{"report_id":"3951d6ab-2494-4a7e-8860-93504c520eb0","version":0,"status":"done","tags":[],"date":"2026-09-29T21:44:30Z","url":{"schema":"https","addr":"privateaimfortnite.sbs/","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":0,"asn":132359,"as":"M/S ROBI TRADERS","country":"Türkiye","country_code":"TR"},"final":{"url":{"schema":"https","addr":"privateaimfortnite.sbs/","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"title":"Rifted","dom":{"size":84603,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5322)","md5":"bb62cb8b86d821a0adadf6333ddd0aaf","sha1":"10674bf938a7f1e699acb7bf7521d6f0203a1d55","sha256":"3ce7fc2d4ba1c9919def1b8c8be145e0c45ff11a16df4a740650ebca641ba8d1","sha512":"c996d1046b3fc3de7004e2dc0560aad919d871200be2e20b2266cb9ede37082b4ad2b25b499531c02db461d08193fe60d8c7c79cd7de90d96fc7ba13dd685fb3","ssdeep":"1536:yjCD5lPlt/+DSib6lXU5t/+DiKOQOvg1Oysc0/RJ:ymDdUbKQJJ","tlshash":"288308a1a0e054b68147c7c0fb356b162d89a2a7df46054872bd8af0efd9dd0dc2f86d","dom_hash":"domhash42348713c04ca7ebd31de97e275e0681","first_seen":"2026-09-29T21:44:40.803996Z","last_seen":"2026-09-29T21:44:40.803996Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"privateaimfortnite.sbs/","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":0,"asn":132359,"as":"M/S ROBI TRADERS","country":"Türkiye","country_code":"TR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T21:44:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-09-26T02:38:05.71212Z","alert_count":0,"request_count":17,"received_data":17188,"sent_data":9214,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"privateaimfortnite.sbs","ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-09-09","domain_rank":0,"first_seen":"2026-09-29T21:24:12.54429Z","last_seen":"2026-09-29T21:24:12.54429Z","alert_count":49,"request_count":49,"received_data":7224204,"sent_data":26295,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"privateaimfortnite.sbs/libs/sg-min.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"7f45a1ef5c6fb002cb10f080e29916b6","sha1":"b53407fc3a5c5c39639147e0e3bc8f4f5e3736b0","sha256":"54494166c8678628a4fa8152ca2f93bbf6268f87d6196147743c007d5b091de1","sha512":"4b8386bfda44912e6078bca9e77b9295ba3f88850f1234aa88a17b07671b6f1bee2f8555fae8eb50ab59cd537ce3ce3e9275f5c07dbacf4514d5b0f8e926119c","ssdeep":"768:7d3WHjO1vjEAtvRgMU879GxYuz4STg9IWC4Xu0RDh4qEX6XYceXmDCG7mproLxjk:xGCtjEA61/xYS4H/W2Nu+1MyA","tlshash":"a0535c96f26170f116e324b4749f5107a33e5ea38c098651ea32cd656dbce438273fad","size":65331,"data":"","first_seen":"2026-09-27T19:27:14.722582Z","last_seen":"2026-09-29T21:44:40.82257Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/feedback.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5d3f935e28f006cbd920c33bc7dca1e","sha1":"8b378e99a6d452be3f1d6b94ea44992f2760c6e1","sha256":"353c4d24ca33e7a51a0630ec36b10940977041d103fbffa7d23c24eb5f48cf80","sha512":"7bda5cbb33e719166caebeecf5469d83247b13bae1bf1e5cf868a0487cba3ee2fd4eae619d18f9c43d2398f7da5bd247a41e54f635bf821360b997fb6cf97c1d","ssdeep":"","tlshash":"e9519500d0b4113f4668509a7d6a9332029da6c3da5125f83eaf41b88f6ec8cbdb71bc","size":2634,"data":"","first_seen":"2026-09-29T21:24:18.762591Z","last_seen":"2026-09-29T21:44:40.826757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/faq.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0be0315c8bb39d55dcc3acab540122b4","sha1":"9c38013dbee9d0fc007e197bdccd100505c9d2c1","sha256":"a5fca849873da6bfee727b80d31beb05e2a86f2314a0f3668aed962251eeca95","sha512":"3d6b4055428ac953cbae793334c82e15820e7e5ec5cfe43bafb2ecc9204d41d74a0a380cf6d246cbe6289843a77b98c7cea07c2e0b27fdb2836c34fc775841a3","ssdeep":"","tlshash":"d551845f62f46176056742e6b21b11a13635a043770a7c243a3d908c0fee85a6b7f1de","size":2572,"data":"","first_seen":"2026-09-29T21:24:18.712013Z","last_seen":"2026-09-29T21:44:40.847606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/header.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e02459d4991dd3a918292c56d0e4aa4","sha1":"925effb2a43895dc142b22347dda63234c3abed5","sha256":"fd90c55b3c5a33c1bce146983f71617b0a2f4eb7ace9350d7ee0f4a06b864e84","sha512":"0bdb9d18e7f684d2be45b668111054d9bd42ecb087f60fa4c7b68529c7bb4f6c81b0eedcab4db95e1be5644d21c25ddec7dbb9d5f9501d68e3d440af958ba36b","ssdeep":"","tlshash":"a441012fa139357f487711a793d797a433160047a085da127b7c068a1fc7a90edf39e8","size":2176,"data":"","first_seen":"2026-09-29T21:24:18.706418Z","last_seen":"2026-09-29T21:44:40.823768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/i18n.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c95cdcfbf687c319b13eed29b652ae8f","sha1":"26d2fda4455e9ece43b438849672717bcaed57e9","sha256":"7f84a661c7b4ac065f29bb6f4cd91084bd2952660ba55d851d3cfb894a8d708f","sha512":"b523aa9986a3f73460a7922d0ac5b0881bb7053487084b7712070f9975f02fa3a29d49c09802c94984371b19ebf3eb6cd46f93cdcb774f865bdbe4057c654317","ssdeep":"96:ratjbXdeudfivafeRcnObrYbyDy4b2zKk72y2wsOqNqDLM8Qf5KUp1PGYitLBZsC:ratjbXd7OPYbyDye2zJiy2wsOqMD48Qe","tlshash":"8bb120f969b33122093320ee935f5a41a2e95407e501f444be4cc7042fda5bae6bdbbc","size":5536,"data":"","first_seen":"2026-09-29T21:24:18.764516Z","last_seen":"2026-09-29T21:44:40.85716Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/lang.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"47e6f12593a25c3bc3886ab837d164ed","sha1":"1ac9d3c648641486fb9268aad427e6a42d214217","sha256":"2d7513550a5afeba7453f4381cab92be9c6bc9385035f09f8cacdd2084e06dec","sha512":"eed80ad4ccb38f7941e19952288ac54c656b21566e935a00972b4822980c497605d22a0d92e9dc2f5763404c6322c18014d4301464da03b0540f65c707c44707","ssdeep":"","tlshash":"f131ce1ae175363700b312d813dbba98a22204436186df057bfc9b861fd29a09ef35d8","size":1629,"data":"","first_seen":"2026-09-29T21:24:18.684848Z","last_seen":"2026-09-29T21:44:40.854028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/vendor/swiper-bundle.min.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"f90b617a32726d60cd9326a36a097351","sha1":"9f264efecb20208ec05ac74c4a165c67abfd0b67","sha256":"1e313555b04cb9b5273b7a817158708a05f58e18f91d97a4239dab6f68d23c4a","sha512":"85b861a45055ffaf22bf2e249f45811442d0b493617a8cbc53bcc076c66b9d3e9ba1b813b62069ab789668fecfd867cc767ab3703feb5c3bd50b2e30703dfe22","ssdeep":"3072:2Qc7nYNuja+867k2GX4G5PqTlcGC2Zjj+Anq:2QEnnja+8ak2A4G5P8y6Zjj+Anq","tlshash":"b7e309886120b57546e716cb93a8c65172b54844b80ec5f870fd4caf99bec9803bfef9","size":155297,"data":"","first_seen":"2026-05-27T22:58:46.979219Z","last_seen":"2026-09-29T21:44:40.846982Z","times_seen":1119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/.rt/captcha-handler.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"75aff4e397e7a4fc8e2acac5dc4fe9c2","sha1":"62351165b855360ff7a5c7b59af98a2cd917d147","sha256":"632b6db6ae6f0efc5b3637d1cec5de879c904e39f3edcf02c04fde0f49e1fd0e","sha512":"4ace2eacc8f5b6501961be58780336d4e6ed97a305329dcce9069019002888a54ea2254acbb14907713af842938b2d084f4f14bc049ceb790fdb2a8126580c01","ssdeep":"192:fe6Vi1q6D6QN910msTCsmhyBTbJhABvblQJWdVx:Hi1PDTOnZJZW3x","tlshash":"8e22c8ca7bf1703583d361b5d42f9a0ab23a0942784e81e1e17499b47db991f8123fcd","size":10456,"data":"","first_seen":"2026-07-14T19:46:08.570172Z","last_seen":"2026-09-29T21:44:40.852148Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🛡️ Protection Active","filename":"https://privateaimfortnite.sbs/","line_number":731,"column_number":9},{"level":"log","text":"Session: d118d0c013e76f3d...","filename":"https://privateaimfortnite.sbs/","line_number":732,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/supported.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.489Z","timestamp":1790718208489,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/supported.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 52c33e50-5ec1-43b6-816f-ed46cc63bfcf\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"16db-19e8438b96c\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 5851\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5851,"size_decoded":6337,"mime_type":"image/png","magic":"PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced","md5":"5ddc96f9c243ea3a2dfbad9819e0e1ef","sha1":"6d4811c9dbaa56cf569062837e0ad768a32d7d85","sha256":"a0ebac4efd22b3bf1f1bab27b258104a920a877efc93f6aa46ccae7376eda8b3","sha512":"e3286c857da1e2ff4f16fc2bf8920a49c78397e05b06ab6d5225d847d098b503953ddbb95721a75c4a1f4402a9fc377d9c16bacf0eb9f9d1d076940d0150b9d5","ssdeep":"96:ez3dj6LmOPfe9Cb8kque8vA6BUF4GcOBrlbl1ZK0s9EMhZv00/UTZhdByV2fOTC/:S6Rokqup+LNrZdK0uEK00MTL/e2fNYk7","tlshash":"f0c17eca754a618d64f236a701b7848df0a7d5148c00e5d1b9409ca1bca9e3e37463e6","first_seen":"2026-09-29T21:24:18.670823Z","last_seen":"2026-09-29T21:44:40.808623Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/___trap","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:40.736Z","timestamp":1790718220736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"POST /___trap HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://privateaimfortnite.sbs/\r\nContent-Type: application/json\r\nContent-Length: 111\r\nOrigin: https://privateaimfortnite.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6; __sg_pcid=a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"},{"name":"__sg_pcid","value":"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9"}],"method":"POST","post_data":{"size":111,"data":"{\"session\":\"d118d0c013e76f3d6e352c8cda027db6\",\"type\":\"low_activity\",\"activity\":{\"mouse\":0,\"clicks\":0,\"keys\":0}}"}},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: ae7a4c15-57ce-4b45-9ed5-e280070f51fe\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 8\r\netag: W/\"8-Nv24HbD1i+MHVjOdNPLzttklKUw\"\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:40 GMT\r\nx-cache: MISS\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":8,"size_decoded":394,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"416f09b1e48356ed17c6ac0bf7740bfa","sha1":"36fdb81db0f58be30756339d34f2f3b6d925294c","sha256":"39f94024cbcf740958d8bb6e25095e33ee260776744698ff4e0d43a4454bf72f","sha512":"f04d265b8ee361d3c77f8b25b73bd39cdc56a03c1c86727a8f24c84fa8875bc8c9fa4b8b4719ca86f579f1438b6bb28fc82d94bc0c4e931255d0a5a59595bde3","ssdeep":"","tlshash":"3a500000000c0000000c00c30000f000c00300000000000000003000030300f0000c00","first_seen":"2023-04-06T01:44:59Z","last_seen":"2026-09-29T21:44:40.80987Z","times_seen":1774,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/css/inter.css","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.461Z","timestamp":1790718208461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/css/inter.css HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 05f89366-3951-441f-a3e1-d5363db5fa25\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"73e-19e8438c608\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 215\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1854,"size_decoded":735,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"1323aabf47db98bcf73240482c6360f2","sha1":"b9abf08f0b54c4be019701a830674a9f417ce267","sha256":"b294787ff1e7c7fa25a15843b10cdfe6ce092143340a76a6c7a7d45ddc9406e0","sha512":"2937d356a3274aa33f635d3b9f4b914e93e7cee7d9aa122ccf0c5bddfba87e1f162156003ff0e05c56d18690c711369c4d5efe07743008f29bceb883792a5eab","ssdeep":"","tlshash":"d7318550002a6711d96a1e6e37df3f1d7fdc29482546c2af4b390c968cef42a4389f9e","first_seen":"2026-09-29T21:24:18.782408Z","last_seen":"2026-09-29T21:44:40.810559Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/vendor/swiper-bundle.min.css","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.463Z","timestamp":1790718208463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/vendor/swiper-bundle.min.css HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 82109b92-9a68-411f-8f45-a4994ad5595f\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:09 GMT\r\netag: W/\"3911-19e8438b6eb\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 2774\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14609,"size_decoded":3296,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (14356)","md5":"5b7044f5ef8c39d7fd157d666884938a","sha1":"179d0f28ecad7b162706204bcd34fc0f8dd24374","sha256":"95482d9f6501bcbcb3fb9309e776cf547d3553ed4dbb95c595223cf876277684","sha512":"b588e102d3eb746797169f1f87c097dc63316c6cd140fd1f9277dc9a88924f6e077b5e6db060f07525b42ceb035154104a97304e3fe186ed6d875764c5413384","ssdeep":"192:K7nJI8pXuCzSOepi5TJDdG27RAXGT+2JOzEf77LODKtVTYDSeSBeZJMPPIx:KzJFpXr4pETJDk27yXc8YT7uRvTx","tlshash":"fd6253945310182b86334f3a67a0cbbce17458914fd39aa990c1ae5cd3fadf9076f395","first_seen":"2026-05-27T22:58:46.970028Z","last_seen":"2026-09-29T21:44:40.811739Z","times_seen":1102,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/mainbg.