{"report_id":"0f9e8f54-00f1-454f-8aa0-5bc573566770","version":0,"status":"done","tags":[],"date":"2026-10-13T15:42:29Z","url":{"schema":"http","addr":"trumpaccountsusd1.fun/","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"title":"Trump Accounts","dom":{"size":25109,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15304)","md5":"6af4882f97112f537123a5b7f932e8f4","sha1":"14bec81ef437ee8cad05b3d4616399f569d35ea6","sha256":"3e503a6ff5f48558d952c1f29c48709449093f140f48e1cc556177934ff5fc63","sha512":"3c22a27a2d62a4accc958b0685b8219b471de634e9cfadabafb23713687eca29ad2e261876e7e4ad0b718749850594d1a11004e9641bbed6937b031dd1447cfc","ssdeep":"768:jBLB2PMsnB7cxksc64Jysq7vG53BsKZSyd5JHJvuJX0JFyE:jBLB20Xx/c64Jysq7vwBsKZ9n4C","tlshash":"f8b2c650700c12796e3f9b65fac4677ca035b402eea20426b24d009ee7d3ff52af6b95","dom_hash":"domhash83b5c007256d2a94f0d740b7aec5cf18","first_seen":"2026-10-13T15:42:36.745514Z","last_seen":"2026-10-13T15:42:36.745514Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trumpaccountsusd1.fun/","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-17T15:42:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"storage.googleapis.com","ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":880,"first_seen":"2012-08-06T06:33:30Z","last_seen":"2026-10-12T17:15:37.551034Z","alert_count":0,"request_count":1,"received_data":378325,"sent_data":644,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}]},{"fqdn":"trumpaccountsusd1.fun","ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-10-13T15:42:32.015139Z","last_seen":"2026-10-13T15:42:32.015139Z","alert_count":11,"request_count":11,"received_data":4436531,"sent_data":7742,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/~flock.js","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","size":21296,"data":"","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-13T18:50:26.426344Z","times_seen":18674,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/__l5e/events.33a4189afb1076e3.js","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb23a3aa09e630d589cfe162a2b9caf6","sha1":"22ffabf4f3e5177827ebb1b6f41e4f2269be7150","sha256":"90022cf49a0bbdedf3fea505ad945985b373d96793a906f6d01dbaa697dd3a21","sha512":"9225e64bfbba174b75482cf8bb718fab385680f851bb06bbe3332ef328e519c9458aff709bc286e0526562707cd75b8302a497e1d075a99f4d56f62cad2fa5cc","ssdeep":"768:VkDE0BoKrVMS07miDBb3EZkt1xczQOHoTZtbH8GyfxlTW5ZgJhN6FE2MDEqBVQeb:zyY1b3W1Kq/3xFVmmR2Mv139","tlshash":"fdb219d171c5b03797f28ae920554007b17caea3348d81e0e5ec8d3a4997a52e0bbf5e","size":25268,"data":"","first_seen":"2026-10-11T15:16:50.144391Z","last_seen":"2026-10-13T18:51:21.775206Z","times_seen":226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/assets/index-CeWRgzvO.js","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"561ac3bc777e589675940c267e09b31e","sha1":"e40719e612a6c4a7f6552c0049c6deede2023e31","sha256":"f1bfbb0aa2818fa2d6e5a57c1f6b8b0325bd96648a87ce333cbce1020a9fb1d9","sha512":"34666bbd9c0a442a0a97e61ad3a86f8998079ffb705c7b40238ea4cde3caa0f72ebe5f082e4c845ec88b88c286e87383bfd4f7e3f891a8ac82049cc3648b21e0","ssdeep":"6144:2E6dlpQLq725d/Y9uMYPZQTdaUgLdkN4PQFmi3U:Oa/Y9XYPZQTYiNmQF4","tlshash":"58646dd8306ab175aba742a2507f410b73382913780d8460f12cedae77b5645a1bbffd","size":312953,"data":"","first_seen":"2026-10-13T15:42:36.755051Z","last_seen":"2026-10-13T15:43:23.828406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"storage.googleapis.com/gpt-engineer-file-uploads/TLNAqGBxhPcuFU1Hz2JNIo7grMt2/uploads/1769632877406-trump%20accounts%20token.png","fqdn":"storage.googleapis.com","domain":"storage.