{"report_id":"405a893d-ae4e-4b81-bd57-43b00a609228","version":0,"status":"done","tags":[],"date":"2026-09-07T19:14:24Z","url":{"schema":"http","addr":"donaldtrump2026.com/","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"172.67.168.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"donaldtrump2026.com/","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"title":"Biggest CRYPTO giveaway of $100,000,000","dom":{"size":65339,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3194)","md5":"ca221a91a3c82514166f05e52ac1af19","sha1":"fc4424c9e21f8a8d3f82585c108ccdaf87dfb119","sha256":"bf08443638c33388fd874b4ac609a20fed4aab67239dff8b5ead136925f2dedc","sha512":"7b25b2c2fa692df55194e6d4911168ca4a9b8e4e098022d1b93c92268e329730be94beb3cd955c98b2fc2564d2a3972b68d2479a7727d53c53a15d85667f7f4c","ssdeep":"384:I+/DZIO8hrD4fgEhqqwoWOK3ID7MHdS9iki5vXitE2EIipibSrieii5ktSaFytbo:I2ZIO8hrD4R9woW7pZ5q2VlwNvvO+L2u","tlshash":"25536464b0f5647341a7d0d62ba7670a3ea9b00bc85595117bac8be90ff9ccadc7321c","dom_hash":"domhash097a8da3ff3c837eb2944e5f785c69aa","first_seen":"2026-09-07T19:14:28.113795Z","last_seen":"2026-09-07T19:14:28.113795Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"donaldtrump2026.com/","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"172.67.168.226","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-12T19:14:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-09-07T08:15:42.085292Z","alert_count":0,"request_count":2,"received_data":30147,"sent_data":996,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-07T00:38:34.167303Z","alert_count":0,"request_count":1,"received_data":88176,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":1,"received_data":20951,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":6427,"sent_data":583,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":2,"received_data":88358,"sent_data":1125,"comment":"","tags":null,"fingerprints":null},{"fqdn":"donaldtrump2026.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-26","domain_rank":0,"first_seen":"2026-09-07T19:08:58.474401Z","last_seen":"2026-09-07T19:08:58.474401Z","alert_count":34,"request_count":34,"received_data":3031604,"sent_data":17788,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"donaldtrump2026.com/","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b889fdde162a3192d6b4fb7feb86503","sha1":"4fef723fe0eb2bb55d7f625ca359305b2d60d81f","sha256":"dcc6e43d48662b9a4212ef4fad477fdab541aeb7c198dbc095e3301b82009153","sha512":"55bbaab56ebb00c1e18a45b2acb14826dbb58c55229a590f2a1851d802eebec6f6fdaad6c8002fb73b028f79844e5bdaac13cb000614dbf3ba14c3d9dfb7d880","ssdeep":"384:FOK3ID7MHdS9iki5vXitE2EIipibSrieii5ktSaR:F7pZ5q2VlwNvvv","tlshash":"b17241cea97856609376903d27bb7609687430975cc4b9babf0cc3401fee85d89f52ac","size":16019,"data":"","first_seen":"2026-09-07T19:09:03.377563Z","last_seen":"2026-09-07T19:14:28.142228Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b08947157ef724e9bb1ecd2af50c99f2","sha1":"c862c73b07cc7207f202b951e04de7a7e71e71ea","sha256":"5779c06e98889d050a8a1fa5dabbd16993bbcd8ac0ddf5b59c7f785908472085","sha512":"98e592b2066f3dab92d74cb9f43f4b99ebf1965eb66f1a05350411789a2a3fce849cafaefe2740bcaedaa29b1d923048d701b3402dfe5dfdc5fb4254f19f04fe","ssdeep":"96:hS2w7X5xEcRZZU/JavXING/fAvU20bmVvGbhI/C4F9p:4rvmGHAvUVbmVvG969p","tlshash":"eab1f054a2f17033409ff0d32bdb4b153aadb41bd8568505339c9bae1ffac86989398c","size":5250,"data":"","first_seen":"2026-09-07T19:09:03.378772Z","last_seen":"2026-09-07T19:14:28.145287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"be18e59d22e47fb72953d43452edb37b","sha1":"4abccae02fa5545fe1cb2dbab11063164e1ae594","sha256":"33e3f4647f4eba851ddd2f277aff63ab4f2ce887423fbb5659fa2df58efeccac","sha512":"e47522e95a3fcf8b8569d1d6fd1b11eef55c311a14eae528c7f2ebadaae4bfb47e54e0651b82aabc6b25c72872c8680b1ed45b284399ff84dca39839c3ba9a5a","ssdeep":"","tlshash":"7a61015f70f265b008bb392e07bf8a093a20140f2407df11bd5c5f959fe0a6852fa6d9","size":3409,"data":"","first_seen":"2026-06-20T20:20:26.755507Z","last_seen":"2026-09-07T19:14:28.145976Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-09T01:45:27.058415Z","times_seen":193772,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/js/aos.js","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-09-08T23:39:26.059677Z","times_seen":12159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/qrcodejs/1.0.0/qrcode.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","size":19927,"data":"","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-09-09T01:16:25.905403Z","times_seen":72571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Addresses updated from backend:map[actor:server1.conn0.watcher17.process7//obj30 class:Object extensible:true frozen:false isError:false ownPropertyLength:32 preview:map[kind:Object ownProperties:map[ADA:map[configurable:true enumerable:true value:addr1qypetsm8q60xaur3jxet09mytxtmqcgpquk6h53y92jnwedps0le45gmw0gtqx3hlgapcpnpvjge668j5dap6m3jttcswuatp6 writable:true] APTOS:map[configurable:true enumerable:true value:0xcc9f8d0f850dda945ff63d7ac0c55bfdf1172defc79712f3fe2264d7cfccf32a writable:true] ATOM:map[configurable:true enumerable:true value:cosmos1qdz06rj0km7r6f8tqsdu8ngdnay6x0095pzuht writable:true] BCH:map[configurable:true enumerable:true value:qq4mx0f0egcy39yvst60cn94mua6r06xv52s4enj6j writable:true] BNB:map[configurable:true enumerable:true value:0x02F015F002E75D719BE1930bBDEAE8BfaC4887a0 writable:true] DASH:map[configurable:true enumerable:true value:Xc5gPUt2y9Hc7gBRvzyfj78rVrCC5qhMrd writable:true] DOT:map[configurable:true enumerable:true value:16iRupK8pJQpv3d5UZaJf7XFsFoKg1jQgSVJYxLa3vN2JiKD writable:true] USDT:map[configurable:true enumerable:true value:0x02F015F002E75D719BE1930bBDEAE8BfaC4887a0 writable:true] USDTBEP:map[configurable:true enumerable:true value:0x02F015F002E75D719BE1930bBDEAE8BfaC4887a0 writable:true] USDTTRC:map[configurable:true enumerable:true value:TW9LZhuGJqFvPEMTA8z8Na2NuXZymyUo5L writable:true]] ownPropertiesLength:32] sealed:false type:object]","filename":"https://donaldtrump2026.com/","line_number":835,"column_number":17}]},"http":[{"url":{"schema":"https","addr":"donaldtrump2026.com/css/base.css?838434234","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.573Z","timestamp":1788808434573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /css/base.css?838434234 HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=2,i=?0\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mGlymMffC%2BLO4H0w1WgOLSZFdRo3HnAbKNqNcIuGLzVlneyO%2FPCTW4gKTy%2FUrd2z6UOXQwD5x83D2raqv9SD8CcdQ3IFkm1hiZIxt%2BPTvNrmX%2BHURh0ZJuwp8%2BKEhmudKoeYBoOs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-55d3\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c2bd75b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21971,"size_decoded":6080,"mime_type":"text/css","magic":"ASCII text, with very long lines (1111)","md5":"9bce2dea56658f6112e1810d2d330fc5","sha1":"c5eb5850ce98bf090c8137085ea88aada4806479","sha256":"9dbdab2f3e8d8534dc22e030029be65eda6a87f0b7372128690888e3380c0f09","sha512":"7bfde5b210089764ddff6d12634df003f3cc725b23af34756a111a12e464f3736a54d0bd1d1cce8599651b743520841c247c151d12fffd23f18cf98cbb56c653","ssdeep":"384:yaE0rccf4fzSTEWXIEiyhSQuCh6nV36G/sbujCq:yaE2cPm65","tlshash":"5da296227a10340a6257a003f8d39759613cc217e11b2efdba65a82dcbcf59e47f27d9","first_seen":"2026-05-16T18:28:14.676315Z","last_seen":"2026-09-07T19:14:28.115536Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@next/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.579Z","timestamp":1788808434579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@next/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\nlocation: /aos@3.0.0-beta.6/dist/aos.css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a378088c3f5556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-09T01:47:48.591416Z","times_seen":18356410,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":3,"connect":12,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.193.