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.595Z","timestamp":1790718208595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/mainbg.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 4c698eef-b805-41e0-ac43-d0c07d66df83\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"18ab40-19e8438bb09\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 1616704\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1616704,"size_decoded":1617195,"mime_type":"image/png","magic":"PNG image data, 1600 x 1642, 8-bit/color RGBA, non-interlaced","md5":"ed1770e200b8dd038b2568714f935818","sha1":"41688be5871cd68ef413bf6d70be28951cbac5ac","sha256":"35a52b0a6dc548da1595fd4a420fbaab3d0fe9342d223d5a8acaf98bb0f908ba","sha512":"a9f8aede15833f89afde32f23ad8fd56ee842e4d2ee4f0070680684b3131e1c564fe9c0c36dd8a2d87f0eb11e92e1083543c37057e9708c38d14490fc9299f61","ssdeep":"24576:feG7Ip0ruByKxHwoSpbTa7V7oLz6S4ZOQI4RN:fd40rdKyvpXiiz6S4OQIeN","tlshash":"3f2533884b0512674da7f0084fb963fea6f25c823872a83d477a2c6bc594ff495f4729","first_seen":"2026-09-29T21:24:18.772061Z","last_seen":"2026-09-29T21:44:40.812395Z","times_seen":2,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/cta-bg.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.602Z","timestamp":1790718208602,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/cta-bg.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: e6cc3acd-01a7-41ce-91ea-714687429f46\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"170adf-19e8438bd2a\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 1510111\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1510111,"size_decoded":1510602,"mime_type":"image/png","magic":"PNG image data, 1600 x 949, 8-bit/color RGBA, non-interlaced","md5":"9ed6037ecbee0090e6626f2065038a13","sha1":"6df25408d66d8f8d8cc15b0437e08fed4ccb6538","sha256":"76ccac79890a094ee165e47feba3c3c5efedb038d5593e2ba593153b5310a187","sha512":"a440244447ddf78cb0f30283261fa3c96770474e5d8496f02de6c72ea4bce570768cad603581eb0b2ea414813fb11ea1564d77bacf620931541dc3342a4fe248","ssdeep":"24576:4x6z9aCL90MOkSxigJYBiDfljXd0bF+naVl:o6zk+OkSxn6MD9zKbF1l","tlshash":"292533b4ff85c690c92dbfd8f7251e9929a84fc581f871840fa41ab6b42a778f43c016","first_seen":"2026-09-29T21:24:18.695847Z","last_seen":"2026-09-29T21:44:40.813447Z","times_seen":2,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/es.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.983Z","timestamp":1790718208983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/es.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-17d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2061141\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sls1AUq1GW9oP7ZBSvWG2J6Kh5q0fOkpl6j8fxCnZDeAqe1DrJZKMnvoxIQ%2Bu2Jx0xXiHt%2BnN6IkRdZoZhRg3tXYKO4Iih2o7kqBOJAYoMR03pbE9u%2BvS2kTPXRMEg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc22678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 381\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381,"size_decoded":1211,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"adf690d495cb81a5ffd3abe9893b0f72","sha1":"dcc3b37c7a1f993fd7a62421ed5ec3b415d92fcc","sha256":"5a56dcaa46c8322da58e08ac0163f44e4f036fc82b866f7c2608f02e31ce0641","sha512":"5c305d85893cfa9d05924fe811e8fa4bc7b0c70883456bc204e406c1a8b9b67529785a288910e0658d4e2d6b3de688ccf0c0fd9b4bd7bc09085ef2d06b10f3b7","ssdeep":"","tlshash":"4ee0f1cca5ae0c2ba9d440625c68a25cf42a390723031e2cb18ec8c65649099088c105","first_seen":"2025-07-04T08:06:50.026505Z","last_seen":"2026-09-29T21:44:40.814584Z","times_seen":562,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/title-img-2.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.488Z","timestamp":1790718208488,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/title-img-2.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 7b2da80c-a7f9-451d-91e4-5eec2a43041c\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"554-19e8438b91e\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 481\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1364,"size_decoded":991,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04ebdccbd3156e4773f813d2bef1342a","sha1":"8e5afc71bf20e238177f5dea28b922cb5b59511f","sha256":"487e8cfb108a9b3d3e4643237b3740707e762ced1c0a0f48514e9f44e07f7eec","sha512":"d86f312237c5dda607248f36137ccac7b57dbf03a351b788533b806079e505189ed288bb148de2c30e610fdf924ee8c78e0a33a2cac71ce5671813d70e948fd1","ssdeep":"","tlshash":"6a21a72aea5eec13e34ad2b89b15d4a911354afba5c1c1a190d0bf5fa0349c22d0d9e6","first_seen":"2026-09-29T21:24:18.685945Z","last_seen":"2026-09-29T21:44:40.815579Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuDyYMZg.ttf","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.614Z","timestamp":1790718208614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuDyYMZg.ttf HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 7c3e87da-e936-453b-94e8-d6741d0a71e8\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"4fe9c-19e8438c456\"\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=604800\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 145346\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":327324,"size_decoded":145841,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"ef9e4fbd408cf13a48337d60c4da7f38","sha1":"3744a05c5f284a039db6f64dc36185293ad16952","sha256":"eec66af7f2337bd34fe6e801cf92ededcb57a20c0d7bc40a61d4eefcbe3dd40c","sha512":"e28fcff8ce69da1f862838db5313197238fb2e9d31380113e9f0ba962d7c4a762f70caf42620515e2f13a18a9aa721d64c14dcc34a3b4f49a9487a8e6056c516","ssdeep":"6144:G8fkGmW8XFQ3q+DKZY5MUIE+nr1kv0vFp4kBSzrVM:GKkGmW0FdZY5gdkMFp4Hi","tlshash":"76645c17f713934eda062c38cba2c3a437757da2bd56d20bb49b3a94cd8b1b058e45e4","first_seen":"2024-10-21T21:37:40.857371Z","last_seen":"2026-09-29T21:44:40.816518Z","times_seen":182,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/nl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.988Z","timestamp":1790718208988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/nl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2401454\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oiwl%2B28kbvxSB6AVcc%2BG8PGwywj8NvG%2B%2FKUj2t4Yt5LqJUNZmbMpWsojXZVUsWzgm5PzD%2Bf3U%2FT0nHJZ3F46JExZZl7zqwsJa5SZfD9vugEyvKlz6aEc6YRHAMRNLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc02678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"e2b17e6cd3aaf593e168d8527a24c362","sha1":"c00a6a8198de115064fee2af586aa42b88f0e606","sha256":"4b3d9a01137049df859c894008855d4b35d9e1aa30c9af7978b5449e28feb1fb","sha512":"d3491eb4e3ea0f6c818f6a17af72a16420a2360a714163477e03b07ddbe566377d40b55aadb28a34677072ccbd13b664aadc50c4248218bd7112291f7d159a83","ssdeep":"","tlshash":"f2b012e7318e0c77cb900123221d8210dd2c01510130465b315ec3655294408d48ada2","first_seen":"2025-05-27T23:39:58.552367Z","last_seen":"2026-09-29T21:44:40.817149Z","times_seen":430,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/hu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.993Z","timestamp":1790718208993,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/hu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-72\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2299379\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUN8prx38pXolPepNgPYhpCBR7xZY54PaDeIrRmNAh%2F%2BGjwf0lQyW3%2Fu10TniCwarwkqdUGA1Tk4bqcY0MVgwYuFIwl9H1EklPjbL44m%2FlnLig4z7FZSKo3OSFHz5A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc82678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114,"size_decoded":945,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"dc14b69c6933e8f2beb73eea8c8d3f83","sha1":"8568c37d9731419fba95c23f9bb0385134378671","sha256":"6868cbc41a35d95893901775790658b7560195bc6f01bc029df3d63a3ef773e5","sha512":"20381049fd0025b5eae8b126f03d5acb8204d34eed3a56f8501b6f049cd08c3e4b023c8758caa5dde0a046e10ee4f929652cbd45800c4482043b38091ded0cef","ssdeep":"","tlshash":"a3b012dbebad7d35c6ab17b602180800c5352a365a37200e04cfe8d78850b4ea04c283","first_seen":"2024-10-31T19:28:53.270075Z","last_seen":"2026-09-29T21:44:40.817678Z","times_seen":193,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/main-pic.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.491Z","timestamp":1790718208491,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/main-pic.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: c402e819-5519-41cc-b86d-adc1f8dfed12\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"d58be-19e8438bb7b\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 874686\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":874686,"size_decoded":875175,"mime_type":"image/png","magic":"PNG image data, 864 x 869, 8-bit/color RGBA, non-interlaced","md5":"b1a39742109c07c117221b3a39a7fc3a","sha1":"678b3207f866495a7c3a225e230399e03d19ff3e","sha256":"0ff4c55aae451eae1b489d3ae21e75a2dfaa6487b2a3bf4585079b7f60cb10dc","sha512":"86b7fe852712acab35e65f5d4d95ed3fc5c6ac8916a6ea4ea6d5e3e589a1910b14b5a35e0c33c3e67255d4794d92ff5237a100616b4d303892cc01336621316d","ssdeep":"24576:T4DAaRou6FsCtPYDR9fy3IewiWklGad97z0EwrAIEf89cXhE:cDAaRg+emlgGad9SEf89cxE","tlshash":"4e153350684ae91d04f0b6c6b328da58b0bfbbed5da789e7f15f38e474118af9d8040d","first_seen":"2026-09-29T21:24:18.770648Z","last_seen":"2026-09-29T21:44:40.81819Z","times_seen":2,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/addv-img-1.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.497Z","timestamp":1790718208497,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/addv-img-1.