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.59","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:58.173Z","timestamp":1791906118173,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"storage.googleapis.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 18 Sep 2026 20:04:36 GMT","end":"Fri, 11 Dec 2026 20:04:35 GMT"},"fingerprint":{"sha1":"74:A2:1B:43:49:4D:43:C3:10:5C:BC:CD:FB:C9:24:2F:4C:CB:09:36","sha256":"39:BE:BD:ED:24:13:4F:20:67:72:DC:D2:49:11:AE:81:6B:37:18:0F:F0:7E:C5:F5:74:0C:54:0A:D2:FC:D1:4B"}}},"request":{"raw":"GET /gpt-engineer-file-uploads/TLNAqGBxhPcuFU1Hz2JNIo7grMt2/uploads/1769632877406-trump%20accounts%20token.png HTTP/1.1\r\nHost: storage.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nx-guploader-uploadid: AP6rU80e4CpUUhSzTetWdnn_egjps5R7xseey7UOwK23zt8fAXQvvduF_akaPpDPE6K7zEmCspdby8b1Rx1D\r\nexpires: Tue, 13 Oct 2026 16:41:58 GMT\r\ndate: Tue, 13 Oct 2026 15:41:58 GMT\r\ncache-control: public, max-age=3600\r\nlast-modified: Wed, 28 Jan 2026 20:41:17 GMT\r\netag: \"fe2914cae3353be520d46e19f17c2cc5\"\r\nx-goog-generation: 1769632877596489\r\nx-goog-metageneration: 2\r\nx-goog-stored-content-encoding: identity\r\nx-goog-stored-content-length: 377581\r\nx-goog-hash: crc32c=BBcoZQ==, md5=/ikUyuM1O+Ug1G4Z8XwsxQ==\r\nx-goog-storage-class: STANDARD\r\naccept-ranges: bytes\r\ncontent-length: 377581\r\nvary: Origin\r\nserver: UploadServer\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud Storage","description":"Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time.","website":"https://cloud.google.com/storage","common_platform_enumeration":"","icon":"google-cloud-storage.svg","categories":["Miscellaneous"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":377581,"size_decoded":378325,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"fe2914cae3353be520d46e19f17c2cc5","sha1":"c45d19ba87336235734a9b7fd08425a9e0805ff6","sha256":"a3c7527f68f9d097c25be1b39a0aac1540d70c00e2aaeb3e5cbcf6c540da38b5","sha512":"5de1cfa8df0f945c9c8eb01efb225b7a874e61eff935eb2d6cd039862e0081913da35ce8a2c183778a9c101b426ce09ad504cd3296f836d977c6d2efdb8599b1","ssdeep":"6144:DVg5u5VjD9Bf5o5/xiHpTSpZ8wxVRORh7O5739Eb2NuYBzBhEh32bfpq:+u5Vj5BJmxbOH7EHDLSG8","tlshash":"748423cbc453dc7372c5a7f917a00d91ee77a9e0a23a9cdf049df7324a9a06546329b0","first_seen":"2026-10-13T15:42:36.749764Z","last_seen":"2026-10-13T15:43:23.822739Z","times_seen":2,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":124,"receive":75,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/__l5e/trackevents","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:42:07.755Z","timestamp":1791906127755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://trumpaccountsusd1.fun/\r\nContent-Length: 1153\r\nOrigin: https://trumpaccountsusd1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH; session-id=b3810db5-01ba-4428-a7c5-282729a0c8b6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"},{"name":"session-id","value":"b3810db5-01ba-4428-a7c5-282729a0c8b6"}],"method":"POST","post_data":{"size":1153,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"cb94e44d-56a1-4b0c-af63-650b89f95216\",\"sent_at\":\"2026-10-13T15:42:07.744Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"preview_commit_sha\",\"id\":\"fa923056cf28669f656da008a07f951c1dbef5bf\",\"commit_sha\":\"fa923056cf28669f656da008a07f951c1dbef5bf\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF80MDFjZDU0Y2s1OTl3ODhybndiMTlycW5uZyIsImFydGlmYWN0X2tpbmQiOiJwcmV2aWV3X2NvbW1pdF9zaGEiLCJhcnRpZmFjdF9pZCI6ImZhOTIzMDU2Y2YyODY2OWY2NTZkYTAwOGEwN2Y5NTFjMWRiZWY1YmYiLCJjb21taXRfc2hhIjoiZmE5MjMwNTZjZjI4NjY5ZjY1NmRhMDA4YTA3Zjk1MWMxZGJlZjViZiIsImV4cCI6MTc5NDQ5ODExN30.t232ZZ1qw16RWGKLsjfGKrr8aIpFLzqNJVs7nEGHriU\"},\"events\":[{\"event_id\":\"d9dad2d1-9aee-4b86-b850-24ee8dcf2923\",\"event_name\":\"lovable.page_engagement\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T15:42:07.493Z\",\"session_id\":\"74901cda-e636-41a3-adf4-6e98b3458d16\",\"page_view_id\":\"bc55eb97-1d34-4376-91e4-41147cfa0f33\",\"trace_id\":\"572a0697ccb802d16477cb540f0649f6\",\"span_id\":\"2a2f8714c5ecf360\",\"parent_span_id\":\"63e067f3dfa8fa51\",\"properties\":{\"reason\":\"threshold\",\"engagement_time_ms\":10016}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 13 Oct 2026 15:42:07 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49f73d27f131a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-13T19:06:37.694492Z","times_seen":4380,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/assets/index-CeWRgzvO.js","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.293Z","timestamp":1791906117293,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET /assets/index-CeWRgzvO.js HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"561ac3bc777e589675940c267e09b31e\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49f73910da21a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":312953,"size_decoded":100560,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37534)","md5":"561ac3bc777e589675940c267e09b31e","sha1":"e40719e612a6c4a7f6552c0049c6deede2023e31","sha256":"f1bfbb0aa2818fa2d6e5a57c1f6b8b0325bd96648a87ce333cbce1020a9fb1d9","sha512":"34666bbd9c0a442a0a97e61ad3a86f8998079ffb705c7b40238ea4cde3caa0f72ebe5f082e4c845ec88b88c286e87383bfd4f7e3f891a8ac82049cc3648b21e0","ssdeep":"6144:2E6dlpQLq725d/Y9uMYPZQTdaUgLdkN4PQFmi3U:Oa/Y9XYPZQTYiNmQF4","tlshash":"58646dd8306ab175aba742a2507f410b73382913780d8460f12cedae77b5645a1bbffd","first_seen":"2026-10-13T15:42:36.755051Z","last_seen":"2026-10-13T15:43:23.828406Z","times_seen":2,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/assets/hero-flag-D0FkMGRU.png","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.495Z","timestamp":1791906117495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET /assets/hero-flag-D0FkMGRU.png HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 1650117\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"abcf1cc215e436345516ee60280a619b\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49f739259e61a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1650117,"size_decoded":1650530,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"a224737cbad9610754f446813e86fea6","sha1":"75f467d73d85dc30c623845efb231d7f882bee54","sha256":"8e3e844df1f93c91115bd25f39a97f6d51fec0eb51e683b78da1c9c62e3b0b01","sha512":"9195972879df2b6a5598ada7cc06d338361307e5ec869f84b8b6635d510d0a6b9cf4da1df053454e237207d7afc642fb258aebfdb2dd18a93aa9ff37b318b533","ssdeep":"24576:1dVDqqudUK0Z2bZxYgS7+LGtoFxVg0v4JercY1zDyS+:zhgF0ZMZxY/bto3VHvZrcY1HyX","tlshash":"1c253325a0ad9b754fe8d37a2052208cc92b4dfd520fa52ea8305bd437b45ec4e5efd8","first_seen":"2026-10-13T15:42:36.757651Z","last_seen":"2026-10-13T15:43:23.831384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/assets/curtain-bg-B8q-9JHV.jpg","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.498Z","timestamp":1791906117498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET /assets/curtain-bg-B8q-9JHV.jpg HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 110806\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"e833519c630938c0941bf35c809558b8\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49f739259f91a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":110806,"size_decoded":111219,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"e833519c630938c0941bf35c809558b8","sha1":"3dd0dbd219b4444f466186032750f6c91b5b6259","sha256":"7ee6960099f54bce8a012579044130d84da339de700ee06a63a6bbd0e875165b","sha512":"dff3934478bd35ef9a9e01d2e6cb7d5f1d848a33cb8e1ac1301d1b80205b9174020ec3deeafc73bc076cd59c30a8535871c341a6ac9dabfda3061ad43da469c7","ssdeep":"3072:T/K1t8yn6WQV8Q/ygWu7QoeHGKCnNFAtI3e:TSFQ3agWJHGKKDAtl","tlshash":"d6b3cf176d455ec7a969dbe4bf130d8d2f493a2ca8823aff10279e873e602161d8d13d","first_seen":"2026-10-13T15:42:36.762297Z","last_seen":"2026-10-13T15:43:23.820544Z","times_seen":2,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/__l5e/trackevents","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.733Z","timestamp":1791906117733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"POST /__l5e/trackevents HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\ncontent-type: application/json\r\nReferer: https://trumpaccountsusd1.fun/\r\nContent-Length: 2625\r\nOrigin: https://trumpaccountsusd1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"POST","post_data":{"size":2625,"data":"{\"envelope_schema_version\":1,\"batch_id\":\"1e33621b-d30d-4194-9d0d-83782991ecbe\",\"sent_at\":\"2026-10-13T15:41:57.731Z\",\"sdk\":{\"name\":\"lovable-user-app-events\",\"version\":\"0.3.0-automated-flag\"},\"automated\":false,\"artifact\":{\"kind\":\"preview_commit_sha\",\"id\":\"fa923056cf28669f656da008a07f951c1dbef5bf\",\"commit_sha\":\"fa923056cf28669f656da008a07f951c1dbef5bf\",\"context_token\":\"v1.eyJwcm9qZWN0X2lkIjoibG92cF80MDFjZDU0Y2s1OTl3ODhybndiMTlycW5uZyIsImFydGlmYWN0X2tpbmQiOiJwcmV2aWV3X2NvbW1pdF9zaGEiLCJhcnRpZmFjdF9pZCI6ImZhOTIzMDU2Y2YyODY2OWY2NTZkYTAwOGEwN2Y5NTFjMWRiZWY1YmYiLCJjb21taXRfc2hhIjoiZmE5MjMwNTZjZjI4NjY5ZjY1NmRhMDA4YTA3Zjk1MWMxZGJlZjViZiIsImV4cCI6MTc5NDQ5ODExN30.t232ZZ1qw16RWGKLsjfGKrr8aIpFLzqNJVs7nEGHriU\"},\"events\":[{\"event_id\":\"8f1a2144-7eb3-4ec1-8242-569fde8e2b5d\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T15:41:57.478Z\",\"session_id\":\"74901cda-e636-41a3-adf4-6e98b3458d16\",\"page_view_id\":\"bc55eb97-1d34-4376-91e4-41147cfa0f33\",\"trace_id\":\"572a0697ccb802d16477cb540f0649f6\",\"span_id\":\"c34d6912e70922d8\",\"parent_span_id\":\"63e067f3dfa8fa51\",\"properties\":{\"url_path\":\"/\",\"metric\":\"TTFB\",\"value\":363,\"unit\":\"millisecond\",\"delta\":363,\"rating\":\"good\",\"id\":\"0e41dfae-b9c7-4001-830a-0d78f8c4cff9\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"e52962c2-c67b-4c6b-9338-988d5565ba86\",\"event_name\":\"lovable.session_started\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T15:41:57.478Z\",\"session_id\":\"74901cda-e636-41a3-adf4-6e98b3458d16\",\"page_view_id\":\"bc55eb97-1d34-4376-91e4-41147cfa0f33\",\"trace_id\":\"572a0697ccb802d16477cb540f0649f6\",\"span_id\":\"cda76e7cfd4c1d2f\",\"parent_span_id\":\"63e067f3dfa8fa51\",\"properties\":{\"reason\":\"new_session\"}},{\"event_id\":\"86e5aacd-3360-422e-86c4-ee6155df0608\",\"event_name\":\"lovable.page_viewed\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T15:41:57.479Z\",\"session_id\":\"74901cda-e636-41a3-adf4-6e98b3458d16\",\"page_view_id\":\"bc55eb97-1d34-4376-91e4-41147cfa0f33\",\"trace_id\":\"572a0697