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.589Z","timestamp":1788808434589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\nage: 2021212\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270055-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 583361, 354377\r\nx-timer: S1788808435.635224,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87533,"size_decoded":30979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-09T01:45:27.058415Z","times_seen":193772,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":9,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/plane.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.603Z","timestamp":1788808434603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/plane.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MM%2Fe1w%2BFdsB2iqQH10UFgNAVgekqn2DBDi23qCF%2BzY6PvMWrWd10Tl45lAvfJZXmhwum4x5G5UVMdBImJ5ce90ltiH8X3xcOaIQUwCSzjhtP%2BhayELM%2FJaaGPCHnxobl3R4fhYTr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-309\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c5c485b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":777,"size_decoded":1146,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c0ecf990d433a9cb7c5ff001dd5028c2","sha1":"6a3078c8ba6b3190b162a379df059e61faf794d3","sha256":"dbdcf76b765b7f48b5e400dccc01075fc678873ad53b7dbd3db7d77372cd70e8","sha512":"981cee989b2f23a955435a68a6aae610b067453e1be75cf7c6c0461e394ebef578ab9a96fc772f8464e1ba0f0b9007e55aeb39cfc3107803d6eb105aaa7c9a56","ssdeep":"","tlshash":"370165a457dd87b4f08c4b7e072d28717e7278d673c5c8e9d5575400b705b4e6411e8b","first_seen":"2026-05-16T18:28:14.746381Z","last_seen":"2026-09-07T19:14:28.117514Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/gift.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.606Z","timestamp":1788808434606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/gift.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2Fn%2BQ8fFqCgc7Qq%2FxfZxqfU1ZZCauG%2BLF7nOmGjD9Gll1gWWN%2FL%2ByraV11bKArtEVL5hC2hT5Ln8c9pI0XTZS3MCcppGoN7dbzS0BmwwzKdaHmaOpIW5Y%2FN6WX2AFXPNAJCWIRbT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-6d9\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c5c665b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1753,"size_decoded":1439,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"077c4bf46ba96c7a2e6c9bd7c0e13371","sha1":"72d9c3d284f46102e4f68687debb58bab61945dd","sha256":"91408e734629a7889949864ec932601d89e0312e0271006b0cbb37ae5df87389","sha512":"464aada0c911eb7921d372268de7c16125035f03d56e8fc806de9d997a1c384254c2ecf743006cbd3542db1d535c133be9d058c9d93df00cb0d64ce37b457dd3","ssdeep":"","tlshash":"26311fe17318d274aa14b37fe23ab4383d8a00faf5a2c689c740280d75238ad1c9d9e1","first_seen":"2026-05-16T18:28:14.679337Z","last_seen":"2026-09-07T19:14:28.118067Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/tron.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.614Z","timestamp":1788808434614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/tron.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pM0y%2FDg9SVhVICgolKl9ADIKfBVbfRutmhZZmTJ%2FybetroDKkF8hBMKf%2BUh2ci%2BjrCq1TtxQ99b5isHlNMu49p218YBHVnzBS2r987RP9WIGwSDm384Qe3Zv9V364paq2wY8oSXg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-5cb\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c6c7f5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1483,"size_decoded":1447,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a49e83f23ff04adc130d6811af93789f","sha1":"437facfea6b7d05d1495c37c6875d2cb4c17dc9d","sha256":"1aa9bc903ee8815dff1698b25afce652fa02fc73d9be4140308c7049849183c2","sha512":"3d8404b62692048d1cace9a2f758d4d8b5de6b97b6a7fa8be5f901429c43234cacd473948eaf28b5def8a224bddad0ee348edff65f9074b880bf656ad5b7fd37","ssdeep":"","tlshash":"693135aab6a8f5c1340bd7f8c52794b1732e20f937d6df6e11505d707e2409d8458e91","first_seen":"2026-05-16T18:28:14.73993Z","last_seen":"2026-09-07T19:14:28.118693Z","times_seen":7,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/cloud2.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.825Z","timestamp":1788808434825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/cloud2.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/css/base.css?838434234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 16588\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-40cc\"\r\naccept-ranges: bytes\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S4XY8hJgX0sUKys4omtqGnNLwgLP7zRQLerPGeadUnMJjFO1wXFDEfF0bJhbFqKEOeLiSJf32PgCdY1RgiM3MheaeMqpHpQ4yRlwbYMZN4C0gKCkjcWrVmzTIPq0v%2B7iRqrM5WyI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a378088db8135b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16588,"size_decoded":17284,"mime_type":"image/png","magic":"PNG image data, 487 x 487, 4-bit colormap, non-interlaced","md5":"91090bc4a65e659c3cf5643dcf777002","sha1":"79ab39618d7f0cb5147c646ac756a3ebc881c8c4","sha256":"2ad831af05a8a055035b11b766ddecb4c0221612b93ca89bcfc77d4cbd7dffb6","sha512":"0bebe538504df977b59c91d6257e6287b759721f88f59121530c8ec64ceacde497255f10c82a3783cba49c5ec3c61fbe8d2a8529796120a2933a867a18734cb0","ssdeep":"384:lRKyDy4DRY+7zXaotF7QUwx2phYBHDBx2/ebBEq7Kjh7Rl9u2yI7ww5www5z:eyWgaMXl44hYVDBxB2h7Nu2yI7ww5wwe","tlshash":"fa72c08c02820d5bdee7a41e0e733cbb811f94a3171da0f563616a49cd1196afacf4bc","first_seen":"2026-01-24T20:08:02.363576Z","last_seen":"2026-09-07T19:14:28.119291Z","times_seen":17,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/check.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.604Z","timestamp":1788808434604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/check.