{"report_id":"1174c4a6-46d7-4649-bf66-293fdb040408","version":0,"status":"done","tags":[],"date":"2026-09-05T17:57:58Z","url":{"schema":"https","addr":"promoigrau.com/7kmgbfm3ejp8k8pv5cup","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":0,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"promoigrau.com/7kmgbfm3ejp8k8pv5cup","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"title":"Brawl Stars","dom":{"size":14334,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (424)","md5":"5a36c48feac4027a297002f0ea3f2d89","sha1":"5ac0a075777c69aeb1fe36fdead6ef83d943d9ea","sha256":"5120fafb2ce127954ead1cef8fbf4283c148fb7e5c1f79bb53cbb587eda126d7","sha512":"338ec797f6c828e2b50aa1e2487493bc8a231596240fdc1f4a22451aa377d0f183ded62065a0c2dc8b9c81b1a6423130aa8a350039bafb3286e4d16f6e486f40","ssdeep":"384:ohjVrUiDUSY2/fML+7sVbIIkzjeuBZvOf1Ql:AVQi4NIIIkQl","tlshash":"1752527051f9583a416380dae6653f2e39d6e17bea5e02007aad07f61fd7c86fd27028","dom_hash":"domhashb02de77be2f744c3533258c51a80c199","first_seen":"2026-09-05T17:58:08.615874Z","last_seen":"2026-09-05T17:58:08.615874Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"promoigrau.com/7kmgbfm3ejp8k8pv5cup","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":0,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-10T17:57:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"promoigrau.com","ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2026-08-29","domain_rank":0,"first_seen":"2026-09-05T17:55:23.992885Z","last_seen":"2026-09-05T17:55:23.992885Z","alert_count":10,"request_count":10,"received_data":191831,"sent_data":5860,"comment":"","tags":null,"fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"promoigrau.com/7kmgbfm3ejp8k8pv5cup","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"62d7df431d8afbc112658491e526fd1e","sha1":"59a6c62ec05bfce445cd792bd0c19d96aeece94f","sha256":"5dee177446b116a75376ba8290b6f573995ab2d6cc9cc47d0829b9d72aac4dcc","sha512":"a6e3150cecc126e48f6f083121bb19cc90310306b281389b6d094f9be4107f56ec634f1493b6cbe502a60c0f73a1d8288508ee31e9a432cca6d422ed100e457c","ssdeep":"","tlshash":"85e0c2cf0c8bc6284c7a42312f4b3e81725281633b199291be38d311bef49c3a6686cc","size":324,"data":"","first_seen":"2026-09-05T17:58:08.640681Z","last_seen":"2026-09-05T17:58:08.640681Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/auth_registration_guard.js?v=1","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6543a9cccbb73247c6f90b3ecda8caa","sha1":"99b6e1edabd61e4433c9d566913a6c2e3b02a2c8","sha256":"8308992c09783d69d5f123447692c72728857011db4b1ef7579ffd81549da666","sha512":"d00d3fea198260302afc9e11c7fccae74172a10160850102ebdeeca4db34073ea7e064966227d89625f578a1529e76248565bf4de6d68d0b1e942d76c872cb32","ssdeep":"96:y5lESBv9VcIZNtXZxHykh8e3oecSTCOhViEths++2Na2wd7AGnoHwQcpFl0:6lNVcIZNtXZxHykh80oeVriKu++2Na2Z","tlshash":"17b15014c1e74c787a37d1cbaab6498b30544423941669a2fa7c93fc4fdf451aabd348","size":5172,"data":"","first_seen":"2026-07-03T13:46:43.833158Z","last_seen":"2026-09-06T10:08:55.926309Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/auth_web_captcha.js?v=6","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7a05b76542b4bf0ff1ac5e721203dae","sha1":"cb3c2c3c565f1350387b0662077c4a478415b3ec","sha256":"1b21073029bafa322b2f893292cf8246eb7bc255d78775b21f6fe9459dac2c32","sha512":"003592d10c1b980d27c96a8cfd58c0ce8874e1934cc3229cf6fb159e3a6403668ae5045d88884f67669eb56ac4aed850b4b6de4fff1adf60d339aa85592f4133","ssdeep":"96:8uT8kXaSw2UcbRiswi8iWlM2QfeMQUy/kYqDqgOoH1euHJf:YkqJ2jRiXi8iWl1DU31OQV5","tlshash":"05b1b578b0e334669d2bf2698a9f964a7171012b9409d9003f4c52fa5fd2e3981b4bdc","size":5145,"data":"","first_seen":"2026-08-10T16:02