","sha256":"60dd886267fee49f52c59c33fdd40a9260d0b0f87fd6efe603b53d0c36aa568d","sha512":"5b1749c47a54f570fff0f0d931efefa68fa28e193c87f96a41f9e504dcff98237a5e2ad59e8501fd03d058b4e87d5c70e82b7f0506362cace6fd3e6c98124d38","ssdeep":"3072:Fqf0bv68OE8+DPLb09pLjpBFjBS1Y5a5Vmvs/RoTyG:wsbv68OE8+DPLA9pLjpBFjBr9j","tlshash":"e3a4ec459ad2402a780b056d27e84b5a113bc383fd230b7d3b6f72469f915ec53ee3a6","first_seen":"2026-10-14T19:44:52.901785Z","last_seen":"2026-10-14T19:44:52.901785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":51,"connect":8,"send":0,"wait":116,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-DVMSY1F0JM","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.173Z","timestamp":1792006980173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:00:18 GMT","end":"Fri, 11 Dec 2026 20:00:17 GMT"},"fingerprint":{"sha1":"28:B6:EA:A0:82:D0:48:3A:13:C3:DC:38:88:85:51:9B:B3:CB:89:B4","sha256":"80:50:66:22:4E:D0:C3:BC:40:94:CA:B1:AA:D1:DB:13:A9:E5:74:53:AA:EB:19:DE:D1:A8:AC:C9:B7:18:01:EF"}}},"request":{"raw":"GET /gtag/js?id=G-DVMSY1F0JM HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\nexpires: Wed, 14 Oct 2026 19:43:00 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 179479\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":533898,"size_decoded":180083,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6696)","md5":"0a70bb17683c9f2da7f47d15d97a8c69","sha1":"3866287ebef62c2d2e919da5b6922b7f60cf5860","sha256":"17cbd686280af34b8ee0343ba6f17842ee9862c35338a7f16a09c8e405b9c731","sha512":"858c363a584ecdcca3a2c43c56ef036646de81c22899c633c3981ac5d07a49d7e2e3f61541346fc1071e7e817bb170a78b617ed8849d0b82ff71ff94f389336a","ssdeep":"6144:/cDveGmbsEDAhIsmbcs0cGFccFEbTExW3yTzB93dAy8/q0RN:/dLDAhEYPPdAyup","tlshash":"adb41aceb3d674229396f078903f01cba57b29a2b45cc996b189cce01d34a9a4177f7d","first_seen":"2026-10-14T19:44:52.909885Z","last_seen":"2026-10-14T19:44:52.909885Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":3,"connect":17,"send":0,"wait":44,"receive":51,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/land.css","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.176Z","timestamp":1792006980176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /land.css HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 28 Sep 2026 21:17:35 GMT\r\netag: W/\"102d7-1a0e9e15b1f\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\ntraceparent: 00-fac29f22863c05619c8ab675cfcb7f56-c8ff9c2366d96436-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":66263,"size_decoded":15138,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (41984)","md5":"6663976661b236fc3c8516052921d104","sha1":"c07fa056a364c69d9898045225b87db2cf65c9db","sha256":"104f6f9bac0ab8f120bf5f3ad933cb789be8b63d3a38adfd2aaf508ad4abde7d","sha512":"c24a08e3fc8d01b5a1867c57e8cb0ba87638a5f4b49d8931c3685f1f5bd3ad074df4402531d82a86971b88885d86f2520a97a19b793a25d3456e476a4aa33f18","ssdeep":"768:GHK4jBiWp5ZNckhZvICXtqH5sZN/3DLbNrDpcFDlzDE3HykDzzxTLzXBZSB5DAtx:GHVNTG06cTn","tlshash":"c353964ca105a07a3c27d1f1939caa8dd01677d1ee6a43e6f8a356205ec77f42fa271c","first_seen":"2026-09-12T22:51:16.91522Z","last_seen":"2026-10-14T19:44:52.919893Z","times_seen":3,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/politics-featured.css?v=2","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.184Z","timestamp":1792006980184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /politics-featured.css?v=2 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Sat, 03 Oct 2026 09:32:25 GMT\r\netag: W/\"16e4-1a1011b8f2a\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc11\r\ncache: MISS\r\ntraceparent: 