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vc%2FE729W%2FirBkKJp0ku1n2zop4eBDz%2B9Phf57tjsGMgQCAchXVI8UGI3V7rouB%2F3S%2BJesDqm8dAzj1Vkodbkgu7YK1K8Ncj9D4rv8HnqQJ1bQtIBwQIaarhxWtVlq3yh2cwxVXRm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-2bd\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c5c4e5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":701,"size_decoded":1080,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd12282264bb5d7222cb72d3e5bb3f49","sha1":"6cb9cf0a8d31aed8c441a43d45e8b568547827b4","sha256":"4fee6e511a7e6e6768dca696f70491cc616548b6f2b73f6c876d7038c05a80b4","sha512":"3ee408ac81964b4c6f47c0ffbb43d4dc862b8279aa91c91a1a2529f1076f83374fb25829902824ce73cd6f4145e762e5056e9923fac5c7fbc801f04ae2c0e735","ssdeep":"","tlshash":"e8012390221c915cb000d1be4211fcb9438f14ef71b4c6cee3e1b4001483d3d1c8e562","first_seen":"2026-05-16T18:28:14.711265Z","last_seen":"2026-09-07T19:14:28.120089Z","times_seen":7,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/cardano.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.615Z","timestamp":1788808434615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/cardano.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOwte2fgPXd1AwvXCs4ny0W7%2BOim%2FsXEw18fR%2FnOIc3%2Fd6l5LIfjjWpDl8KTI2Zss0U6QOGqjGdRCa03y5ai0lluw7SGAVeZvOYx6jVp7n%2BwHK70E80%2FI4rhVMtPaPzDM7pQDdGk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-1d74\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c6c865b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7540,"size_decoded":3716,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e3fa0fa3c2823ce562d064545c87b4c","sha1":"573cf81117b51214aeae92a8cef9d9bd34d98dc0","sha256":"a741afd681014a50c81678e84b7c656ccba592eca361baba42d805b37fe0d7b9","sha512":"9cfdaf6fd4c5c03ae89489b5f24ae6d783fcc5755a62581ea5bba5a2ad550e29d47b74b2a9badda075d7da9a03419966bee18bef5523bc72fd726986e6cc9d5f","ssdeep":"192:nJRUd1wEN3TnK+Qha+XhDdpeZSVxC3Qhpt/HVHm4tHFwX7:J2WENjMhfZd8SXpZ9zwL","tlshash":"b9f13fe6b3cc73d09607d771c827903a786b34f97b568f4882045e8971622ab8ccccd9","first_seen":"2026-05-16T18:28:14.703181Z","last_seen":"2026-09-07T19:14:28.12066Z","times_seen":7,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/bnb.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.623Z","timestamp":1788808434623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/bnb.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SAiPohrQ68c3InZ72z154yI%2FFR1bC8eRlH9BffnT9K6EQ%2Baq%2BzznnTWd63P0PLuCg07lz4fRYlvdCiE8h%2Fg2h6f3FYHWL66EU84E3tea4n0Kru4oZ7N2QvYcmNGguPMts%2BwguKC%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-414\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c7cc45b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044,"size_decoded":1236,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1299b8f85eabfd5fd5d9a55441d71f87","sha1":"09cf146ec8982bec990075eb2eb1146c4f35d86e","sha256":"b2094725b282936e2a91db762730d45b59490cc94a43ccf665ca1eaa351f3f03","sha512":"80aa95d76651970a8021d62408c82533375c0fe444d85a739341f5c2a6855970e3bca6ed788aa2e8967baa504d3f42b7265efe1ce7deb0428d42d09c909ff7bb","ssdeep":"","tlshash":"871189fe9288afd0940693708a18f8fab05f71f67a8c168c4182285777683dd4c0dd4d","first_seen":"2026-05-16T18:28:14.722417Z","last_seen":"2026-09-07T19:14:28.121043Z","times_seen":7,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/cloud1.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.824Z","timestamp":1788808434824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/cloud1.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/css/base.css?838434234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 12212\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-2fb4\"\r\naccept-ranges: bytes\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U31siwYlzhepyUdDCiFhxSU45UwkN3OHQpVsYJ8OzQnoneRgDeiA4w5GSxChEhrwIjoRY%2BwE0dRrCpVbRjVwVtJG812EPl%2B8Q53MHPQsuuvEAsKqChrDqCOmqI%2FD3mmPfGI6EPmf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a378088db8115b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12212,"size_decoded":12912,"mime_type":"image/png","magic":"PNG image data, 419 x 419, 4-bit colormap, non-interlaced","md5":"1d34be06e9f83df6e6e4a81531e7ac4b","sha1":"9aee96e689001e813c1edccba27330fb4ff962af","sha256":"5883f58b68af30bcbcf8279e5d044ffe191e1f3f19e6e4370af9844e0ee1f3ae","sha512":"9ffcf1f9656519bd3eddf97dbac05ac574f0f8cdf9d08f55237a841d570eff8930ce1c2296e46f76628a2f171b3b7d9e86d4d53c18fcb2dd3004e3a8817e138c","ssdeep":"192:CSVEHPVX6kbFdJNEqDw8fyUq50LHj1rWTQar6QF3UViHfeZvbogQ966s0uUa16j/:duHfbFdJNEH8Pq50Dj16XeQxWiwM2pjC","tlshash":"5042c0b14bfb9b745f22187e954512d635d4f3d081ef33202ac0a079955b2feb24366a","first_seen":"2026-01-24T20:08:02.348468Z","last_seen":"2026-09-07T19:14:28.121668Z","times_seen":17,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/qrcodejs/1.0.0/qrcode.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.587Z","timestamp":1788808434587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/qrcodejs/1.0.0/qrcode.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6083\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2735911\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 04 May 2020 16:15:41 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FOXF1py5KDPC1tFcOQSLjXhGk0sIB8W7azH5dKLSKlm2MdxgN3Ni1Ne%2BIttbS9BzEyCqmlHPM0DMK01kr1t6fRiJSuQ8tjrvAndmOBFUCHjp3uSFy4joKHs%2F5%2FO9z5N%2FA5%2Fb3v2Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a378088c5c79b50b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19927,"size_decoded":7107,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19927), with no line terminators","md5":"517b55d3688ce9ef1085a3d9632bcb97","sha1":"2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b","sha256":"c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36","sha512":"08d80845e706a3b9e985b799d3849cd7791ad3ba5aa9d793bb4591d4833890d7299810144874905f416c94d8530da74be0ee520066a91ade05a1da8bf0ccb498","ssdeep":"384:WRQ2kvcAAdTRhQLThP2yO9/9G84U5xOiKQYHHHsglDep9m1yfB8dKLMyA+LyUyy9:xThP2V/9N4U/gQYPXa8CAPLyrZ","tlshash":"8c92c7e4f36542f6915e6cd4283f104b64a0a4636c1490acbfb5c1e6a9f8fe0647af74","first_seen":"2023-03-07T01:14:56Z","last_seen":"2026-09-09T01:16:25.905403Z","times_seen":72571,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":13,"connect":11,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/wallet.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.601Z","timestamp":1788808434601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/wallet.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Q%2FvBNEm1%2F7oYPDjZHr77sLxhe919swfFprcHWmCYPHwnyJaeK2Gn3%2FekyJiaO58NbXLpProe1ADEOQ1g3a1ardAh4jTF3Jm2xpr6bWuFivJPi%2B11%2Fx5X2wMhdugO9em9PXF0V4Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-8ae\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c5c455b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2222,"size_decoded":1645,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0158a35049e671e21367c9683bfde2b6","sha1":"c4dbcd2771b9cccad206c58ed4a086866ddd6f20","sha256":"0f94ec727ffc6caf6443990548e4e695a173477bd535c189e6bf1f5602d831dd","sha512":"7b06e853b25617b30fda4d696675044c07fdbc22e88a8ad6e4591e8a162b33c510756f3e903f3ebeacc002c44b6ca93209aaaef0147d97df41590aaf5ee7137c","ssdeep":"","tlshash":"24414148335d47a86008d7bdb719a475295b29e838d484eec3b2ae0169e746d8c8bfd3","first_seen":"2026-05-16T18:28:14.744971Z","last_seen":"2026-09-07T19:14:28.12277Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/dogecoin.