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: be4e2fe5-2c95-4292-bc4e-f9c8b2f901ef\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"129db-19e8438c1f7\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 76251\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":76251,"size_decoded":76739,"mime_type":"image/png","magic":"PNG image data, 311 x 220, 8-bit/color RGBA, non-interlaced","md5":"fccaeba5ff9781351de07d738738cb86","sha1":"851977e4de94b7f845c3451a02e100c814ce97b8","sha256":"657f5906c5ea9331feda3c7236588e0211fccfe04e7aa8ffada868d0ae23b0b6","sha512":"9cb95d091acc1fb223ed5b03276109ad6ff27f13ec05b35da50ae1e9bf1675cca7c07287b103b08ee8ff9ee32cc8566bd3c149520b5b853f82c34a6c5c7d7e59","ssdeep":"1536:jBi2lr8p71x5QStaYaEP9lg4mNpv3PlAAI6YNi:jlR8p71x64aYVHgjNpvfq6YNi","tlshash":"5f7312f777ac5612259093b3ef6a06d8a5f272017abef97beccd2c4201500d4118dbac","first_seen":"2026-09-29T21:24:18.729233Z","last_seen":"2026-09-29T21:44:40.819182Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/seperator.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.601Z","timestamp":1790718208601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/seperator.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 485dfbb3-b4d2-4f00-9871-fd89bd9d7983\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"f4-19e8438ba0a\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 244\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":244,"size_decoded":731,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"99d640693f35c8a0c1d759fa253e6d52","sha1":"fa6b75b1f3963654501c34daef70386363af2bdc","sha256":"4bb63bd6c44d0f2ed0d42e5c73637daf4d04a67c130a19cd08662082da82d02c","sha512":"a6fb4e8b85aca5af03037e4e2674cc09a8c0feb81ae1f6da3104296b0c2f1fbf25c20a3af5298c0a7294d24618d4dac15f7e8ea6c801163e4565a89487f5efef","ssdeep":"","tlshash":"82d0a760a34cd50cc60576250318795a64d3e0c2d78dc014eb803526b0088d7bc302fd","first_seen":"2026-09-29T21:24:18.715862Z","last_seen":"2026-09-29T21:44:40.820387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/avatar.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.184Z","timestamp":1790718209184,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/avatar.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: e832ddd7-66f3-4f55-9fc5-2a5936225025\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"5a0-19e8438c00a\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 1440\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1440,"size_decoded":1925,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"682a93da40ea8e3374b00ca046dcacaf","sha1":"840b425ace79d173ae6687fd1e4fbfa7fa2775f4","sha256":"2268ad905710b4caa47c7eee04366abb36c13cf48a25169ab2d617e9865fcca7","sha512":"f5886aa4cf780826036759a812fb525cfa5c12d097bd132321f4cfd61aacd71731fc125a5617f6b3193947df5a390627e8b2f49796c37a207b66bbdc7f31f65a","ssdeep":"","tlshash":"4b211be2d9878e1dd72ec7e819d4450429abb3cec70ea836c4e3c8d6114bda9c1230a2","first_seen":"2026-09-29T21:24:18.710328Z","last_seen":"2026-09-29T21:44:40.821336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/libs/sg-min.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.217Z","timestamp":1790718209217,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /libs/sg-min.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 21517\r\ncache-control: public, max-age=86400, immutable\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65331,"size_decoded":21785,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65331), with no line terminators","md5":"7f45a1ef5c6fb002cb10f080e29916b6","sha1":"b53407fc3a5c5c39639147e0e3bc8f4f5e3736b0","sha256":"54494166c8678628a4fa8152ca2f93bbf6268f87d6196147743c007d5b091de1","sha512":"4b8386bfda44912e6078bca9e77b9295ba3f88850f1234aa88a17b07671b6f1bee2f8555fae8eb50ab59cd537ce3ce3e9275f5c07dbacf4514d5b0f8e926119c","ssdeep":"768:7d3WHjO1vjEAtvRgMU879GxYuz4STg9IWC4Xu0RDh4qEX6XYceXmDCG7mproLxjk:xGCtjEA61/xYS4H/W2Nu+1MyA","tlshash":"a0535c96f26170f116e324b4749f5107a33e5ea38c098651ea32cd656dbce438273fad","first_seen":"2026-09-27T19:27:14.722582Z","last_seen":"2026-09-29T21:44:40.82257Z","times_seen":3,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/header.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.476Z","timestamp":1790718208476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/js/header.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 6c019b18-3103-4b33-93aa-f347a93237de\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"880-19e8438b7d6\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 672\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2176,"size_decoded":1206,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"5e02459d4991dd3a918292c56d0e4aa4","sha1":"925effb2a43895dc142b22347dda63234c3abed5","sha256":"fd90c55b3c5a33c1bce146983f71617b0a2f4eb7ace9350d7ee0f4a06b864e84","sha512":"0bdb9d18e7f684d2be45b668111054d9bd42ecb087f60fa4c7b68529c7bb4f6c81b0eedcab4db95e1be5644d21c25ddec7dbb9d5f9501d68e3d440af958ba36b","ssdeep":"","tlshash":"a441012fa139357f487711a793d797a433160047a085da127b7c068a1fc7a90edf39e8","first_seen":"2026-09-29T21:24:18.706418Z","last_seen":"2026-09-29T21:44:40.823768Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/bento-2-badge.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.493Z","timestamp":1790718208493,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/bento-2-badge.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: f108baae-42f2-43ec-8a51-138e09317e8b\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"4ab2-19e8438bf5e\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 7643\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":19122,"size_decoded":8155,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdcce314df0d7e5c8f99b3b9935dfc2c","sha1":"5a3667d62390483c4cf66da897a6aed477eb89ad","sha256":"8d7a2805095dd71d6ee489c1ad825d6f9b016812de833ba1ad0cd1b181d832c7","sha512":"49854beb8d47e5676db48dccd114b63d4c927e8d5ed285b43d0623a4e0f40cd607707537c20a485df14ca9073436df6cae29cb2cbd1a1dc8680c9ae8df7c4a61","ssdeep":"384:oCmDAcGmUDEndRuHYi49fYdwInFajIMbs2NQ+fK/f/hk7h:ogce4miVIFasMnqhkh","tlshash":"0582d5e473a4d2e8b405e7bcd932d4703a9b2cf6bfd2c699c2a16c95d94104c8da9cd3","first_seen":"2026-09-29T21:24:18.776638Z","last_seen":"2026-09-29T21:44:40.825229Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/.rt/e","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:49.133Z","timestamp":1790718229133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"POST /.rt/e HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 1358\r\nOrigin: https://privateaimfortnite.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6; __sg_pcid=a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"},{"name":"__sg_pcid","value":"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9"}],"method":"POST","post_data":{"size":1358,"data":"[{\"e\":\"engagement\",\"p\":\"/\",\"engaged_ms\":4000,\"idle_ms\":5000,\"max_scroll_pct\":0,\"clicks\":0,\"ws_prices_n\":0,\"ws_frames_n\":0,\"ws_sent_n\":0,\"ws_ext_n\":0,\"ws_reconnect_n\":0,\"ws_capped_n\":0,\"vw\":1280,\"vh\":1024,\"visibility_hidden_ms\":0,\"screen_kind\":\"home\",\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718219261,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"38687341-28e4-46e7-b972-a23e608bfaa6\",\"qd\":9867},{\"e\":\"api_call\",\"p\":\"/\",\"api_method\":\"POST\",\"api_url_host\":\"privateaimfortnite.sbs\",\"api_route_template\":\"/___trap\",\"api_normalized_path\":\"/___trap\",\"api_status\":200,\"api_ok\":true,\"api_duration_ms\":27,\"api_request_size_bucket\":\"\u003c256\",\"api_response_size_bucket\":\"\u003c64\",\"api_content_type\":\"application/json; charset=utf-8\",\"api_error_kind\":null,\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718220762,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"b272e8cf-f22f-4ebc-add1-70ba68a6f345\",\"qd\":8366}]"}},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 29 Sep 2026 21:43:49 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":2055,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T02:35:44.45635Z","times_seen":18731120,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/feedback.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.473Z","timestamp":1790718208473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/js/feedback.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: ea66c736-3014-4abb-9181-a97beac2edbb\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"a4a-19e8438b825\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 874\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2634,"size_decoded":1408,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"c5d3f935e28f006cbd920c33bc7dca1e","sha1":"8b378e99a6d452be3f1d6b94ea44992f2760c6e1","sha256":"353c4d24ca33e7a51a0630ec36b10940977041d103fbffa7d23c24eb5f48cf80","sha512":"7bda5cbb33e719166caebeecf5469d83247b13bae1bf1e5cf868a0487cba3ee2fd4eae619d18f9c43d2398f7da5bd247a41e54f635bf821360b997fb6cf97c1d","ssdeep":"","tlshash":"e9519500d0b4113f4668509a7d6a9332029da6c3da5125f83eaf41b88f6ec8cbdb71bc","first_seen":"2026-09-29T21:24:18.762591Z","last_seen":"2026-09-29T21:44:40.826757Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/fortnite.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.490Z","timestamp":1790718208490,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/fortnite.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 44f21b2b-15c4-4d79-8324-ac0e4534b070\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"e57-19e8438bc17\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 1762\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3671,"size_decoded":2273,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d607f78502efe3d0cfb765c95b99125","sha1":"95034c360e6d2e638eeef53158409c91af8a61ec","sha256":"4896e9a523e341854b5f46d2e26cc24144de771258ff7a399aa721e1775ac74d","sha512":"5dc347afbe1e4c865b27952d862bdb8572618451e756da7c26e74715b30e8ec191bad34432130268bc07122314edd5466d5ddfabcb874de304e4b29f16f1cb7e","ssdeep":"","tlshash":"417186f463d4b1d4a006ebf4d8271026651a34fa3f60da5bc370dea8eca215c9c88cd4","first_seen":"2026-09-29T21:24:18.785316Z","last_seen":"2026-09-29T21:44:40.827615Z","times_seen":2,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/bento-1.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.598Z","timestamp":1790718208598,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/bento-1.