{"report_id":"104526cc-e61e-4df8-92dd-5b3ebc1ece3b","version":0,"status":"done","tags":[],"date":"2026-10-11T00:32:56Z","url":{"schema":"http","addr":"belt2008.com/","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":0,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"final":{"url":{"schema":"https","addr":"belt2008.com/index.php/ka/","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"title":"ლენტები და ღვედები - მთავარი Belt2008.com","dom":{"size":21581,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6083)","md5":"f8940b4ea5af79ff1e653bb85326b58e","sha1":"14cf3a628e2275d606f5433ab19a0ce66f0512c3","sha256":"08361609be524eb2969a98a044f1be6caff27336b3b9914e82fe23ceff44dfa8","sha512":"bcaaf873b681484c9a502ba1158c57cb9e5db98de1f139f400f60cc9c0a5d5cd0162eec096a044169eaec1deff1e563ac2a6a242919687ec82f0c358f1e15d26","ssdeep":"192:JLy7T0N7T0cu7T0rt7TmIHqawpuReC7Ni0eC7s2KBJ7fMmNJ7/EnNVpJYiz7H2rF:JLtacBrTHRwcRLKBLNJmDM2z5VcbGtS","tlshash":"5fa2301398da4f3b093688d195733b4d75e28c4ed184787c72ae936bbbc9e801e6e604","dom_hash":"domhash61611847ec3c029db26a7db0c2a84e7d","first_seen":"2026-08-07T01:57:06.191574Z","last_seen":"2026-10-11T00:33:14.302281Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"belt2008.com/","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":0,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-15T00:32:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"belt2008.com","ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"domain_registered":"2018-10-24","domain_rank":0,"first_seen":"2026-08-07T01:57:02.274394Z","last_seen":"2026-08-07T01:57:02.274394Z","alert_count":82,"request_count":41,"received_data":2447757,"sent_data":25483,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95957,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-10-11T06:51:56.446551Z","times_seen":19355,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery-noconflict.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2060c4e5e5955c824723b13a212d3ec","sha1":"18420ce484978f8ba3d7371febf1638828bb7a67","sha256":"5b6cf4e6eda02f7c90b60b3c32413c0851915f8f80a268a913b92929085132a6","sha512":"dcc2117e42859d51017047b468a99f65d74d45ac2e86ae1cc5605e39041ff2164e562756d93a89fa1f71cbd331f958b351c5afe952a47a560120e080d63bd623","ssdeep":"","tlshash":"34700008380080280230200e80300308a002038e2020c080000c0800000828c2a02028","size":21,"data":"","first_seen":"2023-03-07T01:03:40Z","last_seen":"2026-10-11T07:03:14.985974Z","times_seen":12823,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery-migrate.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","size":7199,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-10-11T06:41:40.197368Z","times_seen":26292,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/system/js/caption.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"27e0e11b572de3bc44be960d25d65570","sha1":"9c431113357e1a7147388978bde9b70a3ff6114a","sha256":"20f7c83ab9dfdc1e88f4c3fafc0712492200ab738fb30660526bad9dcb7282dc","sha512":"d6d9add504073be4d6fbafad3ecf0f5c54561d0a2a1496759709cdb353607b4e8f08ad6e885fd6b8872592cd3558c70269d2ded710b02bcde9a5ba4e51d14ef2","ssdeep":"","tlshash":"c8f09e8422b6523390737d55189f109e60b606bb63c6490d762b44da4a78d091862a6c","size":491,"data":"","first_seen":"2023-03-07T01:03:40Z","last_seen":"2026-10-11T07:35:26.757755Z","times_seen":5645,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/bootstrap.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"94935933a620fef61d4b0c15c664f8b3","sha1":"e879415d9cdda4ae99767995f49560440025ad74","sha256":"6ebe64de8e1c2f92400a03a97250c8b2f7443025d53fa42df90cb0589350c233","sha512":"cc5abf82a7160881fa8efa8c31af480ab65fa72d5826de66946d1cc9b28845c1146c19f0549459fc8be67acde4dfa6a94f173f26bbb654e2721fd7f619d11035","ssdeep":"768:s7S57QFwktDm0INVIPWr8gJBQcqYn0SUs8q:p0OfNs+0WT","tlshash":"a9d29549b1a171a103ebb2b1501b160a72367f38a54b822c393989f67e78d5cb137f7d","size":29156,"data":"","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-10-11T07:03:15.008609Z","times_seen":1451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery.ui.core.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"9356f6f9ce5aa7dd0e8a31c305839d06","sha1":"7aa54ceb8525d86cfc22177156d16f3bf2853ee5","sha256":"4d1feda979ec3b8a0952f18e6346cd4b51ef5bea614f328216b3bae504573bf3","sha512":"6ee48af88b8a47e9bc0b389ccfd42e54688781594d965bd7a494c00b1e2c72ad9b989082246e7f14f44f27b43ac1bc6a1eeeeba056ce862839f6be8c296d6fd1","ssdeep":"384:j0UydSQ1yJTlvPz6Dn5QPO0JHanOpvv0/eZkr9Tf8jc4H:C0JRLInw7pvv0/jh8jcO","tlshash":"a692d689b352b857c6ebb320107f9707b232a4e9864a881cf478e8e87d769545077f7c","size":21214,"data":"","first_seen":"2023-03-07T17:07:54Z","last_seen":"2026-10-11T07:03:15.069706Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/modules/mod_accordeonck/assets/mod_accordeonck.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c17aa4cdbc6a44614578b7b9dc9acbf","sha1":"fa59f5adb88048b4898bb61a9cdc7a562aba096c","sha256":"39ee233353cf30fda399c0cb574b9703de40ce1e2c028d3ede1b417585fb5a84","sha512":"c676ee741ba219799aab6be3100713511fb854223bbc0e238cc0e9f10643718b4ab697105102cbdb47273e5b64800aa1d1a739c10d2bfb28bda0388fe47d6e01","ssdeep":"","tlshash":"af614189fb9cb92305637b7854af08ed787d1077c605343ffd990286648d23912e5b6a","size":3313,"data":"","first_seen":"2023-03-12T17:50:05Z","last_seen":"2026-10-11T00:33:14.35845Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/modules/mod_accordeonck/assets/jquery.easing.1.3.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":false,"md5":"6516449ed5089677ed3d7e2f11fc8942","sha1":"82e40d060bc269a6dde20c3990ca5a4fea6ca754","sha256":"0757f7ff6e5f6a581922a5e2d42c5e0cf7475d880885a9802e8bdd5e4188dd34","sha512":"6ebae34e9f46e8c90a5f94235f0c00424b1c7c5a4a8b7a248f267f337bc6c3083da88d66b28cfbcfe11b4012d7b139d52b73ce8d80461dc42f5f7e0614aaffec","ssdeep":"192:pl+Or8ur83V33R3hqRAsfAy4MOr8ur83V33R3hqo:zZr8ur83VHBhm+r8ur83VHBhL","tlshash":"a2f1038963c0631b4359f270aa3e5e4ff268642b566e681fcc5c5084bf7d339c27ad68","size":8097,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-11T07:14:00.647952Z","times_seen":20503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/index.php/ka/","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":true,"md5":"045dda085bbfd451ab795352f310f5c5","sha1":"a77e849c27c5e7794c23f1e3cd4b7915bafb4862","sha256":"1858d4a52708c8122ef6553bd3dd047daa8baa481ce3fe226dc960340a88db9d","sha512":"275298b297f3e6a2fb0501496c5889f316f04f703c4b3cc1a471a3d6729a379d9b2fe6d53dd518c8b7630c68c980e1e81d20bea24518fb04f44787fadaeb95d8","ssdeep":"","tlshash":"e7f0e1ef4d3d80534cb65554f2f7532c383a7d953505b01cb16d5d91978e1b00282716","size":565,"data":"","first_seen":"2026-08-07T01:57:06.230551Z","last_seen":"2026-10-11T00:33:14.374826Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/index.php/ka/","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"introduction_type":"scriptElement","is_inline":true,"md5":"5028121ce22de33264faff13250b9136","sha1":"00636c7386473f2749ea0ec4676301369b452105","sha256":"3044de238eb7f8666dc3e7014e213bc5ce4f932fbcf8b6262cd32c99cb2eb6fd","sha512":"7291ee2422edc762a144376771ac9e452ade595559ac00721987f26ef29eb4a585e17dbed343701b0917bb095cfa9b01e8758594a0e7b47347132f749511afdf","ssdeep":"","tlshash":"34c08caff4001e3108eb3aea29a2834c7470c008ef0b310008680cb085f0de61c7aca4","size":162,"data":"","first_seen":"2026-08-07T01:57:06.231528Z","last_seen":"2026-10-11T00:33:14.375933Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"belt2008.com/media/system/js/caption.