00-f8c284d3343167502fbd43e8deda7603-2d5417b1e374d58c-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5860,"size_decoded":3214,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"0a515c2e413b30b221128e00061ef083","sha1":"8320d14d45f2ad8f7d937024d450efbc27025713","sha256":"93fdcd875901058cafb257023b83c5701bb0bb14439e84c53fb37ad7491b4df7","sha512":"ed6780e19c8d7f39c600b0414c489560b8df32ad16fb019af21d0420ff83b8225c7e3d101057ab54caf4c06950ca7031ee1079ff8b0a58f309ca5cfe5e523012","ssdeep":"96:C1oWiEaMWlb7VkmzaOHxo0IzIodOGdOVb:CQ3MI7VkmzacxIzIodOGdOh","tlshash":"43c165b1725323397827dd3a46bc9e9e209c9706d9030bd8d860e1d58df61eeee72784","first_seen":"2026-10-14T19:44:52.926135Z","last_seen":"2026-10-14T19:44:52.926135Z","times_seen":1,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/build/three.module.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.662Z","timestamp":1792006980662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/build/three.module.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01M2HSN25PC37KJF67MZFYNAY2-cdg\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a9120d4e17712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 125745\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:00 GMT\r\nlast-modified: Tue, 13 Oct 2026 08:47:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:UBEj9/s+qTfStOODnm3qgDwRwasd2LwxS8WX81t7o28=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":1189145,"size_decoded":237309,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"1e05936b8bda3b2b913ad37f6d19f795","sha1":"1f075b78c254ef6e0c1a9a144a03ed6d090945cb","sha256":"586b246acfa924f225e3adf11b46d3c4aff07705f663bcf6cb17e30a647c5ce0","sha512":"5ff1192484830bbdf6f9d2aa6a417318f47e3bca4f12dee0d1088f1595bbbcd85538339605445b58c442d91e67850afda25633ab09f5c0bacdcc89520338f5ea","ssdeep":"24576:zT8OXkqvQ+GazWsQN40PdBLkjew0XQGhmYnNV6+/QSJ:sqvQ+GazWsQN40PdBLkjew0XQUmYX6+/","tlshash":"ae25e7852bbd111e8a6631a8952d05c5653c9473b602c4ffbc0c69da68e183cc7bef7e","first_seen":"2026-09-12T22:51:16.929988Z","last_seen":"2026-10-14T19:44:52.933774Z","times_seen":3,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":5,"connect":17,"send":0,"wait":186,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/postprocessing/UnrealBloomPass.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.673Z","timestamp":1792006980673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/postprocessing/UnrealBloomPass.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01KVJ11J3RZ577MMF92ZAKEMG8-fra\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a9120d4e18712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 10064214\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:00 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:yvBOIi5jyJbRn8i2M/NAoYDxgLKaam7U9aXBYesjltE=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12672,"size_decoded":3994,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6f72588b2399d724e149861e1ba6cec7","sha1":"48b1b7ac3d4cccfec3c49fbd68c30074703af503","sha256":"caf04e222e63c896d19fc8b633f340a180f180b29a6a6ed4f5a5c161eb2396d1","sha512":"967b271b9c55bd8ef9fc524313d55bc2e39a8b86fea908cecfe2923d18b4f984e76e782afb70b39c43b191eb075833b00a25add4a47a029fa2335ecc94da2b8e","ssdeep":"384:Ld/i5geTG6pPszHe/tWUW2W0W6W3NiXjzGIa6aOvA+4RsmQ+QbIAQ5YWWJaHCfH+:Lc5ar8tndTVuEjPNrvA++smQXUAhWtCm","tlshash":"e6427546639c646e0e56b594c19e0ac0017e627b110fd9eebe1cb4be58f582c836cfb7","first_seen":"2026-09-12T22:51:16.941286Z","last_seen":"2026-10-14T19:44:52.948225Z","times_seen":3,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/tutorial-hd.mp4?v=4","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:01.011Z","timestamp":1792006981011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /tutorial-hd.mp4?v=4 