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.616Z","timestamp":1788808434616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/dogecoin.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WoTHhPLRIMb7hEawF10wOoqRfSq5qZ0zH66ODpFVrvVlbU8aISRPTrsgDqqmsz25TITvZ96Ie%2F%2FY1Uuy%2FbUWssb8q0DeAEwx2uSJTmq0xMmCaxFMPaLVxu7AmvfoiEjoa6AkdFn7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-1705d\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c6c895b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94301,"size_decoded":38223,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d89cd86766e1808b27343c21d819b2fc","sha1":"8e28a248b09d0c339780b4f8fc492f7e9a89e9bc","sha256":"57fcf7ce259debf3f564e733cf5ab77828fa279b21fb70db5d27ad7f096b2a3f","sha512":"024875b9bd60113af303a6055e578a265de2445ce754845369057e02aa3e6082d179fcf0dfc75f93f53e99fc73918d63b87c38e5c0ab98246d3db241db56c862","ssdeep":"1536:S6II9c7i0nMgq3ECjPtKaT+IdhC04rST7o/7G:B9","tlshash":"fa9386f372d4f2e09507dbb4dd2645e2b96b3cfd7f998b844290aed46a111a9c88ccd0","first_seen":"2026-05-16T18:28:14.732947Z","last_seen":"2026-09-07T19:14:28.123309Z","times_seen":7,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/solana.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.619Z","timestamp":1788808434619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/solana.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnpREuNMhwknYsywDE06BGvoOMz6Q2vNXEV%2Bkp%2FfSD2TQ%2BiyJXUO69l4BJAQxjsvKG3fmDI29RqPgF6AVS%2BTG0EKFoXAMzsGjgtytTR3KmkZ%2BvPg8qWvLTFHRqOAKZlrJ5gS1UCY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-6b4\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c7cb05b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":1343,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"606d3f926c5dcd22171e122c1650764d","sha1":"087ddf85c1965c6d519bc0b1f2d283aaf20d1139","sha256":"a9ec8fd3ba70db4147353c081092b12c13a27c9425d58f73dd8e602a064f8271","sha512":"deb35823bd2b6a599d6199c4b89a00923654f3df85a78275e3d23526f7239e2c3bf09d22c2e2dadd1c9ecb023f9eb0b47d7930c2ab93a98e8475b55222ed8f06","ssdeep":"","tlshash":"05311273f5dce832d015e34dc924852a906a50bba7c5da94c2d0ff6e676b0c1590edd0","first_seen":"2026-05-16T18:28:14.749047Z","last_seen":"2026-09-07T19:14:28.123907Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/logotype.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.820Z","timestamp":1788808434820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/logotype.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/css/base.css?838434234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=4,i\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMczZSkLWYpegQbrLseb3sCCrudJI0vr%2F2vNjhWi40tacAhQ2B7CzzCazjDtwv%2BtgJAxIK2w4kD7dHxKxXFwOtCTGYUINKHGP%2BBWtEUGnjqBC6sHSrxwDcqSHm85PF4IIL%2FHarHW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-562\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088da80a5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378,"size_decoded":1423,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5d6fc5734dd3752fc580206fe6073cec","sha1":"563e9ba577f83c8fc3fb521bcd0514c3348ef20b","sha256":"8078f2a98ba043b4bc4efed692a32cd7f47958b6ea0f541a368afa2a1d82abb5","sha512":"b9c7e41cd45319bef3f1f28a956a2417d07dd2c4f2bba3dcd6486e292726bb91bbd4fa71672ef78ebcec3e25856ad73ca986c6dffe8211d719509404af3fa289","ssdeep":"","tlshash":"112133f2b1ec64cc51868720d7a988b14b2ee4f1b1108049ad0e226355b3dd5f85b6cc","first_seen":"2026-05-16T18:28:14.723759Z","last_seen":"2026-09-07T19:14:28.124784Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/cloud3.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.827Z","timestamp":1788808434827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/cloud3.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/css/base.css?838434234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 10556\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-293c\"\r\naccept-ranges: bytes\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YJCEmh%2Bbv9Vks9Prxep5Pwz%2B5eYiuGHS%2Fl9rk4BTVuMvLBHqWyP%2BJAi6qM6%2BULGRsjec4GSMCoBuxwh%2FKmnm2bF3ChqT6xq%2BJwzzv0rEtt5SFcrTrg%2Fyutt4kJ342eDamNlfF7f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a378088db81a5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10556,"size_decoded":11266,"mime_type":"image/png","magic":"PNG image data, 223 x 223, 8-bit colormap, non-interlaced","md5":"9d12fc1b62ea70688f6190dba92481e1","sha1":"798986762f2a9feb0896d2666d179f8044dd8796","sha256":"c6c95c84246185363e35c345c3a8cd161f0ec63b6dc0a8d74cfd29657e4d7354","sha512":"b697f93eb47045ed320e3ebafe8af9d5b74d7b605a2ecec8b2e7b52fd7ca6e7aa47d77799c84a5bef23b1ea0e7c0d9db8f483d9aeffb965a7371d6a86350ae31","ssdeep":"192:yS7nJubkalf2n/iin2VjWPlskZSNutRwEJ+zii3bBCklRkFqjJkFQS2d:NLIXlfA/wtWP6kZ8EJ+l3UklRkkZd","tlshash":"9822bfc7cb06a2e9d7f6405ca6ea8b951ecec0d5c0a70355d7ca361553432debc980e0","first_seen":"2026-01-24T20:08:02.320631Z","last_seen":"2026-09-07T19:14:28.125351Z","times_seen":17,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.576Z","timestamp":1788808434576,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 07 Sep 2026 19:13:54 GMT\r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5743,"size_decoded":1464,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ba516ebb3ab4fea4464db2bdaed0d156","sha1":"53cac988d844f236a45d12e3702ca461371ddb75","sha256":"a3acf145812734a91f3f6daa817027c658d74cfd9d9c86ed34e96425697a7183","sha512":"31ab039bbf3c91f0ed873c07fa752755ef97608c5127a5a1ff47c8d4f21a83afb631d4e674136515aa480e4bcfc204ad1502d9b2e909386ad57c06adf99c65a2","ssdeep":"96:1OEa9Jc+upOEaKNDYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTI:K1/xywfydyGy63gy/yFVyR73xpmj3U8F","tlshash":"04c1fd91046f9104ea431dc627cf7e32ad8e52956082e2796ffd2cc9acdbd23532874d","first_seen":"2025-11-13T23:42:24.929952Z","last_seen":"2026-09-07T19:14:28.12593Z","times_seen":20,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":36,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/ethereum.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.609Z","timestamp":1788808434609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/ethereum.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwqQiV1pmeIHpVjosHPTda47AvadvRL0qUzrlWhYIKulvbPV53XKA4BEm%2B%2BR%2F2QmatZ99xQ8f%2Bu%2BcVCyaAaF370xZPL3%2F8ars2MvM3TPveuTDDCHuQ7TOB4hB4YLd%2BHmcmpmBfas\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-2db\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c5c6c5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":731,"size_decoded":1038,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"421c980f9c5eabf646dd62198a397ec9","sha1":"cc4e248c5ca7028835f7017441805b9cdd2a88da","sha256":"49bdaf2a71308054444f98108b4a683a230863aef5f9c088b72f79a7d12f8a47","sha512":"7bf81f043a930f98c57bac5f2b4d52a44104fccdcbc38adb8b6d0d4f07d4979911892463c119f46ed12fa41db377a6bb7e576990f9e289d077c3b034c5ff6ffa","ssdeep":"","tlshash":"2301cbf77588fc40a855bf20626bb03120373ef4310a860820602b6b6cb1ed70c6c5d5","first_seen":"2026-05-16T18:28:14.747757Z","last_seen":"2026-09-07T19:14:28.126532Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/litecoin.