:16.122871Z","last_seen":"2026-09-06T10:08:55.926932Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/talon.js?v=4","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0382337bfa2c871767492c3a90d71b8","sha1":"54177efdff6a76867be98cc492957cb2d15dce75","sha256":"30b1ca7e89fa8514016ecf4ac2c491cf999247cbccbddbaa45bf4381485fd20f","sha512":"3b2a212c54b3c0632a0d55cbc2b891eebf55c11917ec82ae5c2319be04ea64180e5d0ef00da82bfbe71a30f9e0dbba724302fd39751b318ad6df85082ef7ec29","ssdeep":"768:XscgEEDiEvmDHlSXLSzqAn9rkZtwlLqHp0uQ9T:XsTTD5vmDHlSXLSzqAnCZ2lLqHpLQ9T","tlshash":"41d230aa61692a2685b2a33d8f87541dfb7754232109c7987ddc82443fba53483f1fec","size":29203,"data":"","first_seen":"2026-09-05T17:58:08.622798Z","last_seen":"2026-09-06T10:08:55.930935Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"promoigrau.com/static/talon.css?v=1","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.682Z","timestamp":1788631049682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/talon.css?v=1 HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, must-revalidate\r\nvia: 1.1 Caddy, 1.1 Caddy\r\ncontent-length: 1102\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nserver: uvicorn\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":2317,"size_decoded":1348,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with CRLF, LF line terminators","md5":"c4901e5e16daa8a179ef937f78816c2b","sha1":"deb39cdb5b1df78f512900a966ba54147c7fe90b","sha256":"60a9e52f70ceb857c268ba8d532c3af0a01b45cf574e675cad57d3a65a05c6fa","sha512":"27f381bddeb8e83a8dd80a82b8aadf47a80b57159fd074ac0274701bb2490006d2b5a8d26555201528391c16475728a154ace99345690885644fb7a9eed2fe61","ssdeep":"","tlshash":"6c4137d65b7804d8ba1bc4b83593eb4a63dd2142500ece7c9fd2302cde4e1c56573b89","first_seen":"2026-09-05T17:58:08.618981Z","last_seen":"2026-09-06T10:08:55.925176Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/auth_registration_guard.js?v=1","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.688Z","timestamp":1788631049688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/auth_registration_guard.js?v=1 HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy, 1.1 Caddy\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nserver: uvicorn\r\nvary: Accept-Encoding\r\ncontent-length: 1903\r\ncache-control: no-cache, must-revalidate\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":5172,"size_decoded":2163,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e6543a9cccbb73247c6f90b3ecda8caa","sha1":"99b6e1edabd61e4433c9d566913a6c2e3b02a2c8","sha256":"8308992c09783d69d5f123447692c72728857011db4b1ef7579ffd81549da666","sha512":"d00d3fea198260302afc9e11c7fccae74172a10160850102ebdeeca4db34073ea7e064966227d89625f578a1529e76248565bf4de6d68d0b1e942d76c872cb32","ssdeep":"96:y5lESBv9VcIZNtXZxHykh8e3oecSTCOhViEths++2Na2wd7AGnoHwQcpFl0:6lNVcIZNtXZxHykh80oeVriKu++2Na2Z","tlshash":"17b15014c1e74c787a37d1cbaab6498b30544423941669a2fa7c93fc4fdf451aabd348","first_seen":"2026-07-03T13:46:43.833158Z","last_seen":"2026-09-06T10:08:55.926309Z","times_seen":8,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/talon.js?v=4","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.690Z","timestamp":1788631049690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/talon.js?v=4 HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, must-revalidate\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nserver: uvicorn\r\nvary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":29381,"size_decoded":7924,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"e0382337bfa2c871767492c3a90d71b8","sha1":"54177efdff6a76867be98cc492957cb2d15dce75","sha256":"30b1ca7e89fa8514016ecf4ac2c491cf999247cbccbddbaa45bf4381485fd20f","sha512":"3b2a212c54b3c0632a0d55cbc2b891eebf55c11917ec82ae5c2319be04ea64180e5d0ef00da82bfbe71a30f9e0dbba724302fd39751b318ad6df85082ef7ec29","ssdeep":"768:XscgEEDiEvmDHlSXLSzqAn9rkZtwlLqHp0uQ9T:XsTTD5vmDHlSXLSzqAnCZ2lLqHpLQ9T","tlshash":"41d230aa61692a2685b2a33d8f87541dfb7754232109c7987ddc82443fba53483f1fec","first_seen":"2026-09-05T17:58:08.622798Z","last_seen":"2026-09-06T10:08:55.930935Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/favicon.svg","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.935Z","timestamp":1788631049935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/favicon.svg HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/svg+xml; charset=utf-8\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nserver: uvicorn\r\nvia: 1.1 Caddy, 1.1 Caddy\r\ncontent-length: 467\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":467,"size_decoded":628,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"75b0c42ca4b35f69603f0191ea63351e","sha1":"22f52a3ae83c65240a0c552db7ba6461b669107c","sha256":"d65b4cab202b62713562fabfff826e7f68a24622cc05f491431f3d3d07df4f32","sha512":"03b46b7a231d9c4f37813f89ac4013e8f373c87b4303f03c5697615cff96c4943c7e75a68cad6e512144f3fe5ac34772fbc60984835dc537029347dc3d146b39","ssdeep":"","tlshash":"b1f0271ad198462ac348ca15e764a42467ac91d7a6c3c210f099df3e1b944835d8a3bc","first_seen":"2026-05-04T05:24:47.350603Z","last_seen":"2026-09-06T10:09:08.029796Z","times_seen":17,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/7kmgbfm3ejp8k8pv5cup","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-05T17:57:28.632Z","timestamp":1788631048632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /7kmgbfm3ejp8k8pv5cup HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-type: text/html; charset=utf-8\r\ndate: Sat, 05 Sep 2026 17:57:28 GMT\r\nserver: uvicorn\r\nset-cookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; Max-Age=31536000; Path=/; SameSite=Lax; HttpOnly\nmax_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22; Max-Age=63072000; Path=/; SameSite=Lax; HttpOnly\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy, 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"max_auth_first_route","value":"7kmgbfm3ejp8k8pv5cup","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"max_auth_first_route=7kmgbfm3ejp8k8pv5cup; Max-Age=31536000; Path=/; SameSite=Lax; HttpOnly"},{"name":"max_stat_vid","value":"ed7acc88ab0e41b69a32a4b00082ba22","quoted":false,"path":"/","max_age":63072000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22; Max-Age=63072000; Path=/; SameSite=Lax; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":14354,"size_decoded":5198,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (424)","md5":"1036a305b0a4b8c749917a54fe4b31a3","sha1":"de0e36d373d05e7fd017a0a3145f7cf6952d7947","sha256":"342448f496ce30d4985a72cf39bb559820d846ff2ba65ed740e4be13e7d9c877","sha512":"9a11bdf4ea473dca587e2b1c0349181f053252636fe3710794e6ea7d4b4d25903fe5ded1dca88a456c85508dec61c187f5525f554061e23cb54fd8b87f05c74c","ssdeep":"384:AjGvCuDUvY2/fML+wsVbIIkzjeuBZvOf1QJ:eG6ufOIIIkQJ","tlshash":"ee52637051f9583a416380dae6653f2e39d6e17bea5e02007aad07f61fd7c86fd27028","first_seen":"2026-09-05T17:58:08.627208Z","last_seen":"2026-09-05T17:58:08.627208Z","times_seen":1,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":-1,"dns":6,"connect":27,"send":0,"wait":790,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/star_drop.css?v=3","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.680Z","timestamp":1788631049680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/star_drop.css?v=3 HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nserver: uvicorn\r\nvary: Accept-Encoding\r\ncache-control: no-cache, must-revalidate\r\ncontent-encoding: zstd\r\ncontent-type: text/css; charset=utf-8\r\nvia: 1.1 Caddy, 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":27636,"size_decoded":6702,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (488), with CRLF line terminators","md5":"36ce6d0fd8bd6759f31d7e3448f40f0a","sha1":"522047bfa437dfc4a48761e4f4abe29f443f2165","sha256":"37b48bd7320001c3fc7365da5ca31d2ab5f455261f8b03eef5fbac735476ec99","sha512":"50490255b925e0cf5db18c63f647441757fa06f6778580a26e1b8084aac3d9fb6ad2affcd1c858a6ddcdb5d7cb8a2973714d5d4d539b2917d73165bb60427e13","ssdeep":"768:gTLgFa3QaLudlWOPMMS5C+3boWZCF01vFBdYkV:gTLgFa39LOUOPMMkC+3boWZCF01vFBb","tlshash":"66c2a45227871102bba7f750fad3eb4ee7299013940a43bd7ad23409c2cd5ac96f9f58","first_seen":"2026-08-10T16:02:16.120735Z","last_seen":"2026-09-06T10:08:55.923665Z","times_seen":3,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/visual_custom.css?v=2","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.684Z","timestamp":1788631049684,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/visual_custom.css?v=2 HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-encoding: zstd\r\nvia: 1.1 Caddy, 1.1 Caddy\r\ncontent-type: text/css; charset=utf-8\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nserver: uvicorn\r\nvary: Accept-Encoding\r\ncontent-length: 1988\r\ncache-control: no-cache, must-revalidate\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":7391,"size_decoded":2234,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"b53f2e7384df596f01eb0df020d747ac","sha1":"37683bb1e0080db6fae4b4121b8d085c19acdc51","sha256":"7358d5cbca53d2bb93c77c58059ba415bb100b5eaa8d1ab09ebeba064d07669a","sha512":"3e36323f1aac27f81b3820482c23b6825cc3403ea2d18b579739979a6fb87d246aa5cad90c4bc7a548f812a0615742d55e70a132f8bb212435366f303802d4fc","ssdeep":"96:aDgB4bGZKTRxZsOjQ/rh5p2Xah+534IyQ161A3lOwMnNw:dZYNpkhv2g+534IyK61A3InNw","tlshash":"f6e1f210bb6c4aad333fead9345f5b097768b028ecb5c9f4b79110b81e791f914899c2","first_seen":"2026-09-05T17:58:08.63294Z","last_seen":"2026-09-06T10:08:55.929656Z","times_seen":2,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/auth_web_captcha.js?v=6","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.689Z","timestamp":1788631049689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/auth_web_captcha.js?v=6 HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy, 1.1 Caddy\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nserver: uvicorn\r\nvary: Accept-Encoding\r\ncache-control: no-cache, must-revalidate\r\ncontent-encoding: zstd\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]},{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]}],"data":{"size":5145,"size_decoded":2333,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e7a05b76542b4bf0ff1ac5e721203dae","sha1":"cb3c2c3c565f1350387b0662077c4a478415b3ec","sha256":"1b21073029bafa322b2f893292cf8246eb7bc255d78775b21f6fe9459dac2c32","sha512":"003592d10c1b980d27c96a8cfd58c0ce8874e1934cc3229cf6fb159e3a6403668ae5045d88884f67669eb56ac4aed850b4b6de4fff1adf60d339aa85592f4133","ssdeep":"96:8uT8kXaSw2UcbRiswi8iWlM2QfeMQUy/kYqDqgOoH1euHJf:YkqJ2jRiXi8iWl1DU31OQV5","tlshash":"05b1b578b0e334669d2bf2698a9f964a7171012b9409d9003f4c52fa5fd2e3981b4bdc","first_seen":"2026-08-10T16:02:16.122871Z","last_seen":"2026-09-06T10:08:55.926932Z","times_seen":3,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/api/public/link-image/18d498cd61bd4bf4afda0f93870979df","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.694Z","timestamp":1788631049694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /api/public/link-image/18d498cd61bd4bf4afda0f93870979df HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nlast-modified: Thu, 03 Sep 2026 15:25:00 GMT\r\nserver: uvicorn\r\naccept-ranges: bytes\r\ncontent-length: 97036\r\ncontent-type: image/jpeg\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\netag: \"fb72f89c21e3257e3d280e6fdf2fa4f4\"\r\nvia: 1.1 Caddy, 1.1 Caddy\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":97036,"size_decoded":97291,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"a263a014bf85451592c916759bee297f","sha1":"ab3e9eb3050efbf095b020e874c709a1e0a4dd68","sha256":"aa643f1a573cd160d41bf28c401b3c91fab8260bec27d8c3481c3d3470f15678","sha512":"0ce30a51c25a7bb23c108328f917cb80d531cbc541a2d893f93c811e7a310f87e6494a273bc916001a053cfcb0ae3cb5d81a4c10f67871879d609e1536a94074","ssdeep":"1536:TXEP7lZgke8cICD45/FmH/d5DGrylH7dzny9L88bxi5LAUk/UPGcZ6BL8JdvVFHx:T0P7xUk8V5tHhzneg8bxiL/k/de6lIdZ","tlshash":"049312de482d5c4f435ecb3bb6909fe8c1dc7afa616b37875ec871118c256a6c0a19c4","first_seen":"2026-09-05T17:58:08.638023Z","last_seen":"2026-09-06T10:08:55.928297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":581,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"promoigrau.com/static/favicon.svg","fqdn":"promoigrau.com","domain":"promoigrau.com","tld":"com"},"ip":{"addr":"147.45.210.25","port":443,"asn":49055,"as":"New information technologies Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://promoigrau.com/7kmgbfm3ejp8k8pv5cup","date":"2026-09-05T17:57:29.937Z","timestamp":1788631049937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"promoigrau.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 03 Sep 2026 12:53:51 GMT","end":"Wed, 02 Dec 2026 12:53:50 GMT"},"fingerprint":{"sha1":"52:31:5E:BB:44:21:A1:53:DE:E1:85:70:C2:BA:0E:8E:A1:8B:FB:68","sha256":"9B:1D:25:8F:D1:7E:9D:C7:E0:41:86:55:B0:35:96:D3:1D:DC:B4:96:8F:78:BE:15:9D:E2:9E:78:02:25:E8:3C"}}},"request":{"raw":"GET /static/favicon.svg HTTP/1.1\r\nHost: promoigrau.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://promoigrau.com/7kmgbfm3ejp8k8pv5cup\r\nCookie: max_auth_first_route=7kmgbfm3ejp8k8pv5cup; max_stat_vid=ed7acc88ab0e41b69a32a4b00082ba22\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nvia: 1.1 Caddy, 1.1 Caddy\r\ncontent-length: 467\r\ncontent-type: image/svg+xml; charset=utf-8\r\ndate: Sat, 05 Sep 2026 17:57:29 GMT\r\nserver: uvicorn\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Uvicorn","description":"","website":"https://www.uvicorn.org/","common_platform_enumeration":"","icon":"uvicorn.png","categories":["Web servers"]},{"name":"Python","description":"Python is an interpreted and general-purpose programming language.","website":"https://python.org","common_platform_enumeration":"cpe:2.3:a:python:python:*:*:*:*:*:*:*:*","icon":"Python.png","categories":["Programming languages"]}],"data":{"size":467,"size_decoded":628,"mime_type":"image/svg+xml; charset=utf-8","magic":"SVG Scalable Vector Graphics image","md5":"75b0c42ca4b35f69603f0191ea63351e","sha1":"22f52a3ae83c65240a0c552db7ba6461b669107c","sha256":"d65b4cab202b62713562fabfff826e7f68a24622cc05f491431f3d3d07df4f32","sha512":"03b46b7a231d9c4f37813f89ac4013e8f373c87b4303f03c5697615cff96c4943c7e75a68cad6e512144f3fe5ac34772fbc60984835dc537029347dc3d146b39","ssdeep":"","tlshash":"b1f0271ad198462ac348ca15e764a42467ac91d7a6c3c210f099df3e1b944835d8a3bc","first_seen":"2026-05-04T05:24:47.350603Z","last_seen":"2026-09-06T10:09:08.029796Z","times_seen":17,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-05","alert":"Sinkholed","trigger":"promoigrau.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}