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nReferer: https://5mtbot.fun/\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: video/mp4\r\ncontent-length: 7189105\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Tue, 13 Oct 2026 19:13:13 GMT\r\netag: W/\"6db271-1a136aee276\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc10\r\ncache: MISS\r\ncontent-range: bytes 0-7189104/7189105\r\ntraceparent: 00-3e6902e12bf6233435754788db29b97d-24f38d27b7930e08-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162637,"size_decoded":163645,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"f2492c2c3669f847b195b8ff19552bf2","sha1":"3ed8864c2b9fc136613c9176e9a218dfd2d7b8ae","sha256":"f3678b173f75edf1455949ec1d1855b010763f245e3efe97c8daa0876c1743df","sha512":"2cbeab668da0369f0f646397db915910a361dd66c4cfc88ebc3ab6cba627f878bb805d7455f1e2cb73990f042a1080dd78dd381c873a8587c9f490452039d436","ssdeep":"3072:mv4bf+sFsCxw8aVBEK4CmMxbes261sXnsplhpT830BxltdJExmVo507:mATFs8Mbr4fMdebEsspTNx5+MH7","tlshash":"53f3120b556ae5b8c9ba5b637381e8516447e53043ff817b3b1c2810209efa68d7f2e8","first_seen":"2026-10-14T19:44:52.950403Z","last_seen":"2026-10-14T19:44:52.950403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":86,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/shaders/CopyShader.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:01.149Z","timestamp":1792006981149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/shaders/CopyShader.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unpkg.com/three@0.120.0/examples/jsm/postprocessing/EffectComposer.js\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01M31KE98ZQ498981V1P2C9B5D-cdg\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a912102e7d712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 18325\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:01 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:TOlePqrX069HeJvZSAijOTmKLfjD+0p5WMTMhv3lUsk=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":593,"size_decoded":1200,"mime_type":"text/javascript; charset=utf-8","magic":"C source, ASCII text","md5":"5e6f499ade857e08fc1645b66a0ea4f0","sha1":"8ed4d72ec36aa2a33271b057bca706990ba7e474","sha256":"4ce95e3eaad7d3af47789bd94808a339398a2df8c3fb4a7958c4cc86fde552c9","sha512":"d33c40b2c1dfbbd118231c04ec83bae2e6d9e06a78cfe41a38598940a1df0ed0bd5db91a85322891ec7be5429c020cedfc259adb90e23a16cde9d62fecc85d01","ssdeep":"","tlshash":"23f08b0b008da04a4c0ff084ba79ccc0e178abdb7954d2db3d32a86d2dda848f361b59","first_seen":"2026-09-12T22:51:16.931221Z","last_seen":"2026-10-14T19:44:52.959187Z","times_seen":3,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/tools-teaser.css?v=2","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.186Z","timestamp":1792006980186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /tools-teaser.css?v=2 HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:00 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Sat, 03 Oct 2026 09:32:25 GMT\r\netag: W/\"9c9-1a1011b8f2b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc15\r\ncache: MISS\r\ntraceparent: 