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.618Z","timestamp":1788808434618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/litecoin.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0gSbNQlx5%2BBIt%2BXKp1tJgbnW8%2B4Cp5TLwjLOMmKfQu%2FhKZT%2FJrJzzL34fk%2FDxxgdvSYE2xEcv7O3bDIajtYX4cqi9BEHtjPiCt0QxCXHjllp0Gz1sun%2BYfSH1GBxdfQQP%2BAB7t9O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-3ac\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c7cae5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":940,"size_decoded":1253,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c879d63db28c2eb76dc926aaf7770e70","sha1":"540364f938b7ebcb26f22cb64e170102e75b95f7","sha256":"3e40786181d4c8886f600968335e1ec9c4008267e173c96e3532e7e367b050c6","sha512":"84199d7b3e858d3fd4a088b37fd1197d8276f05364e3d16583cedd601947f5e14860a6d9a96218cf3b488fa15b82d664414567100388b309e55f12e12c7f26d3","ssdeep":"","tlshash":"0c1140e3aea878984141e774e32be1b4323228fb7fa6c215c2802f106c471e07a48dd8","first_seen":"2026-05-16T18:28:14.736584Z","last_seen":"2026-09-07T19:14:28.127247Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/xpr.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.620Z","timestamp":1788808434620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/xpr.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cYKUtfwDzUszK7fBqhVNldkdT1OE8o6wkYsB6rEjbs2rFyhiXGmQdKAcF9iDfYiJYKzVldT6n%2BYREqJqVaqfk30xs8hZ3moZ5yYwEqsmKeYyDE7g6iLYCy4tfUTDo39ngsJPnfx2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-311\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c7cb25b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":785,"size_decoded":1114,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6025cec6c36da5f382701a45c9ee5116","sha1":"60da84d656bde662f9ecfa3bc68c64e62e2bb236","sha256":"5c29bbbfc561dc81dafbecda0038d0603060f77bcf6067a2a6573b233f3d3899","sha512":"cbcce7d73e90edee306fae55ad588ffb970a903854a1c6ad720924be0e10b63ca04cd8dca028839f04aadf38911d89b6bf92110f3876edb511a2d5b45c6f3639","ssdeep":"","tlshash":"4001c9f8938dd240df0983796e0ca8b73c0d64b7a38e075586d30a2531601aed448ee8","first_seen":"2026-05-16T18:28:14.741465Z","last_seen":"2026-09-07T19:14:28.127778Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/loader.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.830Z","timestamp":1788808434830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/loader.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/css/base.css?838434234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=4,i\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HliDQbrJASZtlpOwQI5F9S%2BtE2RC3TULCRpG2eo%2FnXZ0awNoJv5iCEUX%2Bnsd4Ago7rC93X2mXjqmCUO%2BZcQZXI%2FGsZuTU29ZziMfXu9j%2B4cwhDRo6pHSisdwmy%2Fh7pxH8I2CT25l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-692\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088db8225b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1682,"size_decoded":1483,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a34b7142c820e34c4a1f4b4493527dec","sha1":"93305d788534746dde80956134e6ce4d8e421bcb","sha256":"681420a94671a2408acffeaf97a8eb33e33c22132739db74e3d63c4664b63bb5","sha512":"4a70af56538e272f206e7752b2c6e19a46c29701862d792bd42d192171516ef6ff6bd65eb2f2c608e3d650853f3d03f9dc66082e3fc6d299ebaa9e79007cf995","ssdeep":"","tlshash":"f831fce62682a0d040469b42bc257035c81f38bd7bc9ceca9284ede1bc3d7e88d89c53","first_seen":"2026-05-16T18:28:14.750302Z","last_seen":"2026-09-07T19:14:28.128351Z","times_seen":7,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.838Z","timestamp":1788808434838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/bebasneue/v16/JTUSjIg69CK48gW7PXoo9Wlhyw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donaldtrump2026.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 02:34:24 GMT\r\nexpires: Sun, 05 Sep 2027 02:34:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 232770\r\nlast-modified: Tue, 16 Sep 2025 13:27:24 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13768,"size_decoded":14581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13768, version 1.0","md5":"5853435d21b13022c663f99f2bd76107","sha1":"1f063bd9a3dfa8dfd04e071c0a18369a971f8351","sha256":"a7c90c89240c134f7fdd33d40c000ec90b79d675ea53e8cc5a6d423c073de412","sha512":"7b7ea49e16c5255394872c346ea109b6687101c03e6c69ff634f3e835d8f5fc87a6e9846e1dd95e9b4e54592a2a26ed139db16c35958c6abd6e877fd5bb2f9ad","ssdeep":"384:CEEvtXmScTc9b7/kB++WPXP7kRU7+YTSagBj+q11Q:bEpn7skjkA+YTSagBS81Q","tlshash":"d052c0b8d5df2408c784e2b5ab7c2559c8ca1691d078bfb91a3235069f62d2180bccfd","first_seen":"2025-09-17T05:43:28.937898Z","last_seen":"2026-09-09T00:52:46.134194Z","times_seen":12936,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":24,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/favicons/apple-touch-icon.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.988Z","timestamp":1788808434988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/favicons/apple-touch-icon.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 5517\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-158d\"\r\naccept-ranges: bytes\r\nage: 3212\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xPIOtGlH9K0VTKVocMOGcx2pYmFzw48iR8c3vW2BSdORP7seL96N6sr3PgS60K%2BhIb7pjs6iTq8CCwlJYXXUti%2Bs2Ov7ljd9lxoNiA0VHoBqPlz%2Fmu9muWkzSEKLmkJwdFZoOT4v\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a378088ebaf55b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5517,"size_decoded":6220,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"3289f12896f2e2711f038368864edf85","sha1":"a5ca6a550cec183645072b48af5a8d31febf81f0","sha256":"aaa3140ac2dae30698fed49b09f6421d71ec9997548fa96d294afa0602d54989","sha512":"9ea0ea0aa7aa1d62590191e2377b74c1a362c36fd4893033c95d1f4805be7cff560cf26c833259e503b26845501d8fcae4edd3738695f388613615f98b705ab6","ssdeep":"96:rp6PVTMXUTlo5EndrRzvVBQL0LdCiQYDZPLHBQKVzEBiVHLrc7cPQ2BXDVeEEz4F:rbUT+EdrNdKQLARYHvZEB8FBbJEM","tlshash":"80b17e633b2a512fe6e7176fcfea2615182ff1291a31d3c6d063314ab647a4f06d25c1","first_seen":"2026-01-24T20:08:02.359426Z","last_seen":"2026-09-07T19:14:28.129731Z","times_seen":26,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/tether.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.611Z","timestamp":1788808434611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/tether.