ccb802d16477cb540f0649f6\",\"span_id\":\"63e067f3dfa8fa51\",\"properties\":{\"url_path\":\"/\",\"navigation_type\":\"initial_load\"}},{\"event_id\":\"3fea87b1-109a-461f-88d7-decdd56529d5\",\"event_name\":\"lovable.web_vital\",\"event_schema_version\":1,\"event_time\":\"2026-10-13T15:41:57.521Z\",\"session_id\":\"74901cda-e636-41a3-adf4-6e98b3458d16\",\"page_view_id\":\"bc55eb97-1d34-4376-91e4-41147cfa0f33\",\"trace_id\":\"572a0697ccb802d16477cb540f0649f6\",\"span_id\":\"8fc96706cef8ebb0\",\"parent_span_id\":\"63e067f3dfa8fa51\",\"properties\":{\"url_path\":\"/\",\"metric\":\"FCP\",\"value\":866,\"unit\":\"millisecond\",\"delta\":866,\"rating\":\"good\",\"id\":\"c518c037-fd7d-48d8-85a0-98a28b48b709\",\"navigation_type\":\"initial_load\"}}]}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 17\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49f7393de751a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":338,"mime_type":"application/json","magic":"JSON text data","md5":"1125b91815c32790c1b224791b9d70fc","sha1":"becba42c161d72b4b90cfae9c81fc971e6803870","sha256":"11a49f853eb8befe94fef278d487125cd20930b9e41c4c0934394443e7f00878","sha512":"84bd85e5b348d7d910df3525a8d57ec6da3c8afaae5248e5c4bb81644e56c6c4d052046c4be3c069d9d234b52e24a02dc829cd17a179d3f9fc2a76c735c0e46d","ssdeep":"","tlshash":"e56000022a0008a08080008002002ba28000203000203088c00a200000a28000008002","first_seen":"2025-07-06T07:47:53.239897Z","last_seen":"2026-10-13T19:06:37.694492Z","times_seen":4380,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-13T15:41:56.670Z","timestamp":1791906116670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, must-revalidate, max-age=0\r\nset-cookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH; HttpOnly; SameSite=None; Secure; Path=/; Domain=trumpaccountsusd1.fun; Expires=Tue, 13 Oct 2026 16:11:57 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49f738dbb771a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH","quoted":false,"path":"/","domain":"trumpaccountsusd1.fun","expires":"2026-10-13T16:11:57Z","raw_expires":"Tue, 13 Oct 2026 16:11:57 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"__cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH; HttpOnly; SameSite=None; Secure; Path=/; Domain=trumpaccountsusd1.fun; Expires=Tue, 13 Oct 2026 16:11:57 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2631,"size_decoded":1867,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (658)","md5":"29128eca3d3b753281c3680048e0a384","sha1":"95ceb12a506cdf5340d8ebf2eecb41c1cc59c984","sha256":"7b071053cf89b7078b45770f95c10dfde9705b1991d1a7daf775c7498aa9de62","sha512":"165e9611af50ada99e664492f45a415a054019e219f82e61ecd4d521f21db5b4b0fdee28cf10d78453a28a4387e020c13d7b2b9196e8c53479528741833b737d","ssdeep":"","tlshash":"7a5196e2a808dd1a22758b107ceaf7094236f003a2549b5674ed717d0ec4fe785f7766","first_seen":"2026-10-13T15:42:36.765506Z","last_seen":"2026-10-13T15:42:36.765506Z","times_seen":1,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":0,"dns":65,"connect":1,"send":0,"wait":364,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/assets/index-1nu4p90O.css","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.295Z","timestamp":1791906117295,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET /assets/index-1nu4p90O.css HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"263a878b0fb1e901eb95d193f80f3daf\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49f73911da71a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":59706,"size_decoded":11064,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59705)","md5":"263a878b0fb1e901eb95d193f80f3daf","sha1":"59bcdd66591666f01bc06194a14deaf380c5c97e","sha256":"7f7063232b25c40c62248d91977f0f2ebbb425ef1daa6a2a8036e31661bad50e","sha512":"4bc60e36b26f97535774a3d186860c17c1e0952885b94fd6acd134eee42d87c4598d9c90393f3a6a4e96c2092e29d4dce7f3e6f3db6bc35706e38e30b684c85c","ssdeep":"768:Qh9qpYBkaYM6fUQZNYrd2YaG/VV1U378VQZkt5Fy/GTW7zsW:Qh9wYBkzUhaG/V0378VQZkt5FyCW7L","tlshash":"ea43a61ab919a13e3c2790e8c3ccb9ec911af0c0dd3b05b9be9a41216ad37f55db7518","first_seen":"2026-10-13T15:42:36.769915Z","last_seen":"2026-10-13T15:43:23.816014Z","times_seen":2,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/~flock.js","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.296Z","timestamp":1791906117296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET /~flock.js HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: max-age=1500\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49f73911db11a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21296,"size_decoded":8697,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21296), with no line terminators","md5":"ed557a78d5301fbb961abfe911a42b62","sha1":"d11a2a4e9fee28c4b1abc38cd8136bffec7e325b","sha256":"a86e084b4f82709814be6c15fd6305daa783fda87ad95402da9a4d3a1dd6d748","sha512":"18dd1525e2b4d89e3c46d92367fca020cf99fb07856acfd96a25dc7410611eea83b438c91691683983495945eb04a9427bc63e2a383cbe93449f4df0eb1ddb51","ssdeep":"384:FtUCBXTpeaFEo5TTThri1t/mCsOCXiTNZruJ4vKFlcEhRCDxOcX/YM2Vybyq/kmt:n7XTpeauI/Thri1CKWM4ldRzurwkTO0D","tlshash":"cea2b6d61007243d57ead1a13929f7d63177ea98a0caec8a7de91f84d414c83f3f294a","first_seen":"2025-07-30T15:25:28.733337Z","last_seen":"2026-10-13T18:50:26.426344Z","times_seen":18674,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/__l5e/events.33a4189afb1076e3.js","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.298Z","timestamp":1791906117298,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET /__l5e/events.33a4189afb1076e3.js HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: public, max-age=31536000, immutable\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a49f73911dc01a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25268,"size_decoded":10639,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25268), with no line terminators","md5":"cb23a3aa09e630d589cfe162a2b9caf6","sha1":"22ffabf4f3e5177827ebb1b6f41e4f2269be7150","sha256":"90022cf49a0bbdedf3fea505ad945985b373d96793a906f6d01dbaa697dd3a21","sha512":"9225e64bfbba174b75482cf8bb718fab385680f851bb06bbe3332ef328e519c9458aff709bc286e0526562707cd75b8302a497e1d075a99f4d56f62cad2fa5cc","ssdeep":"768:VkDE0BoKrVMS07miDBb3EZkt1xczQOHoTZtbH8GyfxlTW5ZgJhN6FE2MDEqBVQeb:zyY1b3W1Kq/3xFVmmR2Mv139","tlshash":"fdb219d171c5b03797f28ae920554007b17caea3348d81e0e5ec8d3a4997a52e0bbf5e","first_seen":"2026-10-11T15:16:50.144391Z","last_seen":"2026-10-13T18:51:21.775206Z","times_seen":226,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/assets/contributors-Cxf1pOie.jpg","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.497Z","timestamp":1791906117497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"GET /assets/contributors-Cxf1pOie.jpg HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2249155\r\ncache-control: public, max-age=31536000, immutable\r\netag: \"2cb9bb88535ebbf10da6380115097b40\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49f739259f31a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2249155,"size_decoded":2249569,"mime_type":"image/jpeg","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"09ec2ce47cffa5befc0e8807281fe6c4","sha1":"edb1830e50af64921f62272c3b7e4a14c1e5fc2b","sha256":"8c2aac3a3d6d42c953d7a89391f9c8d3e1d8590a17f92218da071237fba1ac13","sha512":"72da7a39736948ed3188ed46ccf1da279654d1c79eba747f5bf1a6e2d45630ff515c55543fb09df0d0ffdb11d8fd0b78b9e00147d45824476f38ed2848da4f9f","ssdeep":"24576:0RlybX5XNsKuRrD/D9sgSpud9F3zEXvyFkvCs4rvCCbTXlTlD5tN:0RMbXFeKuRnOhp8bFKCt31R9","tlshash":"1f2533747ef21863e3a34cf3a14a1fa8e8674793570564d990e880457d99c93b7f8bc8","first_seen":"2026-10-13T15:42:36.774946Z","last_seen":"2026-10-13T15:43:23.818802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpaccountsusd1.fun/~api/analytics","fqdn":"trumpaccountsusd1.fun","domain":"trumpaccountsusd1.fun","tld":"fun"},"ip":{"addr":"185.158.133.1","port":443,"asn":13213,"as":"UK-2 Limited","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trumpaccountsusd1.fun/","date":"2026-10-13T15:41:57.786Z","timestamp":1791906117786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpaccountsusd1.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 21 Sep 2026 18:09:43 GMT","end":"Sun, 20 Dec 2026 19:09:37 GMT"},"fingerprint":{"sha1":"6D:23:E2:06:AB:0D:BD:28:72:37:C3:1E:9C:BA:93:D6:DE:26:EB:4A","sha256":"B7:FA:D1:DC:D5:C3:ED:93:57:8F:98:1A:7C:F1:19:39:B9:AD:17:D1:28:E3:D3:AF:F8:DE:5F:9A:20:51:0C:9A"}}},"request":{"raw":"POST /~api/analytics HTTP/1.1\r\nHost: trumpaccountsusd1.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpaccountsusd1.fun/\r\nContent-Type: application/json\r\nContent-Length: 342\r\nOrigin: https://trumpaccountsusd1.fun\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH; session-id=b3810db5-01ba-4428-a7c5-282729a0c8b6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"__cf_bm","value":"aIOGVmq78Rp9yYiIqqrGo9WNxZD441Eha1fG4HvmCxw-1791906116.7548394-1.0.1.1-B6lxuktKpv0SUiYUZFKaJy4OJr7QuanZmu2dXzX_bPkRmv9aIRIABQ.ZYB1.1xLZacMBH66Ka_1wvZcqm28iyaPEn6wxrAcqLThC268vDR6cmXDV4erKxQ1vxGR24KHH"},{"name":"session-id","value":"b3810db5-01ba-4428-a7c5-282729a0c8b6"}],"method":"POST","post_data":{"size":342,"data":"{\"timestamp\":\"2026-10-13T15:41:57.784Z\",\"action\":\"page_hit\",\"version\":\"1\",\"session_id\":\"b3810db5-01ba-4428-a7c5-282729a0c8b6\",\"payload\":\"{\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\\\",\\\"locale\\\":\\\"en-US\\\",\\\"referrer\\\":\\\"\\\",\\\"pathname\\\":\\\"/\\\",\\\"href\\\":\\\"https://trumpaccountsusd1.fun/\\\"}\"}"}},"response":{"raw":"HTTP/2 202 \r\ndate: Tue, 13 Oct 2026 15:41:57 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-length: 8\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: a49f73942f911a30-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8,"size_decoded":337,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"382ab522931673c11e398ead1b7b1678","sha1":"61a0572c4893ef34311320d84c82df88bea83e11","sha256":"a00fb0c50741f81bb51d35b4475a4357f8039aabd896a21036bc516839401595","sha512":"685c859b43ec0b2f873fb61ff4c48b3748ede3e31bdda719b69b528546f7a1d528216146db9626d1a411dccdd13f3fd155f3d62d3e2ec8090c71f6710ee60641","ssdeep":"","tlshash":"455000003c0000c0000000c000000000c0000000000000c0c000000000c0c000000000","first_seen":"2023-04-11T14:35:59Z","last_seen":"2026-10-13T18:51:21.830418Z","times_seen":8490,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-13","alert":"Sinkholed","trigger":"trumpaccountsusd1.fun","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}