{"report_id":"25f8b9b9-faa9-48fd-8566-b45d7f5bf86c","version":0,"status":"done","tags":[],"date":"2026-09-01T14:06:17Z","url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"title":"donatebux","dom":{"size":4945,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"61f2313ab506b139760ab92a709c6961","sha1":"ffe6c3cdf5fdaf3c2f0182763d3bb883391a622f","sha256":"6bb5edb58cef755e11ef884eefd5918e81a519d0139fa603246ac872af4f7e65","sha512":"408b51eda4da0521fec830219e434cb6b222031f348841c36923e92db7874fdbcc29c3cccd60cadaadc97c9b7849187ab9dc1f610536d5d7adb08ed4a4bdfb86","ssdeep":"96:DkSsuxUPoPWHSAYqr4jgLlhwyujQP+tBoAtLMtOlw7wRLtw+Qwf1wEiw2wPtO5hN:OPoP+PPr4jgLlhxqQP+tBoAtwtOlgwJw","tlshash":"f6a124256c8c4d7b122682c660607999d4ef8e36f513c4e6f2f74a7e36d6dc4d81b432","dom_hash":"domhashb760e714c85db0183321c8c384c11834","first_seen":"2026-09-01T14:06:43.252932Z","last_seen":"2026-09-01T14:07:08.073961Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-06T14:06:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":2,"received_data":30507,"sent_data":1063,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-08-31T08:43:22.767816Z","alert_count":0,"request_count":1,"received_data":85364,"sent_data":484,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-30T23:05:19.421151Z","alert_count":0,"request_count":2,"received_data":139782,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.linearicons.com","ip":{"addr":"138.199.37.229","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"domain_registered":"2013-12-10","domain_rank":393482,"first_seen":"2016-09-23T07:43:41Z","last_seen":"2026-08-27T23:55:39.046668Z","alert_count":0,"request_count":1,"received_data":8268,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":5,"received_data":392314,"sent_data":2852,"comment":"","tags":null,"fingerprints":null},{"fqdn":"donatebux.com","ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":22,"request_count":22,"received_data":887079,"sent_data":9971,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-09-01T16:39:38.082453Z","times_seen":93417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb564b86c2f688ab1286aeaf060ea679","sha1":"31dbadc3aad91b7f73f9f14f477ea3b343118066","sha256":"91ff64e873285f8f9af3381f05c8f3836b795c6db3e3fb4ef960d82f61b513d9","sha512":"da787654b839c1f9f346a10a8ac059d69b4dd5a6b90f1fab394d171e42e915801d7febdf8149f6a98c6154964a599b3d217e8372e311d5fa3859143cf259f98a","ssdeep":"","tlshash":"cf500000030000000000f0000000f00000000000300c00c003000330cc000000000c00","size":8,"data":"","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-09-01T14:07:08.158599Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e9913770c9f7dc8ee378bda39f09dc67","sha1":"785b8217e263970863c20cb4e1b1a08c6f77eeb2","sha256":"bbbd92d36d4409922fcc2f34506a7f72f8c9a0d244ec256178f98257ff01ee67","sha512":"5420c97c54ab60ba174508522391396cdbe439d86d2fc6edbb5ff8aca9662fb8ab5962c3d48f93ea9d3a973a5b63865ce0f3d988ea4d6b1372ea4a1d19f955cf","ssdeep":"","tlshash":"305000000c303000000f0000000000330000003000c000000300300c30c0c000000c00","size":10,"data":"","first_seen":"2023-03-07T12:06:17Z","last_seen":"2026-09-01T14:07:08.160568Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/particles.min.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08bd8ed926fa216a54b076590a459e67","sha1":"b4d9a963b9200cc77ceaa1bf4a12537a29c0626a","sha256":"e143ea82cbb391479838962ed3a39a9f2319679ddf33e689217d26b0e206d724","sha512":"7f5bf533e4151c0a84bc10909b1ea78ccd16d9f0cff336108e61402ef94df6389972a4ea01926b981cb79747d57512ca6020271b4f5111e72f4b1102b8f2dd73","ssdeep":"384:FkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:FC7T6uYvn8wRxwyryVOEKXW5","tlshash":"42a2934d23f73e77339ab2e05be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23372,"data":"","first_seen":"2023-03-07T01:17:29Z","last_seen":"2026-09-01T14:07:08.087289Z","times_seen":2583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-09-01T16:30:47.247235Z","times_seen":751401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"2512414f817df8312569d55032748f81","sha1":"13467df6e962aa77bb36867ff1412e1ba9f8feb1","sha256":"e193735f8d500f10e2cdc6a94f5a43fb0257c1e2f8afc10fa04f0e3761d258de","sha512":"db6e4298746d519b0987bfa0feb89c39315718e178418e482b1c10c76439eae343afabf2db35ffaaa26c7ee6a3855084d39e9b88d35b11f87c354ceaf38874a0","ssdeep":"","tlshash":"a590029525c25101965295d4455b5c8450658675249569809180956259550205125cbc","size":47,"data":"","first_seen":"2023-04-11T22:25:25Z","last_seen":"2026-09-01T15:45:35.916568Z","times_seen":23439,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/jquery.countTo.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","size":3761,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-01T14:07:08.144458Z","times_seen":1449,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/main.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe7166285f2074b1c4ffb3667bb99889","sha1":"3c7a69b2672a5db7e883640cb105ee6ab9018ac4","sha256":"08a53a61a946eb98ac84d93c834b5cce62cae1ce154fb445b77fcf8c0e11acaf","sha512":"12ed67c9d48a62ff67ad22e2273fd746ca1a09f942470b74f78deda2dc4da188e1e70e3b73dbf849cbc56649b597b0810bf2f8d958c3b1f61b3adf389dae82dd","ssdeep":"384:UnJi5ZOtw2RwFZE5+U62IgH1a010ytpfJl50mM4B:vKNw0+U62jH4010gj50mMc","tlshash":"688230a1732d54bba3b77363403f855aec3de872840201fafa7c644c6b74954a326d6e","size":19159,"data":"","first_seen":"2023-03-10T21:16:50Z","last_seen":"2026-09-01T14:07:08.146709Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/ion.sound.min.