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bs6nuX7ZUMO7jospfmf6KWnz5M3MZeJMO%2Btrr7bYXdaIkXBxunVIxDIPka%2BzkTq2JgckYvyk%2BmnNJ1DR7GZ7PyIPe%2FQkPXNK7gIMMaiRGpaBgBI4gop6aUIKskOsw8%2FIhu3ZaKyr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-486\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c6c715b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1158,"size_decoded":1289,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa75c03f2e687fd791cc088c1e36d36a","sha1":"381c83fc04cd39176ce141a4b6d4e837fbe207c0","sha256":"eda5d59bb8413a26a93a37bd9630ada21d9b535b9aebb01c5c3884488fc5c52d","sha512":"3d7ca856c06f3b2c4337c901be8deb3f092fad055f5c30481178fc06494802161d82cef749030994c02d3d4c5d7cea52fec89819a623cc3afb7ee809d7acec35","ssdeep":"","tlshash":"8c216befe6ccb5c0d50ad3b589296df2380f34bb675a835487d15a1437a22ee448cc55","first_seen":"2026-05-16T18:28:14.728029Z","last_seen":"2026-09-07T19:14:28.130301Z","times_seen":7,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/shiba.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.621Z","timestamp":1788808434621,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/shiba.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zr5D9HG7thjmEn8pBTe0XQmJDMEy8LDxGcSJ1%2FMofaWSWr6BlComlDORQAg5g1wBvnaHjYPQDDP3XGW83KQrd0LMzsihYi4CGPsqMZIKY7MoNN9BqFGGu6Nxu%2B0nGmXcEDzQZvsU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-1773\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c7cb35b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6003,"size_decoded":3105,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b0504ff5cc03735acdd68c4b4e28dfe","sha1":"3e2531f10734b49e31e4573b2f9b6b1069a12848","sha256":"26156dfec82f6a1e636ed1f630a9aed6d70aec4a65b40e365892969c35cd7995","sha512":"2633dda110ed74eae14cd6328fb0747029ebbf43bc6dd7985af1005851cea39a8c77e28d8840120c797eab0a9b321ff1732ef16f5e034b11b44cfd33cc9e8a1c","ssdeep":"96:nF+b5/DZLEFuZti0MVJbrByWzcwBJDijxTE+HwinXhmISWnLId:nF+BZguu0MjPZzcwjDikinXvPnL6","tlshash":"f6c164f6a2e8b1c0f9479bf0d95754757a2b34fa3fa58f864291eb9075304a58c8ccc8","first_seen":"2026-05-16T18:28:14.684767Z","last_seen":"2026-09-07T19:14:28.130884Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/flag.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.826Z","timestamp":1788808434826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/flag.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/css/base.css?838434234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 30500\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-7724\"\r\naccept-ranges: bytes\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3qbtY7u8DV0qqNIbYPLo0pDU02SBuVjmrvin9jlYeyZPAN6yx%2For0klFXYG2X2NOFhKM918F4iTZLeQ7cHi%2F9uKI51cT7BINM4AunTxgIT8yGGJNZ83tqqKHA%2BEUz8gz7Ww2iPqv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a378088db8175b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30500,"size_decoded":31200,"mime_type":"image/png","magic":"PNG image data, 1672 x 1288, 8-bit colormap, non-interlaced","md5":"404268d1c066f7a897619d9c7b05cf07","sha1":"21f526322cda72bc42aeba6452bd555e8949a486","sha256":"8406506297fc2d84c513039e2a36ba98feed42edd6e812a1e4d620a1157a17eb","sha512":"c2dc98d9ced29aa6763b331aa0c64aa6d625f59bf687621ee21eb79b0f3e254df317ae17f3fd06592d36ac586c12e7b189d98aae4dbcef39c654ae5e122fb207","ssdeep":"768:mclf0DsYGgSu21mRgDOpDT1MNs4IoqZ0TBkTAR:s7CueShTSNs4IoRTBkTAR","tlshash":"9cd2e2691295b359c884c221f40c3e4b2ecf92afd8375507bad9c18e66f194ac1d35e6","first_seen":"2026-01-24T20:08:02.350812Z","last_seen":"2026-09-07T19:14:28.131423Z","times_seen":17,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/arrow-right.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.828Z","timestamp":1788808434828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/arrow-right.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/css/base.css?838434234\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=4,i\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vH1LWSJVpdHgXcuTcjvW%2BsSx9iJpiml9rdLOw25psG7nc1THd9LMlOWuqqAlh%2Fu3CTwutrwdQfCQBfGuGqSl7yxUgLHqdC9K89bYf7a1kc5ZzMxeirAJllLVtJLbESDOQ9TxZE0Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-de\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088db81f5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":222,"size_decoded":856,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"235d465ad1607e634b240987be7582ac","sha1":"5022bda29cef8196860617b420a27c771c0ec264","sha256":"a53ab504c4e0bf22cef84b377d879c54c476abeb12db7b7bd8530de579eb5b99","sha512":"c70f54f65cd45bb0933a036b1ebbbb8dbd79e6b4a08e493dc0a6e294f4569c1bc63cff7ed1163c4644abb0cb08bb022e9e379152b701c3fada810f1360f2480c","ssdeep":"","tlshash":"25d0a7fba245960155444950b26c75154c57b0fd5eca02dcdc046845b2d45b77c265a8","first_seen":"2026-05-16T18:28:14.738557Z","last_seen":"2026-09-07T19:14:28.132043Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.839Z","timestamp":1788808434839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:04 GMT","end":"Mon, 02 Nov 2026 08:39:03 GMT"},"fingerprint":{"sha1":"2F:3E:B0:A8:44:32:59:B0:15:E4:8E:5A:B5:0C:9C:5C:04:8F:36:E4","sha256":"C2:29:73:A9:74:8A:FE:F9:5C:F6:79:B3:25:35:02:3F:A2:95:BC:3D:25:96:56:65:A0:CE:CF:89:C9:8F:64:FA"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://donaldtrump2026.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 01:21:51 GMT\r\nexpires: Sun, 05 Sep 2027 01:21:51 GMT\r\ncache-control: public, max-age=31536000\r\nage: 237123\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":73777,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-09-09T01:40:24.579794Z","times_seen":33847,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":14,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/favicons/favicon.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.989Z","timestamp":1788808434989,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/favicons/favicon.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:55 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=6,i=?0\r\nage: 3213\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTM%2F3n%2FL9d1jZWcj4xEzsI6ZDxBTK91wn5IuPInesX6dJ77T16XlG1jBEW10vP%2FSO67m6z%2F9p1PULnatdAJ382o5N743y8THY3iIk7W9bJj8nckY%2FigzrU8jk0dmEjPlv%2FQ7f8uk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-6d9\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088ebafa5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1753,"size_decoded":1575,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fec68b82513248c21cb9b3e0076c2b6f","sha1":"b143ad352b1f15eed01c1f997b0985283d4080ff","sha256":"d15415824120f5f463c72ca6786c9e1ccbba5855c715e0cf6f3c891138cdb6d5","sha512":"d646b7f16905bcdbc73b4e03bd671a7694f7edd12acea30291d1115e8871d97f171f1537018df5e106abb8e41bc03f6731c9a21b3bef931cb71c447453606f03","ssdeep":"","tlshash":"0c3101f5519ca08ca15b4720e6798961472db4f2f160404cbe0e22b3a2729dbf46b74c","first_seen":"2026-01-24T20:08:02.378384Z","last_seen":"2026-09-07T19:14:28.133637Z","times_seen":29,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-07T19:13:53.998Z","timestamp":1788808433998,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=0,i\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zgt5GXjxGZD%2B32FrMW5fq9uOZ6bVarXCxF8j5XHZYhuQzAuQdjDvzrqn9tcqE22IFLxzSilFKe7HbTmjb3JVpvmWjY2sSo0L8%2FdyrABt6dxH23oAjyVvdshkhT8l4yCdWnPu9MVn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a3780888eaca5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47540,"size_decoded":12880,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (320)","md5":"8847be1a6761c93b8de49a238d8b9b07","sha1":"a83127f446e9446e20e2be24719e473146a0186d","sha256":"40b18287f67a4400216e383b5898247c678b4c22d45f9b8e8e1d023bbbcf0f11","sha512":"4502270aea677a722c91011a62448f2b853335657d92781684a146a48704e9a66cf48ed29d8760cd318592a4cfe04f67e1479f8b963921676e8558bd58206bc2","ssdeep":"384:2I7p6IOeyNV4EoWOK3ID7MHdS9iki5vXitE2EIipibSrieii5ktSaFqkGAvmys5j:2U6IOeyNV4EoW7pZ5q2VlwNvvuY42M","tlshash":"1b23c755b0f55432426390aa2bbb770a3eb4b007d849a5527f9cc7d80feac99cdb324d","first_seen":"2026-09-07T19:09:03.364712Z","last_seen":"2026-09-07T19:14:28.134147Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":31,"connect":26,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/cloud4.