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.703Z","timestamp":1791678330703,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/system/js/caption.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:30 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:41:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 491\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":491,"size_decoded":709,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (413)","md5":"27e0e11b572de3bc44be960d25d65570","sha1":"9c431113357e1a7147388978bde9b70a3ff6114a","sha256":"20f7c83ab9dfdc1e88f4c3fafc0712492200ab738fb30660526bad9dcb7282dc","sha512":"d6d9add504073be4d6fbafad3ecf0f5c54561d0a2a1496759709cdb353607b4e8f08ad6e885fd6b8872592cd3558c70269d2ded710b02bcde9a5ba4e51d14ef2","ssdeep":"","tlshash":"c8f09e8422b6523390737d55189f109e60b606bb63c6490d762b44da4a78d091862a6c","first_seen":"2023-03-07T01:03:40Z","last_seen":"2026-10-11T07:35:26.757755Z","times_seen":5645,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":87,"send":0,"wait":87,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p3.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.747Z","timestamp":1791678330747,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p3.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 18:13:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 178949\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":178949,"size_decoded":179157,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"37342a8e642e8510f4e698a23d149646","sha1":"9894257cffe22da32d8ef265025736a209e4a06b","sha256":"66120e989c2634a47a461252cdafeada801617c40ce150e814ceca5765959dd9","sha512":"425276cd00bb63afb1a20f2ea90e50da0a6959c3923af8547525b6483b19cc6ab7aee012318fcd822f9ace2ebc8e2fcb723bacc323ff0fe869c45ddbe0bda60d","ssdeep":"3072:8DnRjp/v0b6Y1EAsuxN+7HYik4hgjnCcx1arwSCTTCBGmPZeiNOlMHtQD:8zX/v8/eAuHU9CczKfgTq4iNOlMHSD","tlshash":"b90412ab257f91d29f3fe1ba34c7e8657c1272019948ac913792343943abec5b326391","first_seen":"2026-08-07T01:57:06.227471Z","last_seen":"2026-10-11T00:33:14.305285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1285,"timings":{"blocked":735,"dns":0,"connect":91,"send":0,"wait":91,"receive":271,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p7.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.752Z","timestamp":1791678330752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p7.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 18:20:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 188659\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":188659,"size_decoded":188867,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"fa2d100700f5e0d71195f9eb77289db4","sha1":"ba5180bfa5e11273ac7780cec5bb1355ff9d0c9d","sha256":"e1feca99c35e4e84c1c5a24c7f3a170e0fdf291a98ab902cf9288b03c63a6ca8","sha512":"d756e35a97c0732f88113d252caaea114cd9c3fa0aadf771064483ce7a1d8d2e69385a7b1899cd7bf34be7deca1eb17312323c14127a1fa4ee4fb004a40b8714","ssdeep":"3072:2DnRjp/v0b6YAgjWmTlehep908iMgQmLg6itGwi0emOm6mmlYJ1u4UhTgQyRftiH:2zX/v8/AgK8Ih60SgbU6j0eE6mWo1u4c","tlshash":"380412cb059d0d272bebf1d80966d222f1c074841ea1b85b7b46ea09c1ea915ae35edc","first_seen":"2026-08-07T01:57:06.210207Z","last_seen":"2026-10-11T00:33:14.306798Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2270,"timings":{"blocked":1635,"dns":0,"connect":90,"send":0,"wait":91,"receive":359,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p8.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.754Z","timestamp":1791678330754,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p8.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 18:20:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 193570\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":193570,"size_decoded":193778,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"e1db9623fabfe659f7e9bc98ab434f92","sha1":"40201c73d83b59c498f9669a2f08e0cdd90858cc","sha256":"ee01ed81c0ac539d1c241db8069b7ea0079696b887694997ae3b396f34a98b86","sha512":"c7adc03854e3eb115c1f7357b85a41b00d7b038c2e22bfee9dd665ea8b6d4d9a16cc399f9daf046532940030bcbddb9e99bc259eb94bbeddcac275d8c277df6e","ssdeep":"3072:PmwBzLWd/YxpvGroTFrBN1tNYIjpR+bxbsG/uDCL5iCyZHZbQNX:PmwBzLWdGXFvtNYIH+baBDCLUONX","tlshash":"80142346296b66809e78b877235e7eb5ede0a56831ca4d01dffedec0436920ccf0d661","first_seen":"2026-08-07T01:57:06.195015Z","last_seen":"2026-10-11T00:33:14.308147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2677,"timings":{"blocked":2009,"dns":0,"connect":88,"send":0,"wait":87,"receive":399,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p9.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.756Z","timestamp":1791678330756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p9.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 18:20:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 189008\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":189008,"size_decoded":189216,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"148487a50f7cca382f53beae659cc026","sha1":"90ac0112a7ea045628698ec24a19fa909bf42d6f","sha256":"77de8d3d0ba3a9cb85c8061bd9c804df7ab909964b98e87617c215e094cca898","sha512":"19063685e5453edf72e9813b83fd35b33e36e69d0c594eaa85fd9181d1b2973d9dbb39b59a18a4995acdfdc8201b4d4e6edffde711a341bccf2aaf58cf70c489","ssdeep":"3072:u87bFxZDc8JwT2g7pBS4dU6NKWey1qb9Zbi6DUQIEt0dzXzDZYlxAhVAzEtuZ/8+:r7JnDRJK2g7pBS6Fj0/GVlW3AhVAcuZH","tlshash":"910423e36430b945142b1b433c3e9613ac9b34ebd2effb1e17668129b778a34115e5b8","first_seen":"2026-08-07T01:57:06.206196Z","last_seen":"2026-10-11T00:33:14.309566Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2496,"timings":{"blocked":1873,"dns":0,"connect":87,"send":0,"wait":88,"receive":355,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/mod_falang/css/template.css","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.694Z","timestamp":1791678330694,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/mod_falang/css/template.css HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:30 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 11:35:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1200\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1200,"size_decoded":1405,"mime_type":"text/css","magic":"ASCII