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: e05bc7c0-3c81-47d9-9419-344244ba1c74\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"7129e-19e8438bfbc\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 463518\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":463518,"size_decoded":464007,"mime_type":"image/png","magic":"PNG image data, 1017 x 381, 8-bit/color RGBA, non-interlaced","md5":"85835a12505564258d11d4d96aa3891e","sha1":"d649e28ccda77ab571dec6f569c5ef36152bb3db","sha256":"34f6de1ea7545bbb64c5494bfc7d39cc12e1f0fb8871f3b29227af5ff932ab14","sha512":"ac35ad6be135fe56c282e965edca68fbe23c441f984627e284be04a885cb7a5cb468010ce463f1403c4aea46c29bf3faee1a2f520917b4e88b00db28617ea541","ssdeep":"12288:UDCj3h+X6zV90Bc2FWLn1bkeWDnMz7q9IoG8DNumpE:UDuzV90W2FWLhB0OvoG88mm","tlshash":"a6a423a1759b12bdd835c975188cbc794898ee7b1744703cf8230e3b2c4a8ef62971b9","first_seen":"2026-09-29T21:24:18.736114Z","last_seen":"2026-09-29T21:44:40.82842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYMZg.ttf","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.612Z","timestamp":1790718208612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYMZg.ttf HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 7051eeb0-4915-4021-8967-8f2f75717d2c\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"4fb44-19e8438c3fc\"\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=604800\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 145239\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":326468,"size_decoded":145734,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 14 names, Microsoft, language 0x409","md5":"c59d7314123c3b770bfbbd994215805c","sha1":"b7ab5dc5e8d605338223de7a8ffe3ebea409d3bc","sha256":"b37284b5701b6b168dfc770aa1a4ac492106422fd3ba76bc7641e37434e8019c","sha512":"30ca9372127d8269c5697175ddf4b0e5b3f903b556c6c15673c8c6cd09d8c318e048fe4879acd4d28f510ce6ba1c02db8b2f71374bfde7ce4a3263a94a97ebc4","ssdeep":"6144:MFccVkGmW8XFu3q+DXiMD3E+nr1k42hEysvzVwcZ2P+U3j6jCf:MlkGmW0Fyiodk42hEysvqcZifXf","tlshash":"6c645a1bf722935de6422c38cab2c7a437717ca1bd56e20b749b7b94cd9b0b418c45e8","first_seen":"2025-09-18T00:55:20.188069Z","last_seen":"2026-09-29T21:44:40.82933Z","times_seen":747,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfMZg.ttf","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.615Z","timestamp":1790718208615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfMZg.ttf HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 1aeefd11-082b-4621-9f44-792238774025\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"4f4d4-19e8438c2a9\"\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=604800\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 140290\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":324820,"size_decoded":140785,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 13 names, Microsoft, language 0x409","md5":"a32ace5dba8400232b84bc017dcc38ef","sha1":"78eae8a823f461192b4df2d67d7eaa818cf09b5a","sha256":"1b08e7fc267a5c7e1d614100f604b83e7e8a0be241f0f288faa2b3ac93a683ba","sha512":"7885b898af0ce9b260017dfa483ef7641bdab7383421f51fe7215840eeb9c0a0eed9a8ce28f1f1c88590ffd6a76deedfc37e106ee1e1094af7404966fe41d251","ssdeep":"6144:Jxe0kGmW8XF53q+DREk6wPtE+nr1kfmq+HpvaQCRa14UYE0o:/e0kGmW0FGkZdkCvyR+0o","tlshash":"98645b27e723935ddb452d35cfa2c3a43775bca1bc57a20b70aa3a94c88b1b45dc48e4","first_seen":"2024-08-15T00:58:33Z","last_seen":"2026-09-29T21:44:40.82992Z","times_seen":1433,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/de.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.980Z","timestamp":1790718208980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/de.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2387724\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GIwn%2Bur11z3MaOSBaEOm5nFV51%2BhlEZ6RWAEJmpTZxYTay3TFoLUTafO%2FbetVxMwgN%2BhJk68Nk8EG%2Blra%2FTeS1HXj6G3BOhvimA5eAxuV%2F9YnVN4TSNw2zqARIksQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cbf2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":935,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 2-bit colormap, non-interlaced","md5":"52ce5902ed51d2db9393c9439c46b82c","sha1":"6cf73d922d72ac8fce47e6f494a04129d719483e","sha256":"4bf08b86243b0c5d79c196728100dd278a398ab57edaf56c871fceb9d879dbeb","sha512":"d1b9b9a226dfcd6a78015f4209da23e287052086df89bf2711ae407294c954c76102bc98faa0e7fce389584bf07d41a09a8470b657fb4443ce5cb1e383fe3f85","ssdeep":"","tlshash":"b1b012ee7154ac65d34c43331f028023ea61c12582155143a095d123051550883c4e9b","first_seen":"2025-02-01T01:01:45.04509Z","last_seen":"2026-09-29T21:44:40.830461Z","times_seen":563,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/star.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.185Z","timestamp":1790718209185,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/star.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: b9f77170-4eb9-43e3-848a-07f758433df0\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"53d-19e8438b9bc\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 667\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":1341,"size_decoded":1177,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9f8dda8c77f62cbef6abb3bb1b480e6","sha1":"aa1237da1d19d90df82b3112452b2fc3d3091742","sha256":"1b695e198e664fd0b95641d54995f6050b1d2a65caf3304410c00271fde50d43","sha512":"175d0def85981b0ef02eb2eb14c63b9561bc492837f69437f69be5151e15418566dc5205fa3bc23e83344b68ac2c13def7d39aa35a0628fa7502380927f532a9","ssdeep":"","tlshash":"e521f3f562986f84d343df74dc23287a3b6338f22fc1424d0481c993e519ae64d4dd48","first_seen":"2026-09-29T21:24:18.760812Z","last_seen":"2026-09-29T21:44:40.830949Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/apple-touch-icon.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.214Z","timestamp":1790718209214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 88218aa4-9c4b-4fc3-9223-3bec8c847d85\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"503d-19e8438c657\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1197\r\ncontent-length: 20541\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":20541,"size_decoded":21028,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"5cc39fdb28ceaac4e18a4990553e4821","sha1":"d18678accd1ac36299609067271b9b8fec669307","sha256":"51cc39c6b17a6c3e59daf3d0d486849803dcbaa0d63832765d78f8e447813832","sha512":"6f6851974aac67dc8b7d8c7ce66c3598950f66e79676bb64a73b245a2f72cd52d1b9a54e28e07b322a42f27df5885f5e118f7cd0a831c7715be1cb9002e33f26","ssdeep":"384:+46BwVqPUvfe/Gcfu5k+/9hTOUqvvV/I7ceOSGZhdWMMI5EIIDr:Hyiq8cGcG5kuhTOrvV/5eOR95lS","tlshash":"e692d08f77a3c3dc85f0b4c51f2a36976a8000a5dcdb7d7286289c39a366d019a863b5","first_seen":"2026-09-29T21:24:18.700694Z","last_seen":"2026-09-29T21:44:40.832103Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/aim2.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.500Z","timestamp":1790718208500,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/aim2.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 37a5c2d8-e1f5-4044-988c-0a9d5bff4bc8\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"1e4-19e8438c0ae\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 286\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":484,"size_decoded":796,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2f0ca0c24df1b772ed0790c9691aa1fb","sha1":"45bb6f5bb37ad4b659ef5d2d9709ad83148066eb","sha256":"7157737ab82c381444ea9ac5fa6884748e4b3570ecbf143b3a75b8335cf6b2c0","sha512":"a2b43cde2b0958e925f7114682ed3eaec852a24275432131d3ed0e54686fbed9b13edd804f19a0c0573ddd930de3010aa9bac233ddb01032a27620b838630383","ssdeep":"","tlshash":"a4f05c3aa27d9c36e169c1dce9a4746431ba429353c5c29185c2bf1f64656c3383f1e8","first_seen":"2026-09-29T21:24:18.731692Z","last_seen":"2026-09-29T21:44:40.833231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/bento-4bg.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.600Z","timestamp":1790718208600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/bento-4bg.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 6af58afb-2216-4393-bbac-bdff600e50c8\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"6bd-19e8438bd78\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 606\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1725,"size_decoded":1116,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ea1f10fddcb74e0b5518bbbf0a7a4dc3","sha1":"f6910c983ee937695c1349b8ae9bd05d7aa68012","sha256":"86c0f5198cf1c944dd1541b6963ed739350a72937eed6aa275aa10b7fbbbc189","sha512":"d0a8225ddea9bd3b42d87297aabf717f2ee669b8c354de6dbf879b6583d93fb97eb9681418ac11a8285bcd5402c0e69b6106bf2cd29536602ee2f1b86fcb3898","ssdeep":"","tlshash":"513192a6f93d5c37e504c36deb41d85420ad46a7a1819a5093d0bf3f6468bc92c2d7d2","first_seen":"2026-09-29T21:24:18.758064Z","last_seen":"2026-09-29T21:44:40.834003Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYMZg.ttf","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.616Z","timestamp":1790718208616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYMZg.ttf HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: a3f9586b-5d07-473f-9d90-6f226f13774f\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"4f9a0-19e8438c3a8\"\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=604800\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 144926\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":326048,"size_decoded":145421,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"84cf795ee940a39423fbee3dad4017c1","sha1":"1048573ec372a0c4a60bd3d5b3ab3b82bc3973da","sha256":"e7a1aaf7eda9f2fad4131725fa556265ec75ca7b2d756260173a040363e8d4f7","sha512":"e276355be5d939caa93c6417048240550d47bf9b5375e54955e9855acf1647a36b1ecf9084a0817be92cfa8266f3b32d229691f467f838575bc2a904a14efb4b","ssdeep":"6144:Eb9pkGmW8XFh3q+D2aLMs9lE+nr1kPLN5W6+8/WYJ0Km/ZpDfik:EkGmW0FyaLfdkPLm6+8u3ik","tlshash":"23645b2bf723d35dd7052c39cab2c7a437757ca1bc46a10bb0aa3a95cd9b0b019d49e4","first_seen":"2024-08-15T00:58:32Z","last_seen":"2026-09-29T21:44:40.834891Z","times_seen":966,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.986Z","timestamp":1790718208986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/pt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1f3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2388393\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhuN8gZmyB6h9O5G1LuqvwtpkZva5jPhZmYbTEEQq%2B9henxPO0ySBE8w5KRPgDgOoqJqcuVEUS0epE%2BwjQuLu0k3SaGwcMFMjt0fy8PaTtAQVHq2nXggdQnXBf2PjA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc92678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 499\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499,"size_decoded":1327,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"8176395cf82bc97230fc9fed4ac3f763","sha1":"b295f2eb61ee6e04ff8209fb48d1c69b3c6fc01b","sha256":"d7ea82a325a904b119f4d2cb6a405967bccc19ff2e0a8ccdc7ebaac29cc29f72","sha512":"29b32dfb4da1fda4f7e060809c75d5ccce8d2bf4ff5208015ec0b39eb3286c5f32e6f4a1a4d9a10d1ee77437af614133faa5376cef19e5331122ceb3f0c50a94","ssdeep":"","tlshash":"93f00ebe9a3f4e1ccb091211d32f484989322a58549b6367601905a89a010da82590cf","first_seen":"2025-07-04T08:06:49.887176Z","last_seen":"2026-09-29T21:44:40.835601Z","times_seen":302,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/___init","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.186Z","timestamp":1790718209186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"POST /___init HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://privateaimfortnite.sbs/\r\nContent-Type: application/json\r\nContent-Length: 363\r\nOrigin: https://privateaimfortnite.