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b710025e9615bd7373ec7cd49e21a99f","sha1":"4f831a37b333a2f39b6cf4d8d43b7f07ba8db4f8","sha256":"1520e67c06c2b44c67aec9833b5f1c5324c2cc8842d82f7cc3509adc34c95a0a","sha512":"45331a852e455bb4d56015cbb6728a55065b3c090291d8c61614c4a366a1d0729e20d7902d407bb97d5ea8717db060bea3ddb3a0c365cae85850663dfa9cb0c6","ssdeep":"192:Ixtd1gpzHtptP1aymRglPkOHZdOc72XIPuC1Yw:IfgpzlDAglPdic724Px1Yw","tlshash":"26424f1f7181f76551e6eaea205b034e0372e17a6884469d3d3cebf6ed2190f503ba78","size":12857,"data":"","first_seen":"2023-03-07T14:20:11Z","last_seen":"2026-09-01T14:07:08.106613Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","size":84380,"data":"","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-01T15:26:22.579497Z","times_seen":20322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-09-01T16:07:02.437806Z","times_seen":238802,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/drc.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78da37bad7fcacb91fea3212b56d0927","sha1":"55a0a49e58870b153cd2a0ccb9ba89857e7d70b9","sha256":"b3c2c181c9a42cdd5bf2225870a58c079ea867cbbb7aff1a6314fd9f62999cda","sha512":"8f4ff61bb5ac5f686262292ae2d0acfdaec8153dfcf01f662e70838129f7be757e5a7dea1e59dfd538c7b6fe544f8fc4c9b0d401b8a54aea9cf1ad3c289db2da","ssdeep":"768:u23MrStcT21VRDW2F1W6IuoldRHmc1CloUbpOuEEK4w08gBmHJY/XWDjBdVzgfDC:j3M+t365Dh/ewVMocGhCnzTqkk8ArF","tlshash":"9a230f85b3c1b88103cb9b7a735fa1e9e52e5ce93458084fc102fcd0f5b991ae9e5a74","size":47513,"data":"","first_seen":"2023-03-10T21:16:50Z","last_seen":"2026-09-01T14:07:08.121219Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"donatebux.com/","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-01T14:05:42.402Z","timestamp":1788271542402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.2.33\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 1511\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:8.2.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"jQuery:2.1.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Google Hosted Libraries","description":"Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.","website":"https://developers.google.com/speed/libraries","common_platform_enumeration":"","icon":"Google Developers.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5476,"size_decoded":1766,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"4fd9617ca2e6bb6d78103ad1f9d5e0b6","sha1":"8712a63344effbdf24b63071b261aa7ec0f45502","sha256":"a2bf407f6a4250a6c2a15c1843f2807b36e5cd2fa44737847dda309521dd2dea","sha512":"42c60a4f62c69a271acaeb27305191b26520d261c0670d975b660ce97a1820913b2f9a3aef3734bdc0a514a8f23131d3ee43a1b9bdc7a69305f6cad1a7402f2a","ssdeep":"96:IhsuNDPEPZUVEBxqw92o3jVJfjokNzmNEi1NFqedqLZNKcRWLyRjFR86RxjRz/EY:CPEP6i0w92ozVpokNzmNEi1NFqSqLZNj","tlshash":"a4b1a8253888d17b121382c740717b5ad5afce32eb238466f6f5177f27d2d84e96a432","first_seen":"2026-09-01T14:06:43.254439Z","last_seen":"2026-09-01T14:07:08.140785Z","times_seen":2,"resource_available":false,"data":null}},"time_used":674,"timings":{"blocked":-1,"dns":25,"connect":160,"send":0,"wait":164,"receive":0,"ssl":324},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/c2.mp3?1788271545967","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.974Z","timestamp":1788271545974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/c2.mp3?1788271545967 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 95193\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":95193,"size_decoded":95432,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo","md5":"22cfd9bdc4fdbb790fa5a84d3a9f8f70","sha1":"614d173bcd43f24572daa14542181b864c3a76f5","sha256":"9efbca1ba27e5a2141fa1a14261cdd259dd5c0059e9db0ad240fd72430817ffc","sha512":"d80b24d5700efd881fbf46615672dd608a339f48636c1ea20f8eda6ff435efed58573ab8799713462e938263e13e2346eb586cbc05572dad9f57a9759e37cd0d","ssdeep":"1536:468Ec7LZJxs5asdrxot7Yit6hMfpW8MRj0sm3ex035G:ub1fsRyxYiIRI73Iy5G","tlshash":"ef9302b530bc3998dc57c13818c62b16ba3ace7f16797a4e3dc07359aaf235d930448a","first_seen":"2025-01-30T05:50:30.195254Z","last_seen":"2026-09-01T14:07:08.150746Z","times_seen":27,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/s1.mp3?1788271545967","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.975Z","timestamp":1788271545975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/s1.mp3?1788271545967 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 137925\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":137925,"size_decoded":138165,"mime_type":"audio/mpeg","magic":"MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo","md5":"ff0720276478d7649fc3ef04b0e98dca","sha1":"b403bf826d8aed685bef84aeb2bc20a55b8e3641","sha256":"4cbf0db3540633936ed5400058836893e30f2de859749fc4e2f9c1ef4e0d40db","sha512":"1324c40a77ae8fa291c8266b5240de64ccd45de85c435695abc190fad00ade26957a869666e711e54fd67013168cfd9b2d32bbac60ac823c32a373a6063f80f6","ssdeep":"3072:O2dTEXJgKFf4zd3oEPshux4DswxwpMxeT6tF1V7seRwWc9:O2dTEXJgef4CEEhuw9SGF1axz","tlshash":"b9d3125d5130ba9ef4852cf18d3aeafad0582de3d4c7d4a396b93040296b8e64f15f0b","first_seen":"2025-01-30T05:50:30.196844Z","last_seen":"2026-09-01T14:07:08.123881Z","times_seen":27,"resource_available":false,"data":null}},"time_used":638,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/css/animate.min.css","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.476Z","timestamp":1788271543476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/css/animate.min.css HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 14:05:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Feb 2021 16:08:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4828\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":71750,"size_decoded":5188,"mime_type":"text/css","magic":"ASCII text, with very long lines (65348)","md5":"c0be8e53226ac34833fd9b5dbc01ebc5","sha1":"b81ef1b22de26af8a7a4656f565fbc91a69d7518","sha256":"5fbaeb9f8e25d7e0143bae61d4b1802c16ce7390b96ceb2d498b0d96ff4c853f","sha512":"738daa4d2c3fc0f677ff92c1cc3f81c397fb6d2176a31a2eeb011bf88fe5a9e68a57914321f32fbd1a7bef6cb88dc24b2ae1943a96c931d83f053979d1f25803","ssdeep":"1536:h6uNQ3fdPwwanleMf72yMPkZ8PFwh1nAukdDO3Xyr5Ir5eh0dTo:AkZgwh1nAukdDO3Xyr5Ir5eh0dTo","tlshash":"a66329ae4891128990230f6787cd5ea84b3dc6a355721cee33552c0b8b46fee73de617","first_seen":"2023-04-05T05:17:37Z","last_seen":"2026-09-01T16:30:06.088437Z","times_seen":33064,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/particlesjs-config.json","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.978Z","timestamp":1788271545978,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/js/particlesjs-config.json HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\nlast-modified: Fri, 12 Feb 2021 16:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1971\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1971,"size_decoded":2215,"mime_type":"application/json","magic":"JSON text data","md5":"7b971a1098308d67cf828f59bcf1bece","sha1":"0f068e4efb544a520db2c27b47712f2e69dcdf6d","sha256":"4c3477d1e3c44f7a3e6050fb1506137305242976d148a7d666501d1904ca273c","sha512":"e2d7b3d6a37f1e1b9a4d8373fb834eca8c669c3a6f92f87a5c39699bfe72793a58d8f98763043937bf153e7b361485c851c5bfe21fa0e03e6604385ef5297fe9","ssdeep":"","tlshash":"2841f42de9b41cb3108ab03908be9247b53095574d2e3d35b98c858c5f0ee3da2be7e5","first_seen":"2025-02-03T16:45:43.667326Z","last_seen":"2026-09-01T14:07:08.109184Z","times_seen":23,"resource_available":false,"data":null}},"time_used":636,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":636,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/css/a-c-c1.css","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.478Z","timestamp":1788271543478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/css/a-c-c1.css HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 14:05:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Feb 2021 16:08:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 437\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1134,"size_decoded":796,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4bf396f5cc23434d72b75a79747a86d7","sha1":"24fe2581460a181b19c8eff35d30e3f2121a5e0a","sha256":"48ff3b1d77cd903c710321a1c72b0f8781b680063fe0cf6af97742b8f289ff4a","sha512":"0b204fe46463d70127dc36703d714a9f138114d3412243275d92d846f3cd2722a03179fe26591aa15743adfde7a7c1c271aad778de00eea85b6e24e3136e8c18","ssdeep":"","tlshash":"9821796ab08610def35287d7ba39c220ea5ca1bee808c72db53d94ed631309894b3506","first_seen":"2025-08-13T10:44:08.443025Z","last_seen":"2026-09-01T14:07:08.104984Z","times_seen":78,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/a1.mp3?1788271545967","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.972Z","timestamp":1788271545972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/a1.mp3?1788271545967 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3588\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3588,"size_decoded":3826,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.2.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Monaural","md5":"354741cede54ca89f156d6dff8cc165a","sha1":"d294411cc6175b64c3cd130b170089d1b7d88292","sha256":"5d869890fedeb7473649e57bbe00e5a421b01628c88cff251053d6179e89f61e","sha512":"ae419021abcb84554ab4802e0573c30203a58a162f8509d6f4435074ec1a2062617a0a78a84464218abc9928c7a8c1194e33d1f2bee91978ad2fa31d613dca81","ssdeep":"","tlshash":"fd719a6018646147f71199bd507e3b5da41d3dfbf6e513e34d90f726c454014836f5a1","first_seen":"2025-01-30T05:50:30.203789Z","last_seen":"2026-09-01T14:07:08.138437Z","times_seen":27,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.473Z","timestamp":1788271543473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Roboto:wght@300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 01 Sep 2026 14:05:43 GMT\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":2505,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"3cea73386a7e4118d4e8d76e2356214f","sha1":"6e1e2ab940cf199d4c8162819f251aba86bba70a","sha256":"9797b7049e90dce53a98bc42da75f326448da5ef73d3229a428eff4b6435c7b9","sha512":"d74e227ac5969d5ff681f542495a425b7a23119a47dda5bdda46b8bad4bd14eaf0fe139ffdb00e2a11a764bbdcb813da9eac0a9b476228c214876184a62f2284","ssdeep":"768:pDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKyg1A77YGRvsk8:pyllff","tlshash":"41c210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T02:22:43.631773Z","last_seen":"2026-09-01T14:07:08.078867Z","times_seen":2758,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":37,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/css/bootstrap.min.css","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.475Z","timestamp":1788271543475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 