00-e063de4434e9d96ed96880afc968d80f-36d762eb4735cf59-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2505,"size_decoded":1956,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"d561b4d255ca1e35c7fd869e45595117","sha1":"51078324202fd468d4b420f4ab609afe16d7919b","sha256":"247e2408fedb63e46776ca2aedd66608cfdf148ae3cb4ddced44b3dab7970e0e","sha512":"1271a46569bf22efb5f58f0c487dcf1a03c5f9ae8beed3869688bd9ec6793a2a6b721c167a656c0231915d569de6f8c5b20694770d18c841ea98a31621fd98a0","ssdeep":"","tlshash":"d85181b4a212a13ab84bcc29573cadac70049512d90107e0e965b1c48ff9ee7fe3190c","first_seen":"2026-10-14T19:44:52.968041Z","last_seen":"2026-10-14T19:44:52.968041Z","times_seen":1,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/politics","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:00.812Z","timestamp":1792006980812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/politics HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: no-cache\r\netag: W/\"9858-TJkCBHNToTqM9hY+Tc46cnmJ7nI\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc15\r\ncache: MISS\r\ntraceparent: 00-eb10e0932de654977a279f9432db950a-0a339e53baecc43a-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":39000,"size_decoded":15986,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4f1282b89c852f0dbc468e2a4f2772f2","sha1":"e1926715637f5943973c8c4343c68ade87e2b953","sha256":"096958be0975b59107cb13d090080b981decd18a84d3c4475c187c7d3c5f38f7","sha512":"6144a77812333d877add7f31ffaff0610ac37880ec1c8c485618903b3eacde99067b2524be8e3fe8cbeb7acb89fa5bd1f6e41b15fc7c387414aae155f1c82afb","ssdeep":"384:c6bQRE9gjQYefhUiRksX+MEtv3D62z8+5qReqR/u/80K1PnPYzRFk2zwoKKz8x70:gWmnltvTjQR/u/y1gFkpoSu25kuTm","tlshash":"7f03d7174aaccf7b4ab612cb94cf7bd9a8a4102553e80a59f4ecef49718053e243f9d4","first_seen":"2026-10-14T19:44:52.983204Z","last_seen":"2026-10-14T19:44:52.983204Z","times_seen":1,"resource_available":true,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/three@0.120.0/examples/jsm/shaders/LuminosityHighPassShader.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:01.156Z","timestamp":1792006981156,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Oct 2026 09:57:51 GMT","end":"Sun, 10 Jan 2027 10:57:49 GMT"},"fingerprint":{"sha1":"A0:42:B3:0C:C3:A1:9D:5D:8F:E6:27:6A:45:A9:BA:6D:77:27:31:49","sha256":"93:94:C5:BA:28:03:1F:29:7E:0F:1D:81:9B:87:D6:A5:24:BD:11:D8:74:FC:91:40:66:D4:45:CD:DA:5A:1E:97"}}},"request":{"raw":"GET /three@0.120.0/examples/jsm/shaders/LuminosityHighPassShader.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://unpkg.com/three@0.120.0/examples/jsm/postprocessing/UnrealBloomPass.js\r\nOrigin: https://5mtbot.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=3,i=?0\r\nfly-request-id: 01M3SBVRRGJA0FAC7JDVJ0NZ7H-cdg\r\ndate: Wed, 14 Oct 2026 19:43:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: a4a912103e84712b-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 18325\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 14 Oct 2027 19:43:01 GMT\r\nlast-modified: Wed, 14 Oct 2026 14:37:35 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:3gfCvmhbiDA0udGvQrjMUmjV71uwkW2vk7hDqbr7Tz4=:\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":1245,"size_decoded":1424,"mime_type":"text/javascript; charset=utf-8","magic":"C source, ASCII text","md5":"10e5a2df6b32729991f182c68cc967b8","sha1":"15ecaca202b6ee6173dc20d0f9d284e7138d6df9","sha256":"de07c2be685b883034b9d1af42b8cc5268d5ef5bb0916daf93b843a9bafb4f3e","sha512":"3593a444739873443ab4eb4961904a697152998aee0cb7581f200d44907958b342154bd48aa91d4d20d2d900c1778b39cae071134a21c41f9a74802ed59968db","ssdeep":"","tlshash":"0021fe07205ce1c25d47b14c1638d884a37bafeb19419f9a3d7d6a3d4c4180ee3a0bd7","first_seen":"2026-09-12T22:51:16.933032Z","last_seen":"2026-10-14T19:44:52.990851Z","times_seen":3,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/favicon.svg","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:03.742Z","timestamp":1792006983742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:04 GMT\r\ncontent-type: image/svg+xml\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 28 Sep 2026 21:17:35 GMT\r\netag: W/\"35d-1a0e9e15b19\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\ncontent-encoding: gzip\r\nx-id: sto5-hw-edge-gc14\r\ncache: MISS\r\ntraceparent: 00-8c37b5e372ca99194c64da8953835d3d-d39814127baae4e9-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":861,"size_decoded":1417,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b87ee3144974d256bdd740dec0f32eb","sha1":"71027e1ba165997eff5f553022fa8a7673636801","sha256":"a4b75c69d2bf582fc4c720db9e1c5d7f26056e154e7d3ce16beb3502bf4ad65b","sha512":"f1c2ed123e79e90ed830b0208fa86d36033c4c9b7f09423e31f61f4ae3c5880296f5800432b9ce8c2b38e79ffbf1089eb7b1443104e9972a5ede7c94471fc1f7","ssdeep":"","tlshash":"fb11ef56d31c592fe60ac26ddb627175232c32c7e981c328b0e55f3a88540872e1a774","first_seen":"2026-09-12T22:51:16.92784Z","last_seen":"2026-10-14T19:44:52.831451Z","times_seen":3,"resource_available":false,"data":null}},"time_used":538,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":538,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"5mtbot.fun/api/prices","fqdn":"5mtbot.fun","domain":"5mtbot.fun","tld":"fun"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://5mtbot.fun/","date":"2026-10-14T19:43:15.796Z","timestamp":1792006995796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"5mtbot.fun","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Oct 2026 10:41:38 GMT","end":"Tue, 12 Jan 2027 10:41:37 GMT"},"fingerprint":{"sha1":"98:66:39:97:69:05:B5:5F:C5:06:AF:A2:EE:3D:4B:F7:93:16:37:CA","sha256":"5A:28:85:53:4F:2F:D0:A7:BF:FF:7D:15:4E:1D:BC:35:FF:26:50:E6:BC:95:65:0D:C0:08:AD:05:E5:63:2B:4F"}}},"request":{"raw":"GET /api/prices HTTP/1.1\r\nHost: 5mtbot.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://5mtbot.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_DVMSY1F0JM=GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0; _ga=GA1.1.199943000.1792006981\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_ga_DVMSY1F0JM","value":"GS2.1.s1792006981$o1$g0$t1792006981$j60$l0$h0"},{"name":"_ga","value":"GA1.1.199943000.1792006981"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 14 Oct 2026 19:43:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 251\r\nx-id-fe: sto5-hw-edge-gc14\r\nx-shard: sto5-shard0-default\r\nx-powered-by: Express\r\netag: W/\"fb-mGEen5AEXTGr7htGfjN9oQUfQg8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=(), payment=()\r\ncontent-security-policy: default-src 'self' https: data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: blob: https:; font-src 'self' data: https:; connect-src 'self' https: wss:; frame-ancestors 'self'\r\nx-id: sto5-hw-edge-gc15\r\nage: 15\r\ncache: HIT\r\nx-cached-since: 2026-10-14T19:43:00+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-8f998a766bb0e6c7d69181dc226a09a6-6869cd7126d43441-01\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":251,"size_decoded":1242,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b7d71e2d7c837e4248ae3e5e3b20e1f4","sha1":"98611e9f90045d31abee1b467e337da1051f420f","sha256":"b372f19c9ef5e9e27a17d3eee209a2b71f51d8c2e1f67554d7b512b11eed35dc","sha512":"09334cf0529fd0c9c296648593608feee458ca0cf69448df798b66bd19cbc5e8622759a1eee5935915d05a33c0afa65e187fa173f808d7a5bd1ee156f9aac9f3","ssdeep":"","tlshash":"c6d0924b8a2901378938f3784d096781a83b877951addb8d1b6ce92c6c5cdff60542e2","first_seen":"2026-10-14T19:44:52.797017Z","last_seen":"2026-10-14T19:44:52.797017Z","times_seen":1,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-14","alert":"Sinkholed","trigger":"5mtbot.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}