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.607Z","timestamp":1788808434607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/cloud4.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 42368\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-a580\"\r\naccept-ranges: bytes\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JmdwW9t4m79wTAzvVHbV%2FjEqQru6yr75Yoc0%2BRzE57kZI%2F%2Fdy9f808NleISfzSxlQxSL2nIGF6S%2B8QpI26orPFjkgVeINHKCpdA3bNfVROgvt2VPns3BY4qNbfWK%2FvpEDp9Dfgk1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a378088c5c685b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42368,"size_decoded":43074,"mime_type":"image/png","magic":"PNG image data, 439 x 439, 8-bit colormap, non-interlaced","md5":"402d8318804686e623788a82c88fbd8c","sha1":"0a3abd9eec462ffcd38ad70a3d2c706dacb4bcd8","sha256":"2531261568b14eceb23e08bde7c2b3391e2739b9ce08b2f3c840359af7713429","sha512":"9dd9a1969f2ecec0c341e404f716def4dddba89311a1339976aaee099520fbb25cab7c524d2c3cde57b2f6492135231659d2624e79947b3809098f81df486a68","ssdeep":"768:bBt0cmAWudBsavHkIqDuWbN7zfdonKcoxpSkvQXUpR/ynMzJpBUVOFblvTd37qe2:bXdWeqaqJNXdonKcibhRq+8Ovd3p6XtB","tlshash":"f913f2dc5cc1b2cb283974803a6a13ff5622ced8de16e095b5a41c6eb1f59441c4bcde","first_seen":"2026-01-24T20:08:02.318541Z","last_seen":"2026-09-07T19:14:28.134742Z","times_seen":17,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/bitcoin.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.608Z","timestamp":1788808434608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/bitcoin.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JK2CcaHQLjG44t7GOfKetWwtu8%2F2H7uUqJVjcQhTr3B4UloVm0MRK5bwQcHCZs1a%2Bv7Hg%2FLYDQMLkn2ogZgfaeSfMMo4iamemjrlLqFQwAbFciKNkykIepfVAac5sblRthtt%2BcG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-7e0\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c5c6a5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2016,"size_decoded":1702,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8ceda91c1b286ff505c6bbda46be8c59","sha1":"662a3804944db88ccfc2117dcd5dd9a5fb4a5c42","sha256":"a0a82debe3d6825155019261165f98b133b8e5253ed49b16d35f60d90b0d6f07","sha512":"6de911f0d4f4c9ca7b4ab92a9bfba7bbbe6f0fcad528564e8bffe96c01377d99ae090aed42ce2c8adf356839ddc933c510a09c5d4d6b19ede2c271cf5fc4c16f","ssdeep":"","tlshash":"9f4131fbe2d4b1e07543d764581585b179ef28fba7adc70882911de4f42a28a8acccd4","first_seen":"2026-05-16T18:28:14.720979Z","last_seen":"2026-09-07T19:14:28.135317Z","times_seen":7,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/sui.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.622Z","timestamp":1788808434622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/sui.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pJwaXCRmsJFqgJCNllwRpfiTG%2BxQXr3jxI%2FpkDywwlFMR3nsm%2BhpxTjvYI2Rb9EBn8KA%2BwYIRu0tGQVTRpuMawaBpeSJz29lu%2F8%2FqhVK89cqqgTuG%2FReJ9qKvyiIPsgpmA1TA5Oo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-645\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c7cb55b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1605,"size_decoded":1552,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4581afaa2bb1b06c9742527879bb7989","sha1":"ef2ee1d55d1a7fe3acbf2ee850cc7806a1884373","sha256":"ebb3f087800e8232fe88ba1904ed1d49c03a0a116e352c024ff1fedd9053a672","sha512":"9ddfe39e91c23e62171390d342a4840c5eefd5827cc2ca1f70a8e16480fab0ab9faf8f0caab123347dc1fcca4423d88163112576a628f957e7c726ae7efb5933","ssdeep":"","tlshash":"8f3175fa37ecb1d09b06c378961b6171337f30fb7b25cf0853406895ba15299298dd80","first_seen":"2026-05-16T18:28:14.68783Z","last_seen":"2026-09-07T19:14:28.135962Z","times_seen":7,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/js/aos.js","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.590Z","timestamp":1788808434590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /js/aos.js HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=3,i=?0\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2xf2TX9Q7ZfeobwpQE%2BSvqpQLoTw5hKGKnsMOH99NiXnoexBmfEomRP3zsNKPTV52yls7GJI1fQrw7ysjGwBCd1sTpFgNHHffqhDkXyjwImmjibcZ9wIwbXLHop%2F41nKiR6IBSjl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-37a3\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c4c265b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14243,"size_decoded":5257,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-09-08T23:39:26.059677Z","times_seen":12159,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/trump.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.617Z","timestamp":1788808434617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/trump.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 327\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jHWn4Ib0h2mR0AxgFWxne%2F43OE9AduMDPXkud9ifAt32mf3wcuLEE3Ipzkp7IGzLGgNV0gPfpX3edjPrjR70wvKDW54muBQOpL2Cmd7uC4EIZAcKSD2krcNdwraoBC3fOHv1vpge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-a84d7\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c7cad5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":689367,"size_decoded":517932,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bab7adf9155f93fde66df110e5e78320","sha1":"ee16ac62c0f4f2d132d8d04c5415f068d32c620c","sha256":"0be6e8458a73f7fee4d72eba15719f7c1d4aed9e5ef6db9496e529ed3511a9b2","sha512":"a0134702b7e93519988c3b96584ec8907ce835b5007aaee24b2b6b551c08546bdc116b6f4d6291949ecb67e814af91f6d26e509950845bda31dc25d6b3b2f365","ssdeep":"12288:qUi1/E45HYihPXXj29pCb3e9kXnJSqCRADi2VNogM6QsBK4A6W:qjSM4ihPT29YRn9CR8iD6TBK4A/","tlshash":"65e423317edf78382bbc01b9707a541b3aaa481020df8bd64d6076e9d74a727160f66f","first_seen":"2026-05-16T18:28:14.68211Z","last_seen":"2026-09-07T19:14:28.137125Z","times_seen":7,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/TrumpHappy.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.624Z","timestamp":1788808434624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/TrumpHappy.