14:05:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 12 Feb 2021 16:08:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 19930\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":153111,"size_decoded":20291,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65300)","md5":"bbf4700154b05c5746c74bd564a029a0","sha1":"ab7488a15c939ad7c54aad790430b7b9a2d77eae","sha256":"0267260045096457f26914277f49eef5da5ec54ac6aee8579be4810332e518b6","sha512":"b61a21daf781df9a239408726190b479aced4c0521c4bbd26655ab36d955d359e3aacfd4758df8db5260ee55f41aaf5245d19541e2fcc5e069f71d483f22f5c1","ssdeep":"1536:TtfJxYrkplD+sEBpy0cuJc222DWg5SNVUpz600I4fS:TtfJ1NVUpz600I4fS","tlshash":"40e383dbf581241dd4a7c219a4d1bffd052f5686e3025eabb0277bb88b492c70963e4c","first_seen":"2023-04-05T06:29:21Z","last_seen":"2026-09-01T14:07:08.083601Z","times_seen":1429,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.4/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.480Z","timestamp":1788271543480,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.4/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29725\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 04:25:00 GMT\r\nexpires: Fri, 27 Aug 2027 04:25:00 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 466843\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84380,"size_decoded":30709,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32025)","md5":"4a356126b9573eb7bd1e9a7494737410","sha1":"8258d046f17dd3c15a5d3984e1868b7b5d1db329","sha256":"22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5","sha512":"005c3102459dbf145df6a858629d6a6de4598fafe24cd989d86170731b0c3b3c304da470cf66bfd935f6db911b723df0857b5ed561906f7f1c5c4e63ed9430de","ssdeep":"1536:/P10iSi65U/dXXeyhzeBuG+HYE0mdkuJO1z6Oy4sh3J1A72BjmN7TwpDKba98HrZ:++414Jiz6fh6lTqya98HrZ","tlshash":"dc83d6d9b2c67062977734b851bf510bb17a98dab40c8c60f0a4d8e47eb4a8d517bf2c","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-01T15:26:22.579497Z","times_seen":20322,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":15,"receive":14,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/particles.min.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.484Z","timestamp":1788271543484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/js/particles.min.js HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 12 Feb 2021 16:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5740\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":23372,"size_decoded":6028,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (23002), with CRLF line terminators","md5":"08bd8ed926fa216a54b076590a459e67","sha1":"b4d9a963b9200cc77ceaa1bf4a12537a29c0626a","sha256":"e143ea82cbb391479838962ed3a39a9f2319679ddf33e689217d26b0e206d724","sha512":"7f5bf533e4151c0a84bc10909b1ea78ccd16d9f0cff336108e61402ef94df6389972a4ea01926b981cb79747d57512ca6020271b4f5111e72f4b1102b8f2dd73","ssdeep":"384:FkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:FC7T6uYvn8wRxwyryVOEKXW5","tlshash":"42a2934d23f73e77339ab2e05be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:17:29Z","last_seen":"2026-09-01T14:07:08.087289Z","times_seen":2583,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.841Z","timestamp":1788271543841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donatebux.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 78460\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7aw6A8TaONHuxlwp0zlXJSDBb9mh4cRXDHyFUsr%2B3WpaQXjOWGmn8fHuFmyXP1kIDDIXtJ5fghG5WZRJdZAXP8X9UMpe8KiK0ZNgJsCj5R5SjYPfdOrxvs7rOYNuGD4WPi71mNel\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a344d4dd08ae569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78460,"size_decoded":79441,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392","md5":"f075c50f89795e4cdb4d45b51f1a6800","sha1":"f726c4275bb494a045fde059175f072de06c01df","sha256":"71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba","sha512":"5f4f35e9acdb825a245e678a834b2bc6d5c302693fffc3497717024c2d8385ffdeb233d4d7f368f1356a2adfcaab0a89157edbcca45b9f310f1cdd7f44cac955","ssdeep":"1536:uZWBokruo7jgeq3Yv8E9MjaR3yOWaaqPbkJSmMlckzeSUSalX:sWBbuo/vqov8yTS/qPmMekzyx","tlshash":"7b73124d6fe2a9eaa9bc3f332fb38412ac819d654bf2c1b3055e12d51c8177da8d4135","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-09-01T16:14:40.091043Z","times_seen":22465,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/b2.mp3?1788271545966","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.970Z","timestamp":1788271545970,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/b2.mp3?1788271545966 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13653\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13653,"size_decoded":13892,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo","md5":"4da4440fee11db675c1433e55204b571","sha1":"fbeae414e4dd16f39433e29e7cd50293f6cff264","sha256":"0dabf326accc19cc9b84924d717dbec278d19261460bd163a1b0072ca50a7e8b","sha512":"118da83ba9f00171237002e716f2ed6d2568be7203cdb34ee5d88d0f0e762f9a589ba14cc0bbb84ed4fb4facd25f64266bc42e6fdeb4a5d09a231747817f2a94","ssdeep":"96:GJPsI4dYdjaT1eAd/+QsdHAKgzn+kFKn916SQYqkF1t9pNjrTqnP3I6McorWhKvI:UeYdjKh9CHAJqwSyknpQnPY6McEWxyI","tlshash":"61528d69c30133acd44fbb777623476d6fc42c09aa04cbe19054fa4ca0b91b02aa379e","first_seen":"2025-01-30T05:50:30.187816Z","last_seen":"2026-09-01T14:07:08.122579Z","times_seen":27,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/a2.mp3?1788271545967","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.973Z","timestamp":1788271545973,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/a2.mp3?1788271545967 