text","md5":"4761338edf1d725d75eff366d2b36309","sha1":"efd392de6c98dcd1025945fd915a9254293ac6ad","sha256":"f7f618d5ae8996986b7e232bc69c5744da6d003a79b3359c0dd81cbff79f21fa","sha512":"512275fa96effa3f051c1edac9d11be7880e3f16551196de3c2778e1c2b087b1ba2e904f4899b23fa190b0ded61336424434d0b3a46479200beec0b1dd14e5d4","ssdeep":"","tlshash":"7821f468b2221c90211bf0cb7de57aa7398f4205df1dcc67d6b1241fd38564814f382c","first_seen":"2026-08-07T01:57:06.201075Z","last_seen":"2026-10-11T00:33:14.310977Z","times_seen":2,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":86,"send":0,"wait":87,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/mod_falang/images/az.gif","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.736Z","timestamp":1791678330736,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/mod_falang/images/az.gif HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 18:10:15 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1465\r\nConnection: close\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1465,"size_decoded":1671,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 23","md5":"44d9ad4fc92c75e39f0c3cecf069a49e","sha1":"28c3d8459b34aa0f454f6cb3715384dc67b7b9b4","sha256":"35ea9dc56eb605983d882070ef995bc32ad50d535ad1e71d48aee5fed41155f5","sha512":"53745778a300cc881676ce8e5c876bfde46884ce350e1c06c163b235760ce827fc542b7bb64daf7a0213a47966937ffac39d4e7bb0444805fdfefecf37535ba1","ssdeep":"","tlshash":"7d31f70bf895fc820588b0823aba981bb55228c08bd0f47ba08fc41e5631073981a7c3","first_seen":"2026-08-07T01:57:06.198102Z","last_seen":"2026-10-11T00:33:14.315692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2009,"timings":{"blocked":1733,"dns":0,"connect":90,"send":0,"wait":90,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/css/style-l.css","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.509Z","timestamp":1791678331509,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/css/style-l.css HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 04 Sep 2020 19:00:05 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 34808\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34808,"size_decoded":35014,"mime_type":"text/css","magic":"ASCII text, with very long lines (360), with CRLF line terminators","md5":"b7aeaa6461e586e589755dec6bf5c49b","sha1":"c1e0b85d0d2eb255c7642a6522302bfa68619668","sha256":"ec48a02b86259c0608ed7158c7f2dc07584b880e6eba2b04e67fd9928498f3d7","sha512":"66fa0d73316dcc7addeab443a8373a0aa226e21d31dd3ed1bf5bc6f4672a775f47a0ee3a749a47633254bc4eb07db502f299932c5905cf9fed854ff08f81a4d7","ssdeep":"384:xI5fjRV1PzNyXhPM/bS4z8ZtfEqG6Y+aNAlAyyPakSADIhlLYtqPMx3WfsFaroR3:i1PhyX7yjSIAY","tlshash":"eaf28712875e7209e03bcd92f2e3e7ddaeac8057d93219bc7ad91e19c54d0aa177231c","first_seen":"2026-08-07T01:57:06.199046Z","last_seen":"2026-10-11T00:33:14.316867Z","times_seen":2,"resource_available":true,"data":null}},"time_used":959,"timings":{"blocked":599,"dns":0,"connect":89,"send":0,"wait":88,"receive":89,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/traveltogeorgia/favicon.ico","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:33.776Z","timestamp":1791678333776,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/traveltogeorgia/favicon.ico HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 11 Oct 2026 00:25:34 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":519,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-10-11T06:11:10.177221Z","times_seen":65898,"resource_available":true,"data":null}},"time_used":682,"timings":{"blocked":0,"dns":0,"connect":89,"send":0,"wait":499,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.697Z","timestamp":1791678330697,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/jui/js/jquery.min.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:30 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:41:17 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 95957\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":95957,"size_decoded":96177,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-10-11T06:51:56.446551Z","times_seen":19355,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":86,"send":0,"wait":87,"receive":257,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery.ui.core.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.705Z","timestamp":1791678330705,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/jui/js/jquery.ui.core.min.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:41:17 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 21214\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21214,"size_decoded":21434,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20988)","md5":"9356f6f9ce5aa7dd0e8a31c305839d06","sha1":"7aa54ceb8525d86cfc22177156d16f3bf2853ee5","sha256":"4d1feda979ec3b8a0952f18e6346cd4b51ef5bea614f328216b3bae504573bf3","sha512":"6ee48af88b8a47e9bc0b389ccfd42e54688781594d965bd7a494c00b1e2c72ad9b989082246e7f14f44f27b43ac1bc6a1eeeeba056ce862839f6be8c296d6fd1","ssdeep":"384:j0UydSQ1yJTlvPz6Dn5QPO0JHanOpvv0/eZkr9Tf8jc4H:C0JRLInw7pvv0/jh8jcO","tlshash":"a692d689b352b857c6ebb320107f9707b232a4e9864a881cf478e8e87d769545077f7c","first_seen":"2023-03-07T17:07:54Z","last_seen":"2026-10-11T07:03:15.069706Z","times_seen":387,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":232,"dns":0,"connect":87,"send":0,"wait":87,"receive":88,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/bootstrap.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.713Z","timestamp":1791678330713,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/jui/js/bootstrap.min.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:41:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 29156\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":29156,"size_decoded":29376,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29002)","md5":"94935933a620fef61d4b0c15c664f8b3","sha1":"e879415d9cdda4ae99767995f49560440025ad74","sha256":"6ebe64de8e1c2f92400a03a97250c8b2f7443025d53fa42df90cb0589350c233","sha512":"cc5abf82a7160881fa8efa8c31af480ab65fa72d5826de66946d1cc9b28845c1146c19f0549459fc8be67acde4dfa6a94f173f26bbb654e2721fd7f619d11035","ssdeep":"768:s7S57QFwktDm0INVIPWr8gJBQcqYn0SUs8q:p0OfNs+0WT","tlshash":"a9d29549b1a171a103ebb2b1501b160a72367f38a54b822c393989f67e78d5cb137f7d","first_seen":"2023-03-07T01:11:43Z","last_seen":"2026-10-11T07:03:15.008609Z","times_seen":1451,"resource_available":true,"data":null}},"time_used":605,"timings":{"blocked":247,"dns":0,"connect":86,"send":0,"wait":87,"receive":88,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/css/style-d.css","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.714Z","timestamp":1791678330714,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/css/style-d.css HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 04 Sep 2020 18:46:29 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 34534\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34534,"size_decoded":34740,"mime_type":"text/css","magic":"ASCII text, with very long lines (360)","md5":"1fd2c82b6a7144ce892f739e98ae8f16","sha1":"ed0aeff6f3937ba5458ed2dc949323c64a8d1ba9","sha256":"65e8e409e8d674a6dcbef8ca18b71ebc1f9aed28519bb6c52b615fb05e6f8b39","sha512":"f1acb3ba1a3d97277349aa7b5e2d3b4f2ddc9936b65e5a8925accf55218a864ab6bb4a4394991b2fccdc01d3214e7dfe7b3c7a689157e226f100da92097e285e","ssdeep":"384:6ps+iEPufBYKAnx4FyGUEf+P7RzvNAlACce9Ig9bcSeSQAwKN4ruRsbr6lM/GxI2:5f8cce91pBaTO9f","tlshash":"a8f29812c75d3209f03bcca2f2d3b7ad6aa88157d8224dbc6bd91e69c54d0a9137336d","first_seen":"2026-08-07T01:57:06.221421Z","last_seen":"2026-10-11T00:33:14.32149Z","times_seen":2,"resource_available":true,"data":null}},"time_used":707,"timings":{"blocked":343,"dns":0,"connect":89,"send":0,"wait":91,"receive":90,"ssl":94},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/css/icons.css","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.716Z","timestamp":1791678330716,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/css/icons.css HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 24 May 2020 22:42:26 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3121\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3121,"size_decoded":3326,"mime_type":"text/css","magic":"ASCII text, with CR line terminators","md5":"8c515ce6a993c486b241c9d10beee44e","sha1":"3f12dc078f1b2c13c5e9ae081701a28700529b30","sha256":"5b76a1ffc56e77021d846c437cedc591bc9344539a998e3e645f82a784bdcc10","sha512":"d260146698ad814acedbed8f0638684c2984bfcb94351a94e094acb36d365962a04e7e65b9909b5f40da36f7b52d099150fac4c3e8effbb8cfc2ea3bcced65b2","ssdeep":"","tlshash":"e251e4249239925163239e4ca3837739bf3d8127fd00265a52176e1996f735c13b376f","first_seen":"2026-08-07T01:57:06.229655Z","last_seen":"2026-10-11T00:33:14.322696Z","times_seen":2,"resource_available":true,"data":null}},"time_used":760,"timings":{"blocked":487,"dns":0,"connect":89,"send":0,"wait":89,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/belt_logo.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.732Z","timestamp":1791678330732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/belt_logo.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:33 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 31 Dec 2020 16:56:37 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 36295\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36295,"size_decoded":36502,"mime_type":"image/png","magic":"PNG image data, 240 x 155, 8-bit/color RGBA, non-interlaced","md5":"72242670de73ee37a096d288a54ba77f","sha1":"1b8e4822ba1df93313337dcf7c84356b304df6c0","sha256":"d6afbe0b0da7ff59351ede5f2ceed1d91870bec86c49782869347301aa41487b","sha512":"20a15156b8ae85e5f3437d2a0219c46947d028769850a24703186ca1d46f7bd00d11e21335e321059fd02dc757d9196d9ea8500079bd376b13eb422e9df56f85","ssdeep":"768:cEnI/j6+jw2FUffiME67xaN2Nk3o/jlRz0sBoPc/zN/4KSsI/Q5WuqeracI4Lta:cOI/WKYD7xaN0k3wj/nBpzNQKSNbuqeO","tlshash":"ebf2e26879c019f0148a4f01ecec94e6fd27504186f66cc6af48ed69c3fd568d9160eb","first_seen":"2026-08-07T01:57:06.202621Z","last_seen":"2026-10-11T00:33:14.324686Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2766,"timings":{"blocked":2247,"dns":0,"connect":90,"send":0,"wait":154,"receive":179,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/fb_mob.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.743Z","timestamp":1791678330743,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/fb_mob.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Sun, 21 Jun 2020 11:38:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 19455\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19455,"size_decoded":19662,"mime_type":"image/png","magic":"PNG image data, 120 x 22, 8-bit/color RGBA, non-interlaced","md5":"369672e080909b51081ecf4aa493981e","sha1":"5ed2335cd15242c1d140ae877eba1facb18180d2","sha256":"25747c4384488828b75532bbbf5680bfe20a8dffa248fc0ee1b3bc6b34421053","sha512":"f386528992ad204b3130a297507bb60892f545804819612b0ae4f95fca3da9899d9d86214957d25462323c198038223c952634dd0557acf5f573beebd6bad7b7","ssdeep":"192:z0S0k6J64GzzcAxDRvlgogTSV4faEZt3MIQu:PX6J64G8A5rV4SEZdJQu","tlshash":"16922960fdf13769199aa53239d511069d775bc3ef01ac04b9ce8dbe6f233a98c9b041","first_seen":"2026-08-07T01:57:06.20508Z","last_seen":"2026-10-11T00:33:14.32725Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1099,"timings":{"blocked":735,"dns":0,"connect":89,"send":0,"wait":89,"receive":89,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:25:28.365Z","timestamp":1791678328365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 303 See other\r\nDate: Sun, 11 Oct 2026 00:25:29 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/5.6.40\r\nSet-Cookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; path=/; HttpOnly\r\nLocation: https://belt2008.com/index.php/ka/\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=utf-8\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; path=/; HttpOnly"}],"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T07:43:34.782978Z","times_seen":19020931,"resource_available":true,"data":null}},"time_used":1388,"timings":{"blocked":-1,"dns":404,"connect":89,"send":0,"wait":323,"receive":15,"ssl":557},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/mod_falang/images/ka.gif","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.739Z","timestamp":1791678330739,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/mod_falang/images/ka.gif HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:33 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 18:10:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1527\r\nConnection: close\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1527,"size_decoded":1733,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 23","md5":"de7a5f53f39b13101b347105bc294be0","sha1":"41970ceb85e2818efc0319616735a39ac9c02242","sha256":"7dc55761f233d424e0cd5044cae6a8917814d34d58a5b85029444eb5dbb51f20","sha512":"ff9d4e8b0a618bf796b2aa931061cc719d9de9100f8fda5967310208ce0c3e00bbbeaa8fd3cc5851bf7de4d6081f1378299cf551552cf1242e03e960372b7468","ssdeep":"","tlshash":"f531b749b9aa7c01058cfcc5fdb77963aa124d40aceae06564cf84aa96350f3940e3f3","first_seen":"2026-08-07T01:57:06.222467Z","last_seen":"2026-10-11T00:33:14.330489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2789,"timings":{"blocked":2499,"dns":0,"connect":109,"send":0,"wait":89,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p2.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.746Z","timestamp":1791678330746,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p2.