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"}],"method":"POST","post_data":{"size":363,"data":"{\"session\":\"d118d0c013e76f3d6e352c8cda027db6\",\"fingerprint\":{\"canvas\":\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAARgAAAA8CAYAAAC9xKUYAAAIOElEQVR4Xu1caYwURRR+vSASNTHGaF\",\"webgl\":null},\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"screen\":{\"w\":1280,\"h\":1024,\"d\":24},\"lang\":\"en-US\",\"platform\":\"Linux x86_64\",\"tz\":\"UTC\"}"}},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 54cafe21-d24d-40c8-822f-96ba9db6d2ae\r\nx-content-type-options: nosniff\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 8\r\netag: W/\"8-Nv24HbD1i+MHVjOdNPLzttklKUw\"\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\nx-cache: MISS\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8,"size_decoded":394,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"416f09b1e48356ed17c6ac0bf7740bfa","sha1":"36fdb81db0f58be30756339d34f2f3b6d925294c","sha256":"39f94024cbcf740958d8bb6e25095e33ee260776744698ff4e0d43a4454bf72f","sha512":"f04d265b8ee361d3c77f8b25b73bd39cdc56a03c1c86727a8f24c84fa8875bc8c9fa4b8b4719ca86f579f1438b6bb28fc82d94bc0c4e931255d0a5a59595bde3","ssdeep":"","tlshash":"3a500000000c0000000c00c30000f000c00300000000000000003000030300f0000c00","first_seen":"2023-04-06T01:44:59Z","last_seen":"2026-09-29T21:44:40.80987Z","times_seen":1774,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/favicon.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.215Z","timestamp":1790718209215,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 051f8fc3-921e-4da7-989e-321ec71c30bc\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:09 GMT\r\netag: W/\"867-19e8438b59b\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1197\r\ncontent-length: 786\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2151,"size_decoded":1296,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f1788772f19237f99503874094ea5e7","sha1":"5211d98613abe67415224cd7e5eebce14804d0cb","sha256":"2abd970b8a99208aa779754063262eade1df07bfc1c589c88cd5bd59555c98bc","sha512":"01b7f0275929346d3f8a87481c58147cd80028a93934a7013c0810dad0c4cb4cee81d52a7586280b9c46c38e30ef8b9afb85fee260ca86a22024aca8c60237a7","ssdeep":"","tlshash":"87412537d069953ae324d7a8deb4a49c113b60caf7c1cda5e1c07e1b54345e2261e6c3","first_seen":"2026-09-29T21:24:18.668831Z","last_seen":"2026-09-29T21:44:40.836458Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/bento-3badge2.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.496Z","timestamp":1790718208496,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/bento-3badge2.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 9256425c-b52e-46cd-89cb-18a1729652e4\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"1104c-19e8438be1d\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 24285\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":69708,"size_decoded":24799,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"141555c567bb96e94506d48cea9a8577","sha1":"251d4d09ea18ac5febeefdde1eda072873b38e47","sha256":"f03fe3f09efd776abe353ce5b9a7b1c898a16324b12b11edc57d05b98ede01a3","sha512":"61adfa5a515677d2485c66a1221da9eff3672d7ed0aa15a679c874888125e78cc3384af7e8978998d395a24cc5a459661edbde9df452bfc3475fda13b038db13","ssdeep":"1536:RlYGwucVNp6NpzNpLNpHNpO1wMcNiM/5vCBThxP88+bqm07qgthqm07qgtoqm07B:oSjJ8Yqm07qgthqm07qgtoqm07qgtzk6","tlshash":"7f63b4fd2bb990e8884bdbd6ee1644e82e2e54b7bd81cb51c41cef5874214d8d90bdc1","first_seen":"2026-09-29T21:24:18.707664Z","last_seen":"2026-09-29T21:44:40.837415Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.989Z","timestamp":1790718208989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/pl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-62\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2056315\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wh%2FqH4KcspkOGNLPZijfisZm59wvClVmAOEJhDcRm09KZopZ1jrZwYn7lmopIkFtqaHZgI9lSnuuVYkGzHlrGK865KexAZIfQWqI7U04LhMSn2FZNmGBqa6SlPt7mA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc12678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98,"size_decoded":922,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"ff792ee41b2c7ca1a07e3ed13e4a81a7","sha1":"a1b754f6d272423a13752616576db8015b35a21c","sha256":"7cf97156d1bf9045a798c475f59dcb75d541e7b8c6673ac8388507a9c5d548a8","sha512":"a5011e53b0c0e84edbe7b3cd64c336f3d716929547cd94c9025072f003609f047e1d545113172b96323fc6a9990da69abb4d5c14c86a9b7dbc5ad7cbb7c09cd1","ssdeep":"","tlshash":"41b012e55614adf0da641d3763184404ac211d610790044b1c15c835b022015d0e8746","first_seen":"2023-12-19T05:02:32Z","last_seen":"2026-09-29T21:44:40.838241Z","times_seen":301,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/dk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.003Z","timestamp":1790718209003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/dk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-7e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2062311\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gfQ0scDJETD%2B4PZWyThvx7QwVDfMsdIFMfvaEpBYIKYlKo98QPPxgep%2BrEtDGL3rihS681qLkNztllnMgQ56DFT5Qy%2FE1r%2B5Lg3Spppsek6pTDKNxnTaSDjTrgO5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e64cce2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":957,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 4-bit colormap, non-interlaced","md5":"c09f1b8df021d56af996f5198c35b569","sha1":"0c7bbd3f3078539cf263badf0226df20bd06cee8","sha256":"ca559221f91cd71210fa5deaccf8af0e754d03b2e7cd13277f771ae11c402534","sha512":"b6de5068bf2198e28f864838403f7b137d436e46a180f3432fb24be0c695dff7e0334e88f21bc2ae568e04f640197a2e03feca93cbe9217dd788143973e3c036","ssdeep":"","tlshash":"0db02bd77260cc10d6464193818d0001ac40890c0062308b4209991cd44c091d04c047","first_seen":"2025-02-12T08:32:15.792337Z","last_seen":"2026-09-29T21:44:40.838962Z","times_seen":269,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/fi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.004Z","timestamp":1790718209004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/fi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-7f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1463475\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A96D2Y5h9KoMtifRu%2BuyGGGzxZd3rtNDhKwpPi4yxVYR056oIb8CfgcAm7idmNLtj9mZR5qN6xj7Q0fIx4WIISXwqqh1T%2FadXVmoaMLPohVmnXLwfaCe9Qqzc%2BJjZg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e64ccf2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127,"size_decoded":956,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 4-bit colormap, non-interlaced","md5":"44d2cff2e0e4de3cdbbe0e0c819f1864","sha1":"754440e209a44854a4e9ea75e55620b7871dbb49","sha256":"7239c8caa2b1c5c37268586162e72cd7d2e43a6c8908ab960777d0659ce40bb3","sha512":"38ce731db0c6bf552caad0c3c1034a229d34f2ffa8800cc446dd3f528652afd64eb642b824b723c89440193d2237ff39df357dccbb40ca41e13256fbac359087","ssdeep":"","tlshash":"c6b09bd2a644dd2451050177562d5004df31415d91454517841df92921a9d8dc05d7f1","first_seen":"2025-05-27T23:39:58.63136Z","last_seen":"2026-09-29T21:44:40.840017Z","times_seen":183,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/radar.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.492Z","timestamp":1790718208492,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/radar.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: d3217cf6-1f27-4667-850c-4f837d1532ed\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"ab14-19e8438ba5c\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 43796\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":43796,"size_decoded":44283,"mime_type":"image/png","magic":"PNG image data, 173 x 177, 8-bit/color RGBA, non-interlaced","md5":"60d62d2ee6d88d5c99c31d78d1816412","sha1":"5f1ef13d5a21783f8c942bb9d715a138f3638dd6","sha256":"9dbe2e6c40f4dfba4677aac61b2e19233fb785bae6d5f35deb55e82850323b5d","sha512":"c8cb04d9c814fdbca439332ccdff828a371db943a3a2e2349219f2d1374ddeacfc3a6d632133ace9af4314f5041dd5384bcca91b967c806d7452fb61c6d65c58","ssdeep":"768:SQUs56isfFnPzVVKDBWV2n6icFccJbyUZqWC/ciZRXDpsVi+GA2J9U6O0OGu9w4F:23ZzVVz2n6tccJpZBc3Tpcu9U4vv4P68","tlshash":"f31301fcaba41712c242274f7524ac5e1ac903d50caa650f98cdb028919fdfe536f19f","first_seen":"2026-09-29T21:24:18.727849Z","last_seen":"2026-09-29T21:44:40.840699Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/bento-3img.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.494Z","timestamp":1790718208494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/bento-3img.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: d3adf95d-a1e0-45ec-bc09-e9bd547dd22d\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"2806d-19e8438bdc9\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 163949\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":163949,"size_decoded":164438,"mime_type":"image/png","magic":"PNG image data, 1149 x 649, 8-bit/color RGBA, non-interlaced","md5":"6b06a1c791260971b71988e32ebfa743","sha1":"34226bff9d2d8c465514a33d7621e71d61ff2d7a","sha256":"bbecb3596a299629184d35717c83d3c753b6d24bcf76304ab0ad02791ba78b4f","sha512":"e4ea979bd3ca21501fb94fc79f00bfd7f316cec2d92c6799f7cdeb387bcfea355fab1ade47362349cac47f026d36acff5b1a2fde7d84a594c14f3cc7c839780e","ssdeep":"3072:3tju9Uo427znAsNO+TKsx0UXSNXV2gXD6Frn66t8j9M98bLQXT6tKSB8BKrY/Ml7:3tju9UoxLAs0vu0UXSvQz6w8j9MCbUX+","tlshash":"12f3128f4a91f30cff851b120f1c27207d787189469b5b29c8e5d27c9f64f8b6129b8a","first_seen":"2026-09-29T21:24:18.766657Z","last_seen":"2026-09-29T21:44:40.841557Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ro.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.999Z","timestamp":1790718208999,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/ro.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-6c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2386201\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4CIVzpIHycFFdlGKRwA29pweLyLOv4vy9cuLuLN4ICXSgYVr0R1WnS1OXHBvisZ%2FyyBPLgGOMXTLl7kn62qDprxK%2FRVJTgbOIRrxNUE5FDOavuM2%2BRbf5O%2FH7%2Fk%2Fw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e64cca2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":943,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"9ea153c38b2e8868b3827235ddfb3afb","sha1":"1e19aa4d008a81e32d702f14d7cc3e617ebc6beb","sha256":"9355b17bd96d7d1f2b47b49249c1d992025c56b6074fac63893c03ecb600de23","sha512":"6ae8362185dab2d6da86effe09bd2caf40313c90ed8d517404f0114599a9b9d7aac1003d0d210efc10ebf1c2436f63f9a62856f03b7b9ed64688fc48a5374c2a","ssdeep":"","tlshash":"c9b092c2a9187c24838a0166d23811d39c39253a122142a7988881582a1512dd888246","first_seen":"2025-02-12T08:32:15.783563Z","last_seen":"2026-09-29T21:44:40.842595Z","times_seen":203,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T21:43:27.949Z","timestamp":1790718207949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 568b4a4f-4206-4c2d-8a92-379f7c97e078\r\nx-content-type-options: nosniff\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\netag: W/\"10c6c-hjjnn8AfqLZrN+8yk6iDwFclhlc\"\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncontent-encoding: br\r\nx-cache: MISS\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":70439,"size_decoded":18101,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5274)","md5":"9650971422e9add014f13adf3ccc0f25","sha1":"ff7d5e061d497bf2d32645556e1f6138c4da11e8","sha256":"767b2c7c201f58db7388b7fc2e02c5b840b70f2f261893f0724909465ba60c68","sha512":"0ef2b3c8627422b627404d6707ed8f0fd5078bef148daf54e0e5cb8ae9a01b8ec86d9e9c0604798d485fbc11aa0def8a8d0f02b91ddbe23bb136b4e8c60e5c51","ssdeep":"1536:+jCr3lPWt/9Q3LpClX7Ct/9Q0KOQOvg1Oysc0/fE:+mrFSYKQnE","tlshash":"f0631aa0a0f090f68143c794fe366a126d46b1b3df464648b2bc8af5af95dd1dc1f86c","first_seen":"2026-09-29T21:44:40.843211Z","last_seen":"2026-09-29T21:44:40.843211Z","times_seen":1,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":233,"connect":14,"send":0,"wait":26,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/dashed-border.