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 21987\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21987,"size_decoded":22226,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, JntStereo","md5":"ae9d762e1cd9c886cc7f34b125df25d5","sha1":"007be76eb6cf2edef7ca49c3f97b0c2ec56e2130","sha256":"b0034a059e548c5b499d9ecbb2f3e89444840ed7c9207e726799d553cb3c971b","sha512":"fd47a2096153f7a6ecce58528f127c92bc27e4d7bc00a42556edd59ca29984adf0dbecfb04f1e1765b3ffca8ceaba3eade02d2aba130e0d009ec35083be88af5","ssdeep":"192:8zEdRtTvv6nb9w93ZjeCRdaNu2boTfq5fvtb1aVgTy8vMlbi5MdqY:84F7CncVUU1+brTkgPY","tlshash":"5ea2aed3e8d4a6a0f2278f38d7ef47a2c8410440eb64de46b16eafb4533f5073969465","first_seen":"2025-01-30T05:50:30.191681Z","last_seen":"2026-09-01T14:07:08.081397Z","times_seen":27,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.471Z","timestamp":1788271543471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://donatebux.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10491\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeqgZGx7kkFC4USCYDb89xh6a7%2BAKyo2vamGXg77a9W0T24ej7E%2FE6t276nSAsg%2BAAgMHI2zwJE1%2FqORlkRQ78skdK%2B9Z1HArRfLap2xdvFGyz3Oxy0Sugmcr5MXSs1A%2FxfOpBFP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a344d4daddb8569f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59344,"size_decoded":11488,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59158)","md5":"b227b1617a1763c8bc056772f05482b4","sha1":"c508528feb9fd540454f838653cd4863b290df2e","sha256":"af1e6edc875a382b338bb25bd7c5c3f474a7f1b36212002a5896dd06f2186325","sha512":"fb8cc22bd93ea8d1544795fe70a2fd10847e64e86d225a0d97d188292e7b57533236c62961c52b51e41cf6f35fcec59f576f0868b2f78bde8ff6c74dc9e46cb0","ssdeep":"768:OEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:OE0PxXE4YXJgndFTfy9lt5B","tlshash":"c743fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-09-01T14:07:08.097832Z","times_seen":12435,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":3,"connect":22,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/drc.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.485Z","timestamp":1788271543485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/js/drc.js HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 12 Feb 2021 16:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13736\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":47513,"size_decoded":14025,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (47513), with no line terminators","md5":"78da37bad7fcacb91fea3212b56d0927","sha1":"55a0a49e58870b153cd2a0ccb9ba89857e7d70b9","sha256":"b3c2c181c9a42cdd5bf2225870a58c079ea867cbbb7aff1a6314fd9f62999cda","sha512":"8f4ff61bb5ac5f686262292ae2d0acfdaec8153dfcf01f662e70838129f7be757e5a7dea1e59dfd538c7b6fe544f8fc4c9b0d401b8a54aea9cf1ad3c289db2da","ssdeep":"768:u23MrStcT21VRDW2F1W6IuoldRHmc1CloUbpOuEEK4w08gBmHJY/XWDjBdVzgfDC:j3M+t365Dh/ewVMocGhCnzTqkk8ArF","tlshash":"9a230f85b3c1b88103cb9b7a735fa1e9e52e5ce93458084fc102fcd0f5b991ae9e5a74","first_seen":"2023-03-10T21:16:50Z","last_seen":"2026-09-01T14:07:08.121219Z","times_seen":120,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/main.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.486Z","timestamp":1788271543486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 13 Feb 2021 17:13:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3828\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19159,"size_decoded":4116,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fe7166285f2074b1c4ffb3667bb99889","sha1":"3c7a69b2672a5db7e883640cb105ee6ab9018ac4","sha256":"08a53a61a946eb98ac84d93c834b5cce62cae1ce154fb445b77fcf8c0e11acaf","sha512":"12ed67c9d48a62ff67ad22e2273fd746ca1a09f942470b74f78deda2dc4da188e1e70e3b73dbf849cbc56649b597b0810bf2f8d958c3b1f61b3adf389dae82dd","ssdeep":"384:UnJi5ZOtw2RwFZE5+U62IgH1a010ytpfJl50mM4B:vKNw0+U62jH4010gj50mMc","tlshash":"688230a1732d54bba3b77363403f855aec3de872840201fafa7c644c6b74954a326d6e","first_seen":"2023-03-10T21:16:50Z","last_seen":"2026-09-01T14:07:08.146709Z","times_seen":105,"resource_available":true,"data":null}},"time_used":470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/img/bg-o.png","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.822Z","timestamp":1788271543822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/img/bg-o.png HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 14:05:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Feb 2021 16:09:02 GMT\r\naccept-ranges: bytes\r\ncontent-length: 187578\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":187578,"size_decoded":187896,"mime_type":"image/png","magic":"PNG image data, 2560 x 1440, 8-bit/color