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 17:38:58 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 180411\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":180411,"size_decoded":180619,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"450b6ace2a88a76390a2cae312b23bf9","sha1":"9e076017f0afa88fabc6f59a12e709ecdac83c12","sha256":"35883f9d30fb31d73cb0be76d664d07ff51f13fc453423b2d0a61468da167990","sha512":"953e1c9a65c9b87f66312121415079e105076f747f4275105abcc5957fbc40cc10123ef94bbf7c779f89f8d8bd5bd25dde2c3f6132484ec3239a235a97b6815e","ssdeep":"3072:KDnRjp/v0b6YNIq9apU/gVZ8aL71Q9yp/UAyugKUTiNzaAJZLOfzJJw6tqyhdOD0:KzX/v8/NB+kE7fpcAoKUTkG4uzbw/yhN","tlshash":"ed04238561edf29a8bd822dd624ed960fa006344cb079621bf14351fe393d829b7f736","first_seen":"2026-08-07T01:57:06.193886Z","last_seen":"2026-10-11T00:33:14.33385Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2148,"timings":{"blocked":1553,"dns":0,"connect":92,"send":0,"wait":91,"receive":312,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/index.php/ka/","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-11T00:25:29.761Z","timestamp":1791678329761,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /index.php/ka/ HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:29 GMT\r\nServer: Apache\r\nX-Powered-By: PHP/5.6.40\r\nExpires: Mon, 1 Jan 2001 00:00:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nPragma: no-cache\r\nSet-Cookie: eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE; expires=Mon, 11-Oct-2027 00:25:30 GMT; Max-Age=31536000; path=/; secure\r\nLast-Modified: Sun, 11 Oct 2026 00:25:30 GMT\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=utf-8\r\n\r\n","headers":null,"cookies":[{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE","quoted":false,"path":"/","expires":"2027-10-11T00:25:30Z","raw_expires":"Mon, 11-Oct-2027 00:25:30 GMT","max_age":31536000,"secure":true,"http_only":false,"same_site":"","partitioned":false,"raw":"eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE; expires=Mon, 11-Oct-2027 00:25:30 GMT; Max-Age=31536000; path=/; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:5.6.40","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21825,"size_decoded":22317,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5819), with CRLF, CR, LF line terminators","md5":"3e21605e1936822f2131e9454dd11583","sha1":"bb90a465e681010a1ae89e7881cb60aaa0a2b972","sha256":"f5323b6092cbe18c7eee6712d82b86d4522c55548d850f073de8379e3d33ce75","sha512":"885c7c273d5f1481c04cb22d13a78dd7e27baa7e2ec5e992a2605b04b31898658478c572f41f234d35ad1a9adbbc58796a2694a3341ce5c220db3375cf72e353","ssdeep":"192:27Tl7T27Tut7TjHqIxFB6heC715XUheC71r9qx7fRKlZ5N8Ab+7/EntQl/jmLJZ1:cFHZxXgKqCNQ2vjsez5Rh6G+M","tlshash":"34a23f1388d98f3b183648e15173375db6e28c4ed185787d72ae636bbbc9e401e7b201","first_seen":"2026-08-07T01:57:06.215388Z","last_seen":"2026-10-11T00:33:14.336465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":89,"send":0,"wait":504,"receive":90,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery-migrate.min.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.701Z","timestamp":1791678330701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/jui/js/jquery-migrate.min.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:30 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:41:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7199\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7199,"size_decoded":7418,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7085)","md5":"eb05d8d73b5b13d8d84308a4751ece96","sha1":"743052320809514fb788fe1d3df37fc87ce90452","sha256":"1e67d8dbcca1f6fd94e077c85c2fb40fa1c2756c99238daa8da882144260a68d","sha512":"7b68a43a22a41404a2ff58e0da6a237492cad0fc3e56d216980802b4d5fb483895262a7e049340d6670002bdf899ba88c319239e60d0aae1ac31d98556b0ad6e","ssdeep":"96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq","tlshash":"3fe196dc72aab5611ffa30a8503bd21b72b25aec140d95a4f08ccde5392cc5d413ab7e","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-10-11T06:41:40.197368Z","times_seen":26292,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":89,"send":0,"wait":89,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/home.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.734Z","timestamp":1791678330734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/home.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:33 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 05 May 2020 17:50:37 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 15696\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15696,"size_decoded":15903,"mime_type":"image/png","magic":"PNG image data, 32 x 16, 8-bit gray+alpha, non-interlaced","md5":"5e27b8de6697d1af42c9b61e8454bb52","sha1":"27496ad4f5ecb1b45bf1a738cbfaccfd295a5068","sha256":"5fe461f09f0aaa1bed74ca023ee4e673bcc5bf3640f32615af09f608205c808f","sha512":"a4fe985f5935a367b5e132c8639364d9228e386e28b65a68e119774a44824190801c0d03f2935a626359f6b9f3872946e78baaa752c71ae6309ebecd72d77661","ssdeep":"48:Rnq+k29W8sEvKWgEnxNJfUKBCDyWLLBUyuL7y2I7cdpaY7ucgRcgP:1kEWR1WgEnxNFJW1B2CcXvZgv","tlshash":"71624430fdf176a95149aa3639c534469c374783da806c85bbdd8c6a6f10bbe8c4f183","first_seen":"2026-08-07T01:57:06.216518Z","last_seen":"2026-10-11T00:33:14.341128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2914,"timings":{"blocked":2272,"dns":0,"connect":89,"send":0,"wait":367,"receive":90,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/images/top_bg_belt.gif","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.459Z","timestamp":1791678331459,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/images/top_bg_belt.gif HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/templates/belt2008/css/style-d.css\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 13 May 2020 20:12:39 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 171769\r\nConnection: close\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":171769,"size_decoded":171977,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1200 x 180","md5":"c1c7c86305143d8257773d15e3ecca7a","sha1":"83f8a9233f46f11745111a224e296cd422178232","sha256":"6cd120afb1c39008454bde8d218debb6a3e69c886ccb86421f6e931f057ed8f1","sha512":"92d5b065eb2290038d5473291b2341e0f332d364fdd119e0cc7fec6a98b1d812fc0d10211d9f8581f8873aa904e467fe6b0ff3aff0e6b6390a1de650ec53fa0d","ssdeep":"3072:6w+y8q2mOnzZjgiSjo8ns0H0JA9PzbFktmxR9u/v0szzXV0xZLXEgpz:JP86O1giSxnjGttmxR96zzFCXzz","tlshash":"b9f3128b20b4a6d526fae7af823821640cfa2d066f070f7440bf47d526b5b9d187cf55","first_seen":"2026-08-07T01:57:06.207565Z","last_seen":"2026-10-11T00:33:14.342697Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1030,"timings":{"blocked":480,"dns":0,"connect":89,"send":0,"wait":92,"receive":270,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/fonts/BPGMrgvlovaniCaps2010.woff","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.499Z","timestamp":1791678331499,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/fonts/BPGMrgvlovaniCaps2010.woff HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/templates/belt2008/css/style-d.css\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:47:49 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 50236\r\nConnection: close\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":50236,"size_decoded":50443,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 50236, version 0.0","md5":"8d89e1d34fb77af1f4074d50fbd227de","sha1":"fde0f9bc6c0794c13938cf59a061eb618266b792","sha256":"48e3c7e3566fa51701faa8f0903e47b1c6ac186d66d17fb33d784467a6f79700","sha512":"7658916e85f14c272c117f72921a26c7148c75ac81ed310f06c096863fa8b3cd2a453a149baab32f172dcf17e0c8bb3ea5c7c95dae855d3920565aaa767e6a14","ssdeep":"1536:WSRCG19wUwE87FsfUkq94oXrtRyOh/TVQk/FE:tRCG1uUwESOMkq9L7Llh/TVQk/FE","tlshash":"87330142673bbe025ba7235a6037623b12ffd0ad9391ce01a78df14455b1769cce289d","first_seen":"2026-08-07T01:57:06.211299Z","last_seen":"2026-10-11T00:33:14.344199Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":0,"connect":89,"send":0,"wait":90,"receive":179,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/css/style-m.css","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.508Z","timestamp":1791678331508,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/css/style-m.css HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 04 Sep 2020 19:01:54 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 34910\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34910,"size_decoded":35116,"mime_type":"text/css","magic":"ASCII text, with very long lines (360), with CRLF line terminators","md5":"58bcc65f5d9ce859e280f63657d20b7a","sha1":"ba889c34d2d2a95a2f65653c6a37b928bee8758f","sha256":"ddbab223117411d50487ded14f0e461ca9d930ebdedbbc8c736c4bd808cae9e4","sha512":"d790c94fb2286064ca3271b951325ff17627ab5e4e8925a904978f07219fd326a88350044f65c4bb4863fe7c82ab5911458d5585372dc7f74c12e65c7c9c5579","ssdeep":"384:xI5fjRV1PzNyX344Y41Obq4z8ZtfEqBjY+aNAlAyXPCyokjlmbVlLYtqPMx3Wfsk:i1PhyXN1LXVoaA44","tlshash":"8bf29812875e7109e03bcd91f2e3e7ddaead8057d83219bc7ad91d29c54e0aa13b235c","first_seen":"2026-08-07T01:57:06.195951Z","last_seen":"2026-10-11T00:33:14.346066Z","times_seen":2,"resource_available":true,"data":null}},"time_used":942,"timings":{"blocked":534,"dns":0,"connect":90,"send":0,"wait":90,"receive":132,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/mod_falang/images/ru.gif","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.740Z","timestamp":1791678330740,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/mod_falang/images/ru.gif HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:33 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 18:10:15 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1459\r\nConnection: close\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1459,"size_decoded":1665,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 23","md5":"dce2bc1c2ceef47ffc85546ac1914e8d","sha1":"80e0ee9f8758ab6e00fba7fa72f087003be28ff6","sha256":"c5d81e71c6e10963d6c218cb495e4748deeacde9ed55d4a34c6de8c746e10997","sha512":"55f5b9dcc7f923ce1cdbe054f14e060586a6cb521682fb12b2e3b4889ee1871bf840c35aeca1ee92bde9f94b3fba3a1f21db84646f715b82cc119aef518ac541","ssdeep":"","tlshash":"ea31c94ce9e0ed021284d5823de2d86b59124c425df4f4b1accf80668660c7fe957bdb","first_seen":"2026-08-07T01:57:06.226401Z","last_seen":"2026-10-11T00:33:14.347347Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2424,"timings":{"blocked":2149,"dns":0,"connect":90,"send":0,"wait":90,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/fb.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.742Z","timestamp":1791678330742,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/fb.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 13 May 2020 20:44:09 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 18231\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18231,"size_decoded":18438,"mime_type":"image/png","magic":"PNG image data, 150 x 48, 8-bit/color RGBA, non-interlaced","md5":"c7a380d7759f9523e8bf0095a0a2139f","sha1":"cca158bd3ac5664d0aeb7a27d41b200e45aa7a5b","sha256":"439bb9b7438aa3497e3ab20c9d2ec817b877c085b689921d0c365facc51f5825","sha512":"00467d4cbbcfc7148784790f170d45b6afec24b1d031b31c5e92f46653b146596caaf170e6383b6927a0385ce226927f9a6e6feca646ac416bbc2d33d5fc0030","ssdeep":"96:2S7kEWR1jM/xNX8TpyzOsc5ga3aeGVu8dgmDRN1Q8vRhBH82kbgJGsM1T6DETvAt:2S7ktmSTpqaoV5Rs8vROgJLMwEc8m","tlshash":"c9820814bdf27666545ad5723ec229469c3707438c81ad42b6ce5d3a3f21bc4ec4f29a","first_seen":"2026-08-07T01:57:06.204011Z","last_seen":"2026-10-11T00:33:14.348584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1101,"timings":{"blocked":735,"dns":0,"connect":90,"send":0,"wait":90,"receive":89,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p1.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.744Z","timestamp":1791678330744,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p1.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:33 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 17:28:52 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 193176\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":193176,"size_decoded":193384,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"2c91974851dd27621afe013ed1827916","sha1":"f6edd951839402ff3016e0f9090a89b46a42761b","sha256":"9a07bffb9df4b35e84b8416f0de2c0966bb303d04378d898a177b65ddaa33f32","sha512":"737a91b387e5bb272d8eec918b7dd0540c5e0707e9f93b2ca0e50b54fbc322086790f78c41005faceb9869b33d26a87def37983c8ef0cfdf714835b34665505e","ssdeep":"3072:LDnRjp/v0b6YPCrrVXYmffWiQokxqEk8Msxa0OnsNahysD4zwsFE4GHUGSI5IfyR:LzX/v8/arrV9WL/K8Msxa0OnksGE0bIH","tlshash":"7c1422c8d6f365b3de55d1704752d061e3600a20f63775a26f23a32ca7b7ba4812b6b3","first_seen":"2026-08-07T01:57:06.192783Z","last_seen":"2026-10-11T00:33:14.350411Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4188,"timings":{"blocked":2292,"dns":0,"connect":89,"send":0,"wait":368,"receive":1344,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p5.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.750Z","timestamp":1791678330750,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p5.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 18:18:07 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 178740\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":178740,"size_decoded":178948,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"156bb29c4598dcee2d2b5932d5e847c3","sha1":"87595c3b0f9269794a2b7addbb573a5f03acf892","sha256":"f1bf3c6b6958f6a29244e186845da1b6c4c4e9c1da72c911bc5bd1cb5c0a2d63","sha512":"796d5bcaa9a3d5be103f040f6dcde66d3b0ae41ecaea2e5c6b04b83c5c4de7e3379d31ac7fb203412f8f9ef55bfa1b86e3f5571fdb36647f69ba72c93e0244da","ssdeep":"3072:UDnRjp/v0b6YGNBqhX9t3UAb/Bb9oOHcsZkk4OA2fUxZpo1mTUOqMrVE+Nyl:UzX/v8/Aqhtt3nfozkrxfUxZe15ZMhxy","tlshash":"1e04134b366b1fae1fc182d53b42e226f1449245c856b1333227793d6fb85fba2284d3","first_seen":"2026-08-07T01:57:06.213338Z","last_seen":"2026-10-11T00:33:14.35284Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2245,"timings":{"blocked":1712,"dns":0,"connect":87,"send":0,"wait":90,"receive":263,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p6.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.751Z","timestamp":1791678330751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p6.