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.597Z","timestamp":1790718208597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/dashed-border.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 075f4eaa-c65b-4fbe-8c2e-d023fca9828d\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"1c3-19e8438bcbc\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 451\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":451,"size_decoded":935,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced","md5":"a84fdea20fd3c373aceb1ac22081324a","sha1":"33fea0a40115862bfa785a166d6c6f037af9a167","sha256":"244e8267fce7c6e96a2de593254664447ff6f92d4e72d1738c421715705b83bc","sha512":"034d66b401ed9f022aa361dbaadaff332971c9cb2f280f0289aa092b1ffb81a9b799aa5e57277d6392d9f1bc1b25be1ea1141ea626f70a3ad5c79114d84e71b2","ssdeep":"","tlshash":"48f0dcc9f352c96c7c59693d23b2c4d4506167b8ab2a021a84eeac3895b96e806772d2","first_seen":"2026-09-29T21:24:18.732911Z","last_seen":"2026-09-29T21:44:40.84467Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.990Z","timestamp":1790718208990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/tr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-117\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2304086\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WI7zuZ1iHa8LSgtRySzyiy5DfbIBQ7b5ZEM2fRwXxFbVxZkMZDBh4NWEVTyNs4B96s55sguy6lrkuv5AoJASgW9eYSyF7hrIsQMjueMkxRaUj0cIeheoWv8gMLZ%2FTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc32678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279,"size_decoded":1105,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"ed12db7842a77c4c5dbea10cb5ac3cb0","sha1":"9cfc356eb8019af8e91ba524197e4f783ce5c3bb","sha256":"ff9f42a374f310e7f778eac16582344a816e84ea466925c196c6659ed3d603ff","sha512":"f9dbed76f6877a3739465ac67e7432f9b0b787b3de8cc2c5a238b77cc0e63db924fd029700569db80d52530a66845f8c9ce3c0096045abcece39ce6e4611296b","ssdeep":"","tlshash":"c3d0ebeb480e98679724a363000a08809e6393a2c073c8504880e8073a12163c241cba","first_seen":"2025-02-12T08:32:15.789352Z","last_seen":"2026-09-29T21:44:40.845468Z","times_seen":302,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/css/reset.css","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.460Z","timestamp":1790718208460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/css/reset.css HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: b416acfd-c6c5-448c-975d-fd95a6765dc5\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"ac7-19e8438c5b9\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 923\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2759,"size_decoded":1443,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2759), with no line terminators","md5":"98e76eae7da066e88499099a35d38bea","sha1":"fc549b927764ae63b2f9f073c00b90b0042f067b","sha256":"bfd2d90b55f25d410064fb41e264e03893d6894d797ceee8db5fa43efa6db424","sha512":"e311c9cc1c4abbab1657369848d0eef53bf53e9415e997099ab20693f68c0642154a32cbd509aa51b43e7d947082073615c4a30eccd462fcb7f31beb524416be","ssdeep":"","tlshash":"775174b72780baa0a73bcd2027da7e447b011233c44091dae541c96ccbde96759f5f8a","first_seen":"2026-09-29T21:24:18.780799Z","last_seen":"2026-09-29T21:44:40.846121Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/vendor/swiper-bundle.min.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.471Z","timestamp":1790718208471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/vendor/swiper-bundle.min.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 71077bd6-aaeb-4c36-8480-0d123dcaeee9\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:09 GMT\r\netag: W/\"25ea1-19e8438b69c\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 41689\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":155297,"size_decoded":42227,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65283)","md5":"f90b617a32726d60cd9326a36a097351","sha1":"9f264efecb20208ec05ac74c4a165c67abfd0b67","sha256":"1e313555b04cb9b5273b7a817158708a05f58e18f91d97a4239dab6f68d23c4a","sha512":"85b861a45055ffaf22bf2e249f45811442d0b493617a8cbc53bcc076c66b9d3e9ba1b813b62069ab789668fecfd867cc767ab3703feb5c3bd50b2e30703dfe22","ssdeep":"3072:2Qc7nYNuja+867k2GX4G5PqTlcGC2Zjj+Anq:2QEnnja+8ak2A4G5P8y6Zjj+Anq","tlshash":"b7e309886120b57546e716cb93a8c65172b54844b80ec5f870fd4caf99bec9803bfef9","first_seen":"2026-05-27T22:58:46.979219Z","last_seen":"2026-09-29T21:44:40.846982Z","times_seen":1119,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/faq.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.475Z","timestamp":1790718208475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/js/faq.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 7dba7e62-c20d-47a1-80d5-7e4a7469ff91\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"a0c-19e8438b875\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 1169\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":2572,"size_decoded":1704,"mime_type":"application/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text","md5":"0be0315c8bb39d55dcc3acab540122b4","sha1":"9c38013dbee9d0fc007e197bdccd100505c9d2c1","sha256":"a5fca849873da6bfee727b80d31beb05e2a86f2314a0f3668aed962251eeca95","sha512":"3d6b4055428ac953cbae793334c82e15820e7e5ec5cfe43bafb2ecc9204d41d74a0a380cf6d246cbe6289843a77b98c7cea07c2e0b27fdb2836c34fc775841a3","ssdeep":"","tlshash":"d551845f62f46176056742e6b21b11a13635a043770a7c243a3d908c0fee85a6b7f1de","first_seen":"2026-09-29T21:24:18.712013Z","last_seen":"2026-09-29T21:44:40.847606Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/title-img.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.487Z","timestamp":1790718208487,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/title-img.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: f702d250-a6dd-4272-bfc4-26ecddddf4a8\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"ce51-19e8438b8d0\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 52817\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":52817,"size_decoded":53304,"mime_type":"image/png","magic":"PNG image data, 252 x 154, 8-bit/color RGBA, non-interlaced","md5":"e0a2f72f9225cefd03b9382bff8488ed","sha1":"238cb3339cb4da7515b94a83142996755f47f4f8","sha256":"0ed77783f0f8cf88069dbd343164d9c1ea87daa9fa6b71a79386fd1df83648e5","sha512":"40620735b5e42a23b044f4fdb4a44c470523174fee9a167b657190a241dde75ba0f28f314523e79167054eb64befe36e26b2aed1c654f6cc00c7b69e84abef20","ssdeep":"1536:z+Xyl54gtY07/oYEqd8qi926T88fJ4Fex:z2U5Rn/Y92f8fJ4gx","tlshash":"923302959272ee441c48f26c8a16b293c8301f85b194f4239d395b92c661b9def631cf","first_seen":"2026-09-29T21:24:18.72644Z","last_seen":"2026-09-29T21:44:40.848449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/bento-3badge.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.495Z","timestamp":1790718208495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/bento-3badge.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: e80c8ca5-2bae-452f-a51c-bc0ce71ade3e\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"21e5e-19e8438be70\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 50031\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":138846,"size_decoded":50545,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0a7c6042190226b0ebafbbb66e943acd","sha1":"69df5fd7dec217c6aa0b7ab6a4a8e22d243cd547","sha256":"06386f3ca6be2f475e28d3bf14bcea9d162fdf9cedeeb039fb62e983c676fc35","sha512":"823a578af8ad543a355f2cb522603b877c80ed4eee6b7cd916cfec6953f0080908bc8c899f20e18c61f62c6b3f8453a9546d372c3afccee4335241a0554069d8","ssdeep":"1536:6R0e8ZeFZ1P2afRiKCf3UkAoLVV+ikREkjwBc8LjOhYbu9x17JGjdgnX3xNddjFC:jCkrf","tlshash":"32d3b6df3bb453f4f842e3daea2200a9b50f94fa6a828b74c3696f19744945cdd51c83","first_seen":"2026-09-29T21:24:18.756287Z","last_seen":"2026-09-29T21:44:40.849382Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/bento-2.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.599Z","timestamp":1790718208599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/bento-2.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 1d8405ac-d078-46cd-bffc-f1c7120765d6\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"82bb-19e8438bf0f\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 33467\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":33467,"size_decoded":33954,"mime_type":"image/png","magic":"PNG image data, 231 x 381, 8-bit/color RGBA, non-interlaced","md5":"c5e10fdc1e4748c45db67137dd29a913","sha1":"cb1bf0767f6b30741662c964b11e00debf400411","sha256":"14d11b02d1a3f1e590a21ff7ad9b77d358d31cacc7e512e2c44dc63ecce0c5ae","sha512":"0bbd265676692875e3e0c22afb4600015a6d7b159a7b46b17f55cc8bb30bba05fae7a0d1d63b3e47f8105636a4f48eaae027cc064c6fc8dd06b70aea3ddc962a","ssdeep":"768:b54SvCZ4Ej4TEhYlEomEmXWgg2npN42aqE/xZB9EmD:b2mCSFbMEmFg2nQiojPRD","tlshash":"f8e2e1e7328194182f075c2eed5e987e6d91e02acb841a26cf7f38b9d6dc87921585cc","first_seen":"2026-09-29T21:24:18.688149Z","last_seen":"2026-09-29T21:44:40.850376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.991Z","timestamp":1790718208991,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/cz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-10d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2215873\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ir8Mk%2FDM8eAiEwy7MLHiH5PpBjmVAl50n9jo%2BqHEV0IrDvpGUzZRLzwcOxEJja4NwqcLAQEt9%2BvTycJggaUJkuoJfqdSMYwxuBiwiNaWi0sXP%2FSKei9V81macdjhzg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc62678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":269,"size_decoded":1101,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"896cccb33b897bce17c2f10fcae80191","sha1":"434bcbc51a10d332f593622c6efa0c9a5d6b2384","sha256":"a6a0fb9794ba47fbbbb967ad45d6a9468e1a0fa0ec5fd2d6e6e31f3e5322c7b1","sha512":"42c16b20a22c7ac681c83fe5fb31a9d4f802e889d516988408d9a43fe4aa357045e782fa6285ff197932a9dfe5fc9e628556a8ca2e0b8437af6275477caecd91","ssdeep":"","tlshash":"3cd02be67f2d0d2985b95333437688228f3cf240d26ad253a02988568491339d24c126","first_seen":"2025-06-27T03:22:22.736257Z","last_seen":"2026-09-29T21:44:40.851511Z","times_seen":221,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/.rt/e","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:38.693Z","timestamp":1790718218693,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"POST /.rt/e HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nContent-Length: 3498\r\nOrigin: https://privateaimfortnite.sbs\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nCookie: _protect=d118d0c013e76f3d6e352c8cda027db6; __sg_pcid=a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"_protect","value":"d118d0c013e76f3d6e352c8cda027db6"},{"name":"__sg_pcid","value":"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9"}],"method":"POST","post_data":{"size":3498,"data":"[{\"e\":\"pageview\",\"p\":\"/\",\"q\":null,\"query_norm\":null,\"r\":null,\"utm\":null,\"vw\":1280,\"vh\":1024,\"dpr\":1,\"visibility_state\":\"visible\",\"bfcache_restored\":false,\"connection_type\":null,\"save_data\":null,\"is_app_webview\":false,\"lang\":\"en-US\",\"tz_offset\":0,\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718209256,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"e9947bb6-e255-4fcd-aa3a-903e2a82926a\",\"qd\":9434},{\"e\":\"page_ready\",\"p\":\"/\",\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718209256,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"1c1fbcf7-a1e3-4d95-b1de-780a63e0e862\",\"qd\":9434},{\"e\":\"screen_view\",\"p\":\"/\",\"screen_kind\":\"home\",\"is_dialog\":false,\"heading_hash\":null,\"heading_sample\":null,\"prev_screen\":null,\"prev_dwell_ms\":null,\"prev_max_scroll_pct\":null,\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718209256,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"2b36c671-ad35-4df2-8a40-95380615ed68\",\"qd\":9434},{\"e\":\"custom\",\"n\":\"pulse_v2_ready\",\"d\":{\"sdk_version\":\"2.2\",\"route\":\"/\",\"ua_app\":false,\"flow_attempt_id\":\"mun7dxbd7960yfqq\",\"schema_version\":3,\"client_event_id\":\"0f98c18e-6733-4059-a267-1a93fd32a4df\",\"sequence_id\":1,\"route_template\":\"/\",\"t_since_flow_ms\":0,\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"canonical_step\":\"page_view\",\"time_since_prev_step_ms\":null,\"visibility_loss_before_step\":false},\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718209257,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"2bbaaecb-acb7-4909-893c-260e5a6029c0\",\"qd\":9433},{\"e\":\"custom\",\"n\":\"sdk_initialized\",\"d\":{\"sdk_version\":\"2.2\",\"schema_version\":3,\"flow_attempt_id\":\"mun7dxbd7960yfqq\",\"client_event_id\":\"98221caf-699c-4c26-96e5-fde512761b4a\",\"sequence_id\":2,\"route\":\"/\",\"route_template\":\"/\",\"t_since_flow_ms\":0,\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\"},\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718209257,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"fbb49b20-0450-4d35-895c-4fda277738de\",\"qd\":9433},{\"e\":\"font_loaded\",\"p\":\"/\",\"count\":5,\"sid\":\"662c26da172067c9\",\"pid\":\"e1951f7f0613db84\",\"ts\":1790718214260,\"vid\":\"a7d190616a3c4bb9df906adde4d5aa2f\",\"wid\":\"61df160f\",\"pcid\":\"a7d190616a3c4bb9df906adde4d5aa2f.662c26da172067c9\",\"session_idx\":1,\"route\":\"/\",\"outcome\":\"allow\",\"inc\":\"euwest1::1790718208-fLmrRF5kBrYKDvbJPo53OKoqYY1Sm8BV\",\"sdk_version\":\"0.5.1\",\"client_event_id\":\"ee023e36-2d13-4d6c-9553-15d07cc28289\",\"qd\":4430}]"}},"response":{"raw":"HTTP/2 204 \r\ndate: Tue, 29 Sep 2026 21:43:38 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":4195,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T02:35:44.45635Z","times_seen":18731120,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/.rt/captcha-handler.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.483Z","timestamp":1790718208483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /.rt/captcha-handler.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 3579\r\ncache-control: public, max-age=86400, immutable\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\netag: \"49fd7e13658f8b57-br\"\r\ncontent-encoding: br\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10456,"size_decoded":3898,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10456), with no line terminators","md5":"75aff4e397e7a4fc8e2acac5dc4fe9c2","sha1":"62351165b855360ff7a5c7b59af98a2cd917d147","sha256":"632b6db6ae6f0efc5b3637d1cec5de879c904e39f3edcf02c04fde0f49e1fd0e","sha512":"4ace2eacc8f5b6501961be58780336d4e6ed97a305329dcce9069019002888a54ea2254acbb14907713af842938b2d084f4f14bc049ceb790fdb2a8126580c01","ssdeep":"192:fe6Vi1q6D6QN910msTCsmhyBTbJhABvblQJWdVx:Hi1PDTOnZJZW3x","tlshash":"8e22c8ca7bf1703583d361b5d42f9a0ab23a0942784e81e1e17499b47db991f8123fcd","first_seen":"2026-07-14T19:46:08.570172Z","last_seen":"2026-09-29T21:44:40.852148Z","times_seen":5,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/fr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.981Z","timestamp":1790718208981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/fr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-6d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2318957\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h6G89eeKE2jBvYCKapxfj241szAntJM%2BzywR6s4u1vgXeK7%2FEWEDGivNvWRjIXgGyGcAz%2FcCPXqVdyr2dMjXf%2FSWGcqwCKAS0MrffXoCXQvdRNfCtRAP%2B63XN3j3Ng%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc52678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109,"size_decoded":942,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"808bbabec19fd88024f346a3c1b6da93","sha1":"a7baf6237774ca9b643c9f2da0bc5b9a0a7b5e15","sha256":"eec284175556a77e98f09db03f88aa064c2ff7500b56264dc119fbf8ee4ef6bc","sha512":"a5047a3e9b032fe529dc89a6e4cabb0e259f7d892493e30a5a013b54cdbe5d11c07925fbb6d3767132a5ca71730f895fec0321200dcfe4040c65fdcaf2e47155","ssdeep":"","tlshash":"04b092e3aa687c29db924d2211241244d426307e21a082457d689125219251ec0de286","first_seen":"2025-07-04T08:06:49.894286Z","last_seen":"2026-09-29T21:44:40.853386Z","times_seen":604,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/lang.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.479Z","timestamp":1790718208479,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/js/lang.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 57dd232d-2ca7-41a9-967b-ae67cc1516f5\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:09 GMT\r\netag: W/\"65d-19e8438b739\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 500\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1629,"size_decoded":1034,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"47e6f12593a25c3bc3886ab837d164ed","sha1":"1ac9d3c648641486fb9268aad427e6a42d214217","sha256":"2d7513550a5afeba7453f4381cab92be9c6bc9385035f09f8cacdd2084e06dec","sha512":"eed80ad4ccb38f7941e19952288ac54c656b21566e935a00972b4822980c497605d22a0d92e9dc2f5763404c6322c18014d4301464da03b0540f65c707c44707","ssdeep":"","tlshash":"f131ce1ae175363700b312d813dbba98a22204436186df057bfc9b861fd29a09ef35d8","first_seen":"2026-09-29T21:24:18.684848Z","last_seen":"2026-09-29T21:44:40.854028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/addv-img-3.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.499Z","timestamp":1790718208499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/addv-img-3.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: f55a0e3f-7e84-405d-9674-56c0be2ae274\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"8551-19e8438c14b\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 34129\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":34129,"size_decoded":34616,"mime_type":"image/png","magic":"PNG image data, 155 x 134, 8-bit/color RGBA, non-interlaced","md5":"0a66fde81b7448555e45af837c1fb70d","sha1":"8ea3263d9b4ff3f4cc59ea8e5e17dae7b2b05bf3","sha256":"00ad17da3e9dd31e8381e855c77f3d67c445184e1ecbfb94d12281451012ff0b","sha512":"d721c8391c847acfbb4f4809b5608e62a8f506f993306ef5c7069cbf52cfc39229241472bd5a72c943695d4d82b08e5e9e7ee39212ebd6ef7e3b1f265c102d1c","ssdeep":"768:mGH1rWG+kC1ceqr9Y65Tz6UuknxdB5oPvSiLXNRdqbMjToGP71cxT75:P1rD+P1cTxHHJuSbc6uNWM3FPyN5","tlshash":"47e2e1d0a11eacf990e9f1a63d8784b5b873695e03925d0d4efac04c9de0d65f0866c7","first_seen":"2026-09-29T21:24:18.687026Z","last_seen":"2026-09-29T21:44:40.854852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuI6fMZg.ttf","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.611Z","timestamp":1790718208611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/fonts/inter/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuI6fMZg.ttf HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/inter.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 9c4e2567-fbd5-4fde-96dd-5b4d0957fae8\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"4f6b8-19e8438c352\"\r\ncontent-type: font/ttf\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=604800\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 143940\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":325304,"size_decoded":144435,"mime_type":"font/ttf","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 16 names, Microsoft, language 0x409","md5":"eb0312411b133c48049ac630ab7f1fec","sha1":"78f01e4f13a7da5c283f4d0b5d36dc489eb5ab73","sha256":"8c883f63b2c4157d997319f2c8bc6995ed4357ef371940d31ca159004a4aae63","sha512":"d79527b4f0e7b43908d6ca69e104f9ec464023e9f5767f62decb532318f36a0a4b044cde66dd96a9f1eb0b2c4a1c82134dfc8d5c6f9b7ac1ef491454e63edf9b","ssdeep":"6144:LqBkGmW8XFE3q+DUe9MS3E+nr1kBCJWWUmQEEAwlokfVo7GiPKU3+OaT7Dfs:KkGmW0Fve9Rdk8WWU30KU0k","tlshash":"01646a27f723d35dd6462c38cbe2c3a033797ca1bc56a20b745a3a95ce9b1b419c45e4","first_seen":"2024-12-14T17:19:05.431584Z","last_seen":"2026-09-29T21:44:40.855751Z","times_seen":1303,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/no.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.002Z","timestamp":1790718209002,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/no.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2299378\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QeWhIBF18WeEpJk73kcBlC2WaJCmWL8Cd9EeWdClCkymb8WHr7m4n478TOhtmyv7Pqa7Zrb9NJBv9jmD2JalQXJmNz4YpX4uJfm80bSD4W5t16sJwzHUGcpvqfRpHg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e64ccd2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":987,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 4-bit colormap, non-interlaced","md5":"9d9545b9ce771270e7a1a09765cc48b3","sha1":"bdfa440b450c434248da8e98daf25faa49e0b32e","sha256":"2b03bf0a83b55ad0d9ebe2576dddc0d1eee11ee8cb6476363e2649ce9baaf003","sha512":"74224e9d0ec0d6e2efd01835480673ffec46660303e9b2886335c9262d4300f6ce7a868d321d66519fc71ce355584f8aa08550180a6e6dba458c3f9501c6e8bf","ssdeep":"","tlshash":"e5c080c17fd55cb5d5c7657a2421402158f9345877452d0144545a1158d711c71c918b","first_seen":"2025-02-12T08:32:15.780066Z","last_seen":"2026-09-29T21:44:40.856465Z","times_seen":332,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/js/i18n.js","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.478Z","timestamp":1790718208478,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/js/i18n.js HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 75eee71b-c3a7-4a9c-8c02-c8817c12240e\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:10 GMT\r\netag: W/\"15a0-19e8438b788\"\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 1486\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5536,"size_decoded":2022,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"c95cdcfbf687c319b13eed29b652ae8f","sha1":"26d2fda4455e9ece43b438849672717bcaed57e9","sha256":"7f84a661c7b4ac065f29bb6f4cd91084bd2952660ba55d851d3cfb894a8d708f","sha512":"b523aa9986a3f73460a7922d0ac5b0881bb7053487084b7712070f9975f02fa3a29d49c09802c94984371b19ebf3eb6cd46f93cdcb774f865bdbe4057c654317","ssdeep":"96:ratjbXdeudfivafeRcnObrYbyDy4b2zKk72y2wsOqNqDLM8Qf5KUp1PGYitLBZsC:ratjbXd7OPYbyDye2zJiy2wsOqMD48Qe","tlshash":"8bb120f969b33122093320ee935f5a41a2e95407e501f444be4cc7042fda5bae6bdbbc","first_seen":"2026-09-29T21:24:18.764516Z","last_seen":"2026-09-29T21:44:40.85716Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/addv-img-2.