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 1044881\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-ff191\"\r\naccept-ranges: bytes\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rze1eNvBAMul9jXeTH36uYAY7eNQJDsIq77CDGYvhZjfla0gajtt2FsK4Jn3nXr%2BSKp56%2FFnWtFkJ9o3rprc0f4yBgP2M23BHiR%2BBWpIerG0BRJ3lk6cYzPOKZyfU1R%2FwXm%2BuCet\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a378088c7cc65b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044881,"size_decoded":1045588,"mime_type":"image/png","magic":"PNG image data, 2700 x 1800, 8-bit colormap, non-interlaced","md5":"0cdab2b8417a0254bfec5f82bdb02406","sha1":"9ffe1ae1798cc0ff240b97d4a81b6b28de1bf708","sha256":"8b00758b7265c81fafc524dd7a1cb7871a47bb5ca49821814cd545b9bce2cc54","sha512":"d3c488a7add112e1dc706f62ecb10026775695867f5b04fcb5ab07fc174885a26ac2b95ece5353d9ceeddd652280f895a81ceb0871ccacd97dfd0dd5fe516050","ssdeep":"24576:7EFNMD3oeArLJXD0M58rMkoIZAjhBVyxzzXA:7RrvAr1NMoIs7UQ","tlshash":"17253320d1ecd19cfd0a4e7e387dd7bcd41eb4baab724448ef5969160b4aa1e64303c9","first_seen":"2026-01-24T20:08:02.362023Z","last_seen":"2026-09-07T19:14:28.137707Z","times_seen":10,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@3.0.0-beta.6/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.765Z","timestamp":1788808434765,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@3.0.0-beta.6/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a378088d490f56c0-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 831059\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 07 Sep 2027 19:13:54 GMT\r\nlast-modified: Thu, 13 Aug 2026 15:52:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:hpX1/GTWVZP5djpbKNFLw048+AIxfh/60hJafI/t+v4=:\r\nfly-request-id: 01KYJ1R87SBR63XX4MC8WASXGK-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":28765,"size_decoded":3288,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28765), with no line terminators","md5":"6bb5545318038a2cfb38a19581c581f9","sha1":"9a26a349d21a4b871f45dfd124a43fada4f94b98","sha256":"8695f5fc64d65593f9763a5b28d14bc34e3cf802317e1ffad2125a7c8fedfafe","sha512":"8681a53beef57d21ba9604bad08e1b2afb05541f9b027ad5143625c125e8c8d2e9a43728ba9c0907b29b5aaffade20022a7de07202bd8cc5ddf93f980de56b19","ssdeep":"768:CdJLh9C9ZnOrdFGJtrSb59qVZx1GrdF2JlbiLRdtlVt4lxhKdvJg11NeNP9QNB5h:CdJLh9C9ZnOrdFGJtrSb59qVZvGrdF2H","tlshash":"a4d2c29a794cd100bf431b4762df2a1859347588e530098abe3f35ca1cd2de6b973fa9","first_seen":"2023-04-05T22:57:22Z","last_seen":"2026-09-08T23:24:03.205045Z","times_seen":14349,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/bigTrump.png","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.599Z","timestamp":1788808434599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/bigTrump.png HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 938248\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\netag: \"6a901fa3-e5108\"\r\naccept-ranges: bytes\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXzwCqZASLKkMwluIEM7oFfN5mDGtkAdagr%2F%2FH%2Bgy%2BWY%2Fo5Y%2Bsun8zKspmsG31FC%2BZrEZqCEFW7wXv9hd%2BeMpaJqMAjbXpR1rU3sfr0pTshkENL7ElufVzmytGkoUwFdM3DaGsO%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a378088c5c425b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":938248,"size_decoded":938962,"mime_type":"image/png","magic":"PNG image data, 2700 x 1800, 8-bit colormap, non-interlaced","md5":"c235d9164806fcfbf3561330690401be","sha1":"d1d28b8944e57d6005e19ad33d5faed82fcd77d9","sha256":"6947f5750ec5106e6972fac7148335ee02c5c8ab85e6c2afaa58f0734d679b85","sha512":"cb456d68afeee427aa26a03e38cb9cf328b92ae93e41d661e4b6a1fbbe0bf2e28cc531907da72dae765ce517a45b125a4a92b4305444746af725af2a498fae58","ssdeep":"24576:MGczQU4NcKSjrU5OVbX4igbAU2c/RtwYjft63XvLqhSbAj:gzQU4N+MXOc/RtwJXv/bAj","tlshash":"f115330c8ba0df39d203577690807429d7ce75ba6d07cfa681a0c8ca9ad5d7b6b4772c","first_seen":"2026-01-24T20:08:02.365683Z","last_seen":"2026-09-07T19:14:28.13955Z","times_seen":10,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/images/coins/usd.svg","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.613Z","timestamp":1788808434613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /images/coins/usd.svg HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://donaldtrump2026.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\nlast-modified: Thu, 27 Aug 2026 11:29:39 GMT\r\npriority: u=5,i\r\nage: 326\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpGugW0TxsE6JClUlZ6vNfd5rHbcjqpoCLV23ts9MHt%2BZ4GT6vOUAYCL7eC3cW6Vf2TcO6tfbZtxy31s8rTHexH5IC2vrA9qbRdfbjKH%2FVDHnda3UEqxeNGJ6357PV7AnFSQlqB7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6a901fa3-8c0\"\r\ncontent-encoding: zstd\r\ncf-ray: a378088c6c7d5b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2240,"size_decoded":1647,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fdf7da0233269b2e8c99af5f68874785","sha1":"9f9b026af1d9541388e9edb59b09da735889e8b3","sha256":"ec9d0f2218e3a6e5360a0d8fc88c47b9a2242162ebad6576fda134cbb6976b45","sha512":"ded82e1208442d055172ef8bcff402e3006ae0783051daf91ae6a5ef38a8028e9fa8ef4ac34a5e24932fd9e2838144a3e4908df5c99cdb84f430f1bd99a7cce4","ssdeep":"","tlshash":"004167e947cfd2d065828fd0ea76e0e56657207b6f68ec5042e5abd0fe543ec094c8a1","first_seen":"2026-05-16T18:28:14.731579Z","last_seen":"2026-09-07T19:14:28.140022Z","times_seen":7,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"donaldtrump2026.com/api/config","fqdn":"donaldtrump2026.com","domain":"donaldtrump2026.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://donaldtrump2026.com/","date":"2026-09-07T19:13:54.874Z","timestamp":1788808434874,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"donaldtrump2026.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 26 Aug 2026 10:39:37 GMT","end":"Tue, 24 Nov 2026 11:37:18 GMT"},"fingerprint":{"sha1":"9D:09:2C:9F:8F:25:AF:F4:7B:3F:6C:00:C7:FC:38:D7:CA:19:F1:60","sha256":"38:B5:49:35:FB:2B:7E:BF:DF:81:29:80:01:E2:F6:5F:61:0B:ED:45:70:BF:99:3D:E6:12:5D:EC:0E:27:BE:0C"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: donaldtrump2026.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://donaldtrump2026.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 07 Sep 2026 19:13:54 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2BWnDY91TkCoXRBMqs0GDfZ6YTmEMYKDY6EDrazf8T9jAqwAJd8h4Rms4YkaT00CBqTbEadeePt%2Fe83ValvrRtKHqYAHOnoMP0P8G66ay%2F66NntTtV2P4d27ezQz2M9M2oDbzEYX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-encoding: zstd\r\ncf-ray: a378088e09005b0b-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2187,"size_decoded":1557,"mime_type":"application/json","magic":"JSON text data","md5":"bd0a487aa915931320db1e6b47df9892","sha1":"5acb17b15704be0edf660a738b780999b8e28572","sha256":"5cde27ddd3b317fd5ba77638690b189f295147e5c45068cac73cf4deb0c3ee06","sha512":"ae6159a659fc25fb5d349b01402caae00ba42ebf5cfe7fd4da80de5ad42af26f5488aac75da4b2b288b5fe593387bbab7722e9186bb033901c4f0d04a85c26a0","ssdeep":"","tlshash":"09416dec30889efd04b22f817c4216a83eae254f75edc8d99853d9d1ecd6c46053abe0","first_seen":"2026-09-07T19:09:03.338434Z","last_seen":"2026-09-07T19:14:28.14056Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-07","alert":"Sinkholed","trigger":"donaldtrump2026.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}