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 18:20:51 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 183635\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":183635,"size_decoded":183843,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"7809b48be5fa627fbbf2d98295223b74","sha1":"eda7524ff3673d57f499d42fe7b51f09c229c1ab","sha256":"557a3d2c287b9db96ab7e6b1955a73f636fbd1249b5b5846fb122d3c81b8f35b","sha512":"f23c4c3db6e79238fc60129ded151227c5f0ca0aa88271cf20ab8b9d56ec451bab3c71bc3a34fba7ff1e8d837e4e807d879162ca590c158d017d47b87121d329","ssdeep":"3072:+DnRjp/v0b6YCduusYUdOmUxBNKSvbDFCvsQW8AM/5cQWA72R:+zX/v8/CMuewmUxiSv3SsQ9AoyQB72R","tlshash":"170412da14e56acf1f2386750ed3d0352ea4a604e0c37e1feec05d4a4679756a3e8b83","first_seen":"2026-08-07T01:57:06.220323Z","last_seen":"2026-10-11T00:33:14.355472Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2290,"timings":{"blocked":1694,"dns":0,"connect":90,"send":0,"wait":91,"receive":316,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/css/style-s.css","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.506Z","timestamp":1791678331506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/css/style-s.css HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:47:49 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 0\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":202,"mime_type":"text/css","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-11T07:43:34.782978Z","times_seen":19020931,"resource_available":true,"data":null}},"time_used":799,"timings":{"blocked":522,"dns":0,"connect":90,"send":0,"wait":90,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/jui/js/jquery-noconflict.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.699Z","timestamp":1791678330699,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/jui/js/jquery-noconflict.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:30 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:41:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 21\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21,"size_decoded":238,"mime_type":"application/javascript","magic":"ASCII text","md5":"e2060c4e5e5955c824723b13a212d3ec","sha1":"18420ce484978f8ba3d7371febf1638828bb7a67","sha256":"5b6cf4e6eda02f7c90b60b3c32413c0851915f8f80a268a913b92929085132a6","sha512":"dcc2117e42859d51017047b468a99f65d74d45ac2e86ae1cc5605e39041ff2164e562756d93a89fa1f71cbd331f958b351c5afe952a47a560120e080d63bd623","ssdeep":"","tlshash":"34700008380080280230200e80300308a002038e2020c080000c0800000828c2a02028","first_seen":"2023-03-07T01:03:40Z","last_seen":"2026-10-11T07:03:14.985974Z","times_seen":12823,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":88,"send":0,"wait":89,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/modules/mod_accordeonck/assets/mod_accordeonck.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.707Z","timestamp":1791678330707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /modules/mod_accordeonck/assets/mod_accordeonck.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 02 May 2020 12:17:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3313\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3313,"size_decoded":3532,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6c17aa4cdbc6a44614578b7b9dc9acbf","sha1":"fa59f5adb88048b4898bb61a9cdc7a562aba096c","sha256":"39ee233353cf30fda399c0cb574b9703de40ce1e2c028d3ede1b417585fb5a84","sha512":"c676ee741ba219799aab6be3100713511fb854223bbc0e238cc0e9f10643718b4ab697105102cbdb47273e5b64800aa1d1a739c10d2bfb28bda0388fe47d6e01","ssdeep":"","tlshash":"af614189fb9cb92305637b7854af08ed787d1077c605343ffd990286648d23912e5b6a","first_seen":"2023-03-12T17:50:05Z","last_seen":"2026-10-11T00:33:14.35845Z","times_seen":18,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":242,"dns":0,"connect":89,"send":0,"wait":90,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/modules/mod_accordeonck/assets/jquery.easing.1.3.js","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.710Z","timestamp":1791678330710,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /modules/mod_accordeonck/assets/jquery.easing.1.3.js HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 02 May 2020 12:17:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 8097\r\nConnection: close\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":8097,"size_decoded":8316,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"6516449ed5089677ed3d7e2f11fc8942","sha1":"82e40d060bc269a6dde20c3990ca5a4fea6ca754","sha256":"0757f7ff6e5f6a581922a5e2d42c5e0cf7475d880885a9802e8bdd5e4188dd34","sha512":"6ebae34e9f46e8c90a5f94235f0c00424b1c7c5a4a8b7a248f267f337bc6c3083da88d66b28cfbcfe11b4012d7b139d52b73ce8d80461dc42f5f7e0614aaffec","ssdeep":"192:pl+Or8ur83V33R3hqRAsfAy4MOr8ur83V33R3hqo:zZr8ur83VHBhm+r8ur83VHBhL","tlshash":"a2f1038963c0631b4359f270aa3e5e4ff268642b566e681fcc5c5084bf7d339c27ad68","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-10-11T07:14:00.647952Z","times_seen":20503,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":243,"dns":0,"connect":87,"send":0,"wait":87,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/media/mod_falang/images/en.gif","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.737Z","timestamp":1791678330737,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /media/mod_falang/images/en.gif HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:33 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 18:10:16 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1551\r\nConnection: close\r\nContent-Type: image/gif\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1551,"size_decoded":1757,"mime_type":"image/gif","magic":"GIF image data, version 89a, 32 x 23","md5":"920c919be304940356e04c9ecc86f696","sha1":"fc8687f73ff844e5294b06a9b0b87f3677b89143","sha256":"f801f960291308d933b3421671f0b3ff4cad5c16e8ac692bd840e4eaed0a7ae7","sha512":"ba258155ece273dc10dedfa64275ed6eae42c65c5116781fcea5ce645ee37e56fc4b3e8b22542bc0b1c498ee431bcc8a2ee055a38fadb880ad86d76972ca1f1a","ssdeep":"","tlshash":"1c31da0eeda17c0110acbcc6e4a7692f2d074c805cf0f5a56896c45f9a781fb46193cb","first_seen":"2026-08-07T01:57:06.225329Z","last_seen":"2026-10-11T00:33:14.360717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2770,"timings":{"blocked":2424,"dns":0,"connect":161,"send":0,"wait":90,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/images/prodicon/p4.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.748Z","timestamp":1791678330748,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /images/prodicon/p4.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 24 Apr 2020 18:15:13 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 187275\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":187275,"size_decoded":187483,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"eafb05305045d30afd7026bf19628c23","sha1":"aa077d66682fbdbddf275d547cbda0a528c9af7c","sha256":"96139ea965e46a324cec1a0bd5b8a44c836d8d4b4500dd42640ad1610a958198","sha512":"c688e1117910bbaf4db68f8ae67fce23d48c877a595ef8cb83a67140ff69ea61bcc161614e5b488e0a47d0b7ec76c7075e9efa7d5f94626dfb47558bacc9cdb7","ssdeep":"3072:jDnRjp/v0b6YD1y8oiWJeGiwdePMU3VY1sd9n1rLaoX0L2q8C:jzX/v8/pRo1J3HjeYef1reO0Cq8C","tlshash":"860423856bca60ce2b40f4423275a112795fb7b4a0eeb81d31c5741a8be6c71fddc2e2","first_seen":"2026-08-07T01:57:06.217704Z","last_seen":"2026-10-11T00:33:14.363102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1350,"timings":{"blocked":735,"dns":0,"connect":88,"send":0,"wait":88,"receive":348,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/modules/mod_accordeonck/assets/plus.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.358Z","timestamp":1791678331358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /modules/mod_accordeonck/assets/plus.