RGBA, non-interlaced","md5":"f945d2afc2b7aa925edd1b6f331e4a11","sha1":"cfa1c52233dc36a3aa3a22d015375307c0e31835","sha256":"51f5b8d58b05a88e8e1a22a846cec02ffa934615be00ef16fffe35886f1c7169","sha512":"6c7b1ffd3b7056e0cc962aae846a2b298e0ac9874075268fd5538eef78778424fc74d64917bbcbfd0857e3c51e023bb832e9a35e2d11a67c28b7659b6eb368ad","ssdeep":"3072:5/z5kztq2wIvqZMglvDV42QWaZ3WOQgHHiN1lH2X16itcm0wAL3z6zQh+GtSMMG+:5riJFjvqZ3BFQWDFgHHiDl06xJDCQh+f","tlshash":"a704027cdb42dc654192c80cbffd3adad1636778c867fcf0587e920842951b8a12aadd","first_seen":"2025-01-01T22:41:18.106178Z","last_seen":"2026-09-01T14:07:08.088429Z","times_seen":93,"resource_available":false,"data":null}},"time_used":457,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/b1.mp3?1788271545966","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.968Z","timestamp":1788271545968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/b1.mp3?1788271545966 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4096\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4096,"size_decoded":4334,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 320 kbps, 44.1 kHz, Monaural","md5":"7a7b2ffdfc59a4836b6ed337474b4b04","sha1":"d70345b8e804d6d68d9a502202f9c1a0f980ad04","sha256":"c6190dac6a7b8f2776233844982f18254798e0125bcd401437ab6825734cd452","sha512":"e0fb6f623ea63963358885902d9349fc48bf1d502715a55daa2a4c8974723c389f04bfca786c50f1c1b2b88664c9dd998b7584171a2ff1d4a882c318b2be55f5","ssdeep":"","tlshash":"4381dbc36741015ec7d90b701925153501c9eded440abcaf690f36614d7c9f53e9a4f0","first_seen":"2025-01-30T05:50:30.190287Z","last_seen":"2026-09-01T14:07:08.111335Z","times_seen":27,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/c1.mp3?1788271545968","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.977Z","timestamp":1788271545977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/c1.mp3?1788271545968 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36824\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":36824,"size_decoded":37063,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Stereo","md5":"3b64395d13e0bc13c5c9b29bb169c0b3","sha1":"b12ccba5f119803fd3d8f89f0ddf6c89fc95ad0f","sha256":"8e91f5cd9c3c1f647689e7b876bdd5a89f773bd89b830986afac1a3e8f6ef07b","sha512":"0cd69651b3c9c42f349345e9a2cd7992c31d0cd3a970c3de90c6727a2f7ecd527377a46a078f525fa5dc4ae7cf32fadb342a8bb9d1ef7a7286d5f983d36e490f","ssdeep":"768:OAtnIZ3ls3SLwNty4aOXbmV1I5YgDTTMkexo4ncknP:BM3lsZyUiETTMkyckP","tlshash":"acf2f153ae8a8709f1d16ab28f8e2f95d8b52ca4f10c720cf2b47a9724371a4075d41f","first_seen":"2025-01-30T05:50:30.193304Z","last_seen":"2026-09-01T14:07:08.076812Z","times_seen":28,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.linearicons.com/free/1.0.0/icon-font.min.css","fqdn":"cdn.linearicons.com","domain":"linearicons.com","tld":"com"},"ip":{"addr":"138.199.37.229","port":443,"asn":60068,"as":"Datacamp Limited","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.467Z","timestamp":1788271543467,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.linearicons.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 13 Aug 2026 04:04:02 GMT","end":"Wed, 11 Nov 2026 04:04:01 GMT"},"fingerprint":{"sha1":"F5:D0:58:7A:47:FE:8E:F5:6E:B3:A4:84:A5:F6:89:27:B9:A8:D6:61","sha256":"BA:8A:78:53:1B:B0:9F:1A:6D:51:24:3A:90:36:42:35:33:87:AB:E1:95:84:C6:18:D7:E9:8A:3A:65:DA:67:40"}}},"request":{"raw":"GET /free/1.0.0/icon-font.min.css HTTP/1.1\r\nHost: cdn.linearicons.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\ncontent-type: text/css\r\nserver: BunnyCDN-DE1-865\r\ncdn-pullzone: 1459430\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: zstd\r\netag: \"ec26292e52e5bc20624b029974bd0adf\"\r\nlast-modified: Wed, 07 Jun 2023 23:52:14 GMT\r\ncdn-proxyver: 1.41\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1047\r\ncdn-cachedat: 12/02/2025 21:54:03\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: d8540031e9622cca144ad0ba85a7737f\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7354,"size_decoded":2593,"mime_type":"text/css","magic":"ASCII text, with very long lines (7191)","md5":"ec26292e52e5bc20624b029974bd0adf","sha1":"3756375bb053b0f3f62303597d844f70cef1b5e0","sha256":"31ca8fc4bb190118851959f282909af4a8f6e782b69dcfbe00094ffc010878b3","sha512":"282b62aa79bd9b407cd3241be6629e8aca4f19331ecbf33a6d3c7fa7dea507ed507a729eaecea7f519b6967387bb97f3af0a3f6fe803d9f418441b9cf7a7820e","ssdeep":"96:udwakAhvZFamB/0/Q5pcK2kb2IYT4naMq4kIaVBX1j2qLQ:udwabhvZFdBhocqIYT4faVBX11k","tlshash":"3ae1ece6e44964ccb7b1c813b389a78964eab134d9410e52f45fb51e2cf126b2ec4f78","first_seen":"2023-04-05T15:00:08Z","last_seen":"2026-09-01T14:07:08.10347Z","times_seen":3070,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":4,"connect":22,"send":0,"wait":26,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/css/style.css","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.477Z","timestamp":1788271543477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 14:05:43 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 13 Feb 2021 17:12:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3924\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":20722,"size_decoded":4284,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"9088128617b3b9d5ae5c431441cb4941","sha1":"8ca73cae523d335491c42c76bdc111f26994aacb","sha256":"e0ad316b0d6f12e5663362cdfb3892fc40eb9d817a42e0940b5e2cffe0e29654","sha512":"c64b89687fe4d95cd11779c4b4543e133784d0a8aa7f19b8dc717a6483e119c2f6b02d080c97e0aca61a0671c9fcf3dfe25bcd5f14a3a68d999198e1913602e8","ssdeep":"384:QW0sTfrKKadlh0IgXDPu++h51o6eB3BsUC5j1hRjpKN/KDJDeuK6pyG4zDGJPIxL:z0sTfrKKadlh0IgXDPu++h51o6eB3BsW","tlshash":"1e92426abd14204ca356e7a63fb41fb1dd6884636a0700ffe1a2294cd2d747c62be7d1","first_seen":"2023-10-16T03:19:12Z","last_seen":"2026-09-01T14:07:08.102278Z","times_seen":120,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":320,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/img/logo.png","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.492Z","timestamp":1788271543492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 