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.498Z","timestamp":1790718208498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/addv-img-2.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 94a0f3b1-3541-4606-ac75-18c30803ff89\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"eb01-19e8438c19d\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 60161\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":60161,"size_decoded":60648,"mime_type":"image/png","magic":"PNG image data, 224 x 169, 8-bit/color RGBA, non-interlaced","md5":"31a823d8c81fed7e5038f3bd792388ba","sha1":"67f5fcf188c5dada70130f811d9e8088390bf76a","sha256":"7a9b22def8e719c0851002a3bb36681a3e7aa35f68776b69c425f83912857ea3","sha512":"d72f0aebc6bd499ac3f65a250d4c33c3a9d5e7fcbde53b479f66cd2464f0f3324fabd202aa30702e054ea05fb5cc30fc336dbb18bc75e9cd11ad9cb89d33dc14","ssdeep":"1536:eCqmIALt7E3heoV+CfT6krhfvzETjVJyqkF/Lmc4BH/XnCkRlGPr:eLmIALlEYoPpXzGVJdktL94VXnCrD","tlshash":"f0430222ad30a8139a91ef814758c76709e6f5c0452aed62fe5dcffca286d1c50ce978","first_seen":"2026-09-29T21:24:18.674257Z","last_seen":"2026-09-29T21:44:40.858352Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/it.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.984Z","timestamp":1790718208984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/it.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-70\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2401969\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WpnI92eWhza8NMFuwlKyGTAPOWzH58yyVl2kKDHNYML2%2B8Les0%2FBC9NBp98ECASbP1KXSYJbscgy%2BQZSRVMpPf%2Fr4w3OJgl%2FL8j6HsI2gZ69t%2Fs2nxE5N%2Bdnr6rUww%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc72678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112,"size_decoded":949,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"c489137a2e2358b55b00ecd4e6c48f52","sha1":"b3904337d1e042782b5eec1cfd8575adb6ba3452","sha256":"13ac00068b4541fdac777c9710eea64044c365df6a72a1a94bc0c5765b8ba123","sha512":"4310bdd00e8dff466cfc2a4435f6b445e92f7a5c82055420ce4e877896fed32bb0487753f4dc3479db62bef3a15ca003f41d6a9562322c5a0709e95b10c9a682","ssdeep":"","tlshash":"3ab012c2b35cbd38878b1167842c91089976236f06b8c6fa650a85142b5204f85c9e9b","first_seen":"2025-02-12T08:32:15.804049Z","last_seen":"2026-09-29T21:44:40.859837Z","times_seen":376,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/se.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.001Z","timestamp":1790718209001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/se.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-68\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2334452\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jfS93pQNLZaGTvIW0RXbpTIA8LaeJTXX7VId89BgwYjXwgcpK5NoN5njSGLqNLqEvRc02DW5wyCT3M8ThSUIzvZNXTxNJJUkX1qjCAt4eEqrb17gmlvAezReDCMUgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e64ccc2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 104\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104,"size_decoded":927,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"0e977a4b2bb7d710ef6678345cc615d2","sha1":"d6a098d3b7e09f80e2604a466909237360ce29c2","sha256":"8ca56d0b54b7370d3c0cc2c631e24a0d1a0aca4e3f858dd2de64f175bb6fa70c","sha512":"05276196cb581c8ff99d2cc983251b8330f66b6832886bc1fc406e5093c727c9f41dbaecf85a5e7c14b170b97873495e1d9bf7d179dac46925226f680c0ff50e","ssdeep":"","tlshash":"68b012d3a6146c70c27a0773b10a1801dd193f181596164b7a1ac716630100dc0dcacf","first_seen":"2025-07-04T08:06:49.992173Z","last_seen":"2026-09-29T21:44:40.860527Z","times_seen":229,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/css/style.css","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.464Z","timestamp":1790718208464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: c2e2815f-86a1-4e17-9592-04490e99404c\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:13 GMT\r\netag: W/\"79fe-19e8438c56a\"\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 5674\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":31230,"size_decoded":6196,"mime_type":"text/css; charset=UTF-8","magic":"assembler source, Unicode text, UTF-8 text","md5":"6661b0a6c0e79f1b815558500d2b9abd","sha1":"4e815e01718401dd15eefd8ef95478da6b12b04e","sha256":"adb9610444d1545f4253a6cda3770272cbf6ed49208cb1485a810e5842c19067","sha512":"9ad1e86a170aa2aa1c1732d2f5474ec78025d1c9f01e409e5ba1badb3439e1da468a107db32f99d60f070a61d3d1da3318ac33e21a949ec4db91eb0dfb392596","ssdeep":"768:KRsBYTw72nB5KhC3dr/nEQDP7FZFsJfD6EllgFYCChrLdrbH:KGT7KB5KhC3dr/nEQDP7DaJfD6Ellg2Z","tlshash":"b9e2528666e61304b52bd8d86ee29b16777c8043810fddfc3be2306c9f8d1da55a278d","first_seen":"2026-09-29T21:24:18.702576Z","last_seen":"2026-09-29T21:44:40.861158Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/logo.png","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.486Z","timestamp":1790718208486,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/logo.png HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 1958170a-2b4b-442e-84ab-b6f14f11af82\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:11 GMT\r\netag: W/\"1d6f-19e8438bbc9\"\r\ncontent-type: image/png\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1901\r\ncontent-length: 7535\r\nvary: Accept-Encoding\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":7535,"size_decoded":8021,"mime_type":"image/png","magic":"PNG image data, 185 x 56, 8-bit/color RGBA, non-interlaced","md5":"0ec8bea681f47bdbfe307ab7fc785575","sha1":"6f90fd89be0ecdc483cb9d29b5f22eb6130d93cb","sha256":"6ec47ca4a1a3e6d0e766e2b4c088a3141469669312c6ee57b413bd78de283474","sha512":"0fbf3fa845d4d9b2d86abda1fbd68d57ceb1088feef465aff6e46695683f4dac316d3044699d054819abd02b0c6627aee7f5804d9cd139c4498b70385dd00cc9","ssdeep":"192:E/1eJQZvoaBTSbHB3y9UrfB3dX0Nby3LhwLPDSKwz:EKQZvrBedie/X0NgkPzwz","tlshash":"b6f19e73697e9305df2334d84de601b8e253a76908b2711b79e40f7cf022662bcd096e","first_seen":"2026-09-29T21:24:18.713579Z","last_seen":"2026-09-29T21:44:40.862071Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privateaimfortnite.sbs/assets/images/aim.svg","fqdn":"privateaimfortnite.sbs","domain":"privateaimfortnite.sbs","tld":"sbs"},"ip":{"addr":"46.29.26.38","port":443,"asn":6939,"as":"HURRICANE","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.597Z","timestamp":1790718208597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privateaimfortnite.sbs","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:55:57 GMT","end":"Tue, 08 Dec 2026 06:55:56 GMT"},"fingerprint":{"sha1":"44:9F:63:28:21:A3:EF:11:27:F1:BF:1E:D0:5B:FB:96:CB:FB:11:A2","sha256":"F4:3F:31:13:6F:EF:D7:DF:05:3F:8C:C1:48:42:3B:6E:5E:F8:57:E0:90:91:32:A6:CA:09:15:8D:85:8D:27:F9"}}},"request":{"raw":"GET /assets/images/aim.svg HTTP/1.1\r\nHost: privateaimfortnite.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: Express\r\nx-request-id: 004d0856-02c4-46dc-b132-974749e14242\r\nx-content-type-options: nosniff\r\naccept-ranges: bytes\r\nlast-modified: Mon, 01 Jun 2026 17:26:12 GMT\r\netag: W/\"1f2-19e8438c0fc\"\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\ndate: Tue, 29 Sep 2026 21:43:28 GMT\r\ncache-control: public, max-age=1800, must-revalidate\r\nx-cache: HIT\r\nage: 1900\r\ncontent-length: 300\r\ncontent-encoding: br\r\nx-cdn-pop: eu-west-1\r\nx-cdn-region: eu-west\r\nalt-svc: clear\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":498,"size_decoded":810,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36b2b2fcf779317dd95f1bf187ca112a","sha1":"655948b9f6361e785cfd593e76c8cc79be966060","sha256":"d8378661d41d653822b46ee4e348de2b9928f75e15e91001a52ecc1d59864389","sha512":"a938bdad291d082305c2cb16659187e9af4506be5340b8a8de3588fe7c24b83967421d0baea7331a9799d6ed35113ab4a26fb6c06b2a15ff0f93597fdf11658e","ssdeep":"","tlshash":"def02e699238683bf44cc1ccd6e6540431aa46576684c1856291bf3f8462c9b3c6d2e9","first_seen":"2026-09-29T21:24:18.734025Z","last_seen":"2026-09-29T21:44:40.863312Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"privateaimfortnite.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/us.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:28.978Z","timestamp":1790718208978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/us.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2627753\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=apgVS1U33eJD25YQ9HNK3lgV8tjDUEk19AhoQtW%2BqM1vtP6cjA3LH6DDeAM6e8Si4DrjM%2BVyrbjEgzqQ4TifLdTKtzV5%2BzMoV9Kvoxcu6SZ%2Fi2BRXDWqsov35%2FnesQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e63cc42678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 252\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252,"size_decoded":1085,"mime_type":"image/png","magic":"PNG image data, 40 x 21, 4-bit colormap, non-interlaced","md5":"893a96612ae6640a35ecb21eb66c59da","sha1":"31837ce8ddd2a679753c22bddb78a60dd3bafb4c","sha256":"09dd59a3417221f62c23c3abb37e9b598357502643a0ea9ad6561a50b2dcc1dc","sha512":"e5a34cc77562d700b57f3d86ddc1a89170c5f7a03d6dd0f03a3c89861ca87f91d2dd7a95211f8ebad1177ce942860d76e33b657d53f20f34d34d5beb69fe9652","ssdeep":"","tlshash":"ebd02be5f155bd210b4186121b4c59965c229579a292005e6071aa6d620d11af6f0583","first_seen":"2025-07-04T08:06:49.924394Z","last_seen":"2026-09-29T21:44:40.864173Z","times_seen":1047,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://privateaimfortnite.sbs/","date":"2026-09-29T21:43:29.000Z","timestamp":1790718209000,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 26 Sep 2026 02:05:40 GMT","end":"Fri, 25 Dec 2026 03:03:23 GMT"},"fingerprint":{"sha1":"FE:85:AA:5C:0D:D0:E1:D7:BC:CF:18:55:38:F3:6C:A2:F2:D4:88:F4","sha256":"5C:F1:92:24:B5:30:FC:2B:E1:28:F1:E0:BA:77:0A:BE:B4:6F:9C:6F:D1:71:FF:B6:C2:05:6A:12:68:17:70:5F"}}},"request":{"raw":"GET /w40/gr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privateaimfortnite.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 21:43:29 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-86\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1878324\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fFd3xXgnik%2FxE7qEvHtM9BIvE9j020ceH8tHJypIh8AsHVtlElGtv9gM7JTaYtf7azGh8ZbTWc869mM6RZB%2B1QQlmgdeP9bOmyG%2F3L0B9BiUZPMsvNO67SV0VgLr3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a42e29e64ccb2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":963,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"1e381e168dcc78aec6b3b4d6b4337c4d","sha1":"ae6cda7fd307f32d61db47b49eb5b50573017838","sha256":"3764eb1cf549d1a8903e4f4ed0cdf3b09a33306f32594273fd2299c4324a6918","sha512":"61a321e799e0b68ed053f7b00483b549af5b9c68b669f12f36bc690552c3af330fa29c8c94fc5a40ec08d83d3767dd0f54dec42c28f65e391fdda49d879fb3d4","ssdeep":"","tlshash":"00c02bc271243c34cb442333ae3c8253e83110649118334760cfe832c3d112eb1c6ac1","first_seen":"2025-05-18T02:23:51.239226Z","last_seen":"2026-09-29T21:44:40.864881Z","times_seen":190,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}