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:31 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 13 May 2020 22:25:28 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 15520\r\nConnection: close\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15520,"size_decoded":15727,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"73548c02112889d76da81e7f89bc5b2b","sha1":"27acf3f9c32820d3f8fc03f743f3e0532d68567a","sha256":"6508caad181aa44b0808c492e00709b836e4fe16f4508c61853a1e0530d14e56","sha512":"4d9037b1974e1a40b508dedfc3b4480371c96c50d8e9f8c8b7930605ec25e26f47c677eee14ae8ff23ca3d3126b3d4fa4209b4ee2df6a1c249f536a754cc10e7","ssdeep":"48:Unq+k29W8sEvKMLmhxN+Y94DbSBCMuFjyMcLA6yuLlyEccVb77cE+Y7:ekEWR1MLmhxNX4XMuF+MH5PEccVTB+8","tlshash":"b6623320fcf17665a58de23329c535065d734b83da819c85b9ce8c6a6f10bb9cc4f297","first_seen":"2026-08-07T01:57:06.228585Z","last_seen":"2026-10-11T00:33:14.365116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":135,"dns":0,"connect":87,"send":0,"wait":88,"receive":87,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/modules/mod_accordeonck/assets/plsus.png","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.461Z","timestamp":1791678331461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /modules/mod_accordeonck/assets/plsus.png HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/templates/belt2008/css/style-d.css\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nContent-Length: 355\r\nConnection: close\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":519,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-10-11T06:11:10.177221Z","times_seen":65898,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":479,"dns":0,"connect":89,"send":0,"wait":92,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/css/style-t.css","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.510Z","timestamp":1791678331510,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/css/style-t.css HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 04 Sep 2020 19:00:35 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 34934\r\nConnection: close\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34934,"size_decoded":35140,"mime_type":"text/css","magic":"ASCII text, with very long lines (360), with CRLF line terminators","md5":"42c5c8a7ebe2bdb2aaaca6eb5d82ff0e","sha1":"597bb41704411b2ad3294934420a1ab0a277dec1","sha256":"081b68fa6f0d8991f002683d504bb93fb0baf451619d2820a7ba3a23b3fb1372","sha512":"d990e0b24ed46f0da97fc267960c7bd7ee17c55fc635f78fa7850faa161bc1c6ec76697b9731d757cb804d0e66c1acbc4263b3394baecc1712b7444b62e99f8f","ssdeep":"384:xI5fjRV1PzNyXH546kbq4z8ZtfEqG6Y+aNAlAyyPCy2kjlmbglLYtqPMx3WfsFaH:i1PhyXhyV2lAd","tlshash":"3ef28712875e7109e03bcd92f2e3e79daeac8057d93219fc7ad91e29c54d0aa177231c","first_seen":"2026-08-07T01:57:06.212242Z","last_seen":"2026-10-11T00:33:14.369183Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1120,"timings":{"blocked":706,"dns":0,"connect":89,"send":0,"wait":91,"receive":138,"ssl":96},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/modules/mod_accordeonck/themes/simple/mod_accordeonck_css.php?cssid=accordeonck104","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:30.687Z","timestamp":1791678330687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /modules/mod_accordeonck/themes/simple/mod_accordeonck_css.php?cssid=accordeonck104 HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/index.php/ka/\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:30 GMT\r\nServer: Apache\r\nConnection: close\r\nTransfer-Encoding: chunked\r\nContent-Type: text/css;charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1927,"size_decoded":2084,"mime_type":"text/css; charset=UTF-8","magic":"magic text fragment for file(1) cmd, 2nd line \"/*--------------------------------------------\", 3rd line \"--\tSimple theme Menu Accordeon CK\t\t\t--\"","md5":"cacfe88c75302061c9be20fac8990871","sha1":"c3ba8e4db29b3d6925a496a7efe9029491c0940f","sha256":"1e91fe13df34e4e39efaee11ff7a0e2c21ff9289bd124a4ea03ec85cf267be52","sha512":"76cc6bd300b19c227bd14589c51389499d86628001b854df7fcb9c5569d30e0b958f272a5733facce182ccda4d2e789620d953745fec0cbe2740e01a47ec3a79","ssdeep":"","tlshash":"ab41ce460e57699adc46d1f4cae7139aff054233951dfa4c75ab0166cf0c0d093eeb18","first_seen":"2026-08-07T01:57:06.200089Z","last_seen":"2026-10-11T00:33:14.371383Z","times_seen":2,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":87,"send":0,"wait":193,"receive":12,"ssl":92},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"belt2008.com/templates/belt2008/fonts/BPGGlaho.woff","fqdn":"belt2008.com","domain":"belt2008.com","tld":"com"},"ip":{"addr":"188.93.90.243","port":443,"asn":57814,"as":"Cloud 9 Ltd.","country":"Georgia","country_code":"GE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://belt2008.com/index.php/ka/","date":"2026-10-11T00:25:31.501Z","timestamp":1791678331501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"belt2008.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 19:24:30 GMT","end":"Fri, 27 Nov 2026 19:24:29 GMT"},"fingerprint":{"sha1":"4A:CB:6B:52:B4:51:B8:B8:F2:89:D5:2C:4D:C3:4F:CE:C3:0A:C5:BA","sha256":"B6:9B:50:4A:86:D4:54:45:0B:0F:28:7D:97:D5:56:A0:F2:1A:A1:7E:53:B5:D4:FC:9F:B9:0E:01:F3:B4:EB:C7"}}},"request":{"raw":"GET /templates/belt2008/fonts/BPGGlaho.woff HTTP/1.1\r\nHost: belt2008.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://belt2008.com/templates/belt2008/css/style-d.css\r\nCookie: 4d0e8e9cfa4e6a2cce4ea54dd14ce8a3=5d7ae180237606b6ed2ea288de5bdb79; eab6e6ec6553a0ff49bfdeb13a1c16a0=ka-GE\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"4d0e8e9cfa4e6a2cce4ea54dd14ce8a3","value":"5d7ae180237606b6ed2ea288de5bdb79"},{"name":"eab6e6ec6553a0ff49bfdeb13a1c16a0","value":"ka-GE"}],"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sun, 11 Oct 2026 00:25:32 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 18 Apr 2020 08:47:49 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 98860\r\nConnection: close\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":98860,"size_decoded":99067,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 98860, version 0.0","md5":"2ae452f46bf698b77aa0d69685eaa28d","sha1":"a973b359b624bdc87173399071620886ff586ba4","sha256":"6ab085ea4cf3ec40ec6dec7a200a3040a5857df1ce7d1cd011f6bb657a912b76","sha512":"bb8e62a576c41e626710c5e719bbb4fd2c1a12b99e848457bdaeef55283d6ac1e420993b5bf36496dfd07b57f908528c6cc5c172671ce498d062aa3c081bf058","ssdeep":"1536:BWzzKpS8AJP9Vs4H7RxwsnlIoIxWLw8mbbBY/ZGmC9ZONCuwfxCZCrMwXp2AMv3S:BWzzKglDNxbnlZpw8wqZ9C9cNCuCIYT","tlshash":"c4a31242fabb8766ace393e67511875dc37e678a01ee09bc40d61488de00eb6de4dcc5","first_seen":"2025-03-10T05:48:55.199618Z","last_seen":"2026-10-11T00:33:14.372871Z","times_seen":4,"resource_available":false,"data":null}},"time_used":890,"timings":{"blocked":345,"dns":0,"connect":90,"send":0,"wait":93,"receive":267,"ssl":95},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-11","alert":"Sinkholed","trigger":"belt2008.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}