14:05:43 GMT\r\ncontent-type: image/png\r\nlast-modified: Fri, 12 Feb 2021 16:09:04 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6151\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6151,"size_decoded":6467,"mime_type":"image/png","magic":"PNG image data, 400 x 124, 8-bit colormap, non-interlaced","md5":"3b9109ea46d68693f6af62152bdd9937","sha1":"3fbb6d0a85182c9ad102b2235b7ef9aa4b85ea20","sha256":"f94fd4cc62e282b15bd04068ba382719e96fda41ac81bf20dae538858c420f6e","sha512":"4b7dd2bd17672c438ad84a394c500fda2e1d9fe04375a1a699870130e2f7071100c891a71a0f30626f0b233401fd79ef25e5f8e5d97b70c4152083b591c2c309","ssdeep":"192:SknG7WcSuMU7BG5+Hk1omJdhJlbw5hP7m:RnGibIAEEFdhJlbw5hDm","tlshash":"c6c15a5afea46c11fa8d5e7b0cfa628b533f82a0c88184949ccf98425c2027c575e28f","first_seen":"2023-10-22T22:01:18Z","last_seen":"2026-09-01T14:07:08.107835Z","times_seen":16,"resource_available":false,"data":null}},"time_used":466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":466,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.837Z","timestamp":1788271543837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donatebux.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445685\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-01T16:33:41.576177Z","times_seen":282574,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":42,"send":0,"wait":19,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons|Material+Icons+Two+Tone|","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.470Z","timestamp":1788271543470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /icon?family=Material+Icons|Material+Icons+Two+Tone| HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 01 Sep 2026 14:05:43 GMT\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1234,"size_decoded":1128,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"9157f838cd69bf2b1e7472c618eaa901","sha1":"ebf7aad62fbf3fd24ab1984319e0fee967f7c472","sha256":"f1f372448cd7f13713a248e63edc1f46fc794764745d2ef56bf14cea6cd9dd74","sha512":"348a74e39162e896a2bdc5469874ba8d489fd61b2b3bf5872a3bc35da0191225e37263fa13bb95156306c046812c6672fd34198d3e04a0ccdadbac9aad79daf1","ssdeep":"","tlshash":"5221df65ba1a988665110c47730f3f154d2d401f680ac8fe8b851d8c8dff1bb134670f","first_seen":"2025-09-18T05:14:30.22719Z","last_seen":"2026-09-01T14:07:08.118789Z","times_seen":337,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":32,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.838Z","timestamp":1788271543838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donatebux.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445685\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-01T16:33:41.576177Z","times_seen":282574,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":29,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.840Z","timestamp":1788271543840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donatebux.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445685\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-01T16:33:41.576177Z","times_seen":282574,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":35,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialiconstwotone/v113/hESh6WRmNCxEqUmNyh3JDeGxjVVyMg4tHGctNCu0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.842Z","timestamp":1788271543842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/materialiconstwotone/v113/hESh6WRmNCxEqUmNyh3JDeGxjVVyMg4tHGctNCu0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donatebux.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 215704\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 31 Aug 2026 06:42:41 GMT\r\nexpires: Tue, 31 Aug 2027 06:42:41 GMT\r\ncache-control: public, max-age=31536000\r\nage: 112982\r\nlast-modified: Mon, 16 Jun 2025 20:30:02 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":215704,"size_decoded":216518,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 215704, version 1.0","md5":"e2c22f8cedcd54788de212b3bbea8e55","sha1":"296ff0bff395a77c2e33e7e31fffe73980bd93cf","sha256":"1e673ba8589654794d2ad375c2873f1870a4578f2b3e847dcc407add03b57ac2","sha512":"13950b8ac95cd4d9b7d569d49fc7d39a3c4ca1b743c5cccf5a697b1c7030e36c6872e5bbce998e19b4056c504a6c8332dfebad7d55d720ed9b40927f31818a28","ssdeep":"6144:1ntWY7JihyTtR7jf6i+02QnWe3hEm0ItmqkFBbABirib:1ncYF7LNWuEmjtF2ABirib","tlshash":"ce2423dde7aeac717ae3a07458957793188ae2b64506e1d8e93f711109c0f4d8b0ea81","first_seen":"2023-05-02T06:36:01Z","last_seen":"2026-09-01T14:07:08.135921Z","times_seen":347,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":47,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/a/s2.mp3?1788271545967","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:45.976Z","timestamp":1788271545976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/a/s2.mp3?1788271545967 HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: audio/mpeg\r\nlast-modified: Fri, 12 Feb 2021 16:08:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11861\r\ndate: Tue, 01 Sep 2026 14:05:46 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11861,"size_decoded":12100,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"0c977f616f1f90b79b6b07c3ff9312c4","sha1":"a51528153061a4e6825e4e2cc3c22c946574f3ac","sha256":"cafb44c566679d597109fdbeb3b999625aa24066c5333e6e9840276b63c9be18","sha512":"cadccab45ea9f89fa6205f043ded6ac58d1e32d45ba6ad1833a422bbc2e132f815d4e01dedb69a19d24fd700d3c89c05cedf81d2673aadd58826f5eec6c1a915","ssdeep":"192:f6CxO2wzb5FyiMOgHwaYRQEg8tUNgeGCAHC0KN52bTiQi/cJ/b9u:f3szFFhvgQrvY2FCgCfsb+Q5A","tlshash":"ba32ae00c91ed304f5ba54f8fc881178c129bea245b74e5899d4a7c8b6fbd8403ab469","first_seen":"2025-01-30T05:50:30.18273Z","last_seen":"2026-09-01T14:07:08.08285Z","times_seen":27,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/jquery.countTo.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.481Z","timestamp":1788271543481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/js/jquery.countTo.js HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 12 Feb 2021 16:09:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1030\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3761,"size_decoded":1318,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"acad36d38da9f68c52bb074b2c478d0f","sha1":"922c71c5699f9306a415a7a344be46d92e0fc4a1","sha256":"00619814b3b256720a9ffd9408397d0ffe5559ff301d608eb66f585343fd83a2","sha512":"5be7c4d8f9e001a527d75e1fa0eb63edb24d0eaaea00d2ca8c66fa832cf5e7d868175f8d9c45917e042d1299f79022e3425510fc50214ec9a6a9034ec7f4413b","ssdeep":"","tlshash":"46716d49bbef2111956b20dd5f5f114c3234932b144b8548799d93c08fa6839e6eafbc","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-09-01T14:07:08.144458Z","times_seen":1449,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/js/ion.sound.min.js","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.482Z","timestamp":1788271543482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/js/ion.sound.min.js HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 12 Feb 2021 16:09:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3113\r\ndate: Tue, 01 Sep 2026 14:05:43 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12860,"size_decoded":3401,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (535), with CRLF line terminators","md5":"b710025e9615bd7373ec7cd49e21a99f","sha1":"4f831a37b333a2f39b6cf4d8d43b7f07ba8db4f8","sha256":"1520e67c06c2b44c67aec9833b5f1c5324c2cc8842d82f7cc3509adc34c95a0a","sha512":"45331a852e455bb4d56015cbb6728a55065b3c090291d8c61614c4a366a1d0729e20d7902d407bb97d5ea8717db060bea3ddb3a0c365cae85850663dfa9cb0c6","ssdeep":"192:Ixtd1gpzHtptP1aymRglPkOHZdOc72XIPuC1Yw:IfgpzlDAglPdic724Px1Yw","tlshash":"26424f1f7181f76551e6eaea205b034e0372e17a6884469d3d3cebf6ed2190f503ba78","first_seen":"2023-03-07T14:20:11Z","last_seen":"2026-09-01T14:07:08.106613Z","times_seen":298,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":316,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:43.838Z","timestamp":1788271543838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donatebux.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 27 Aug 2026 10:17:38 GMT\r\nexpires: Fri, 27 Aug 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 445685\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-09-01T16:33:41.576177Z","times_seen":282574,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":20,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donatebux.com/assets/img/favicon.ico","fqdn":"donatebux.com","domain":"donatebux.com","tld":"com"},"ip":{"addr":"68.65.122.192","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donatebux.com/","date":"2026-09-01T14:05:44.881Z","timestamp":1788271544881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donatebux.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sun, 29 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8D:4B:B5:0A:74:7F:8A:3B:EF:C6:33:C0:D4:CC:58:20:11:74:63:93","sha256":"37:BC:71:60:20:02:30:49:9C:24:00:A1:2A:38:EE:D1:6A:A1:C3:DD:D3:E4:85:D0:6F:A1:EE:21:39:3F:A8:D4"}}},"request":{"raw":"GET /assets/img/favicon.ico HTTP/1.1\r\nHost: donatebux.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donatebux.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Tue, 08 Sep 2026 14:05:44 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Fri, 12 Feb 2021 16:09:06 GMT\r\naccept-ranges: bytes\r\ncontent-length: 1150\r\ndate: Tue, 01 Sep 2026 14:05:44 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1150,"size_decoded":1469,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"5e509e89186ee42ee1269373e7b12c56","sha1":"886395ae03deadf87f91fc2490b88caffc3ede2d","sha256":"7ca19be4423bb99022525535385395d4afa5afc8ab993c6549d445321c2e4f4b","sha512":"6f6c43a911843c030f41ed28674fe4961a9fb5df8f5ff16802038449362e62e5ee15bc8b9b1792ee8d697058da0b593c6cc06e5958bcdce2c50b4dffd2661c6c","ssdeep":"","tlshash":"9e2194285d2e0a0cf2a7daff62026b434092c82b93f00ad727f110cd5c5b3c02870e59","first_seen":"2023-10-16T03:19:12Z","last_seen":"2026-09-01T14:07:08.110082Z","times_seen":115,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-01","alert":"Sinkholed","trigger":"donatebux.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}