{"report_id":"47c27bd0-a6c5-40aa-a050-936d110113c4","version":0,"status":"done","tags":[],"date":"2026-08-08T07:07:10Z","url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"title":"Client Login :: ProfitNow.io","dom":{"size":25702,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (695)","md5":"04300b1eacd6615e73189fd54c3fbae7","sha1":"4f6020e77dee60bf4e6719acd4dadbfe9a3d1cbb","sha256":"a69492e078e218e91a99efe085cc9298823acb4ef672d214275b2a4fbe779649","sha512":"c457dcc2e4a615c67720887a303fee514b1e0ecf3f34498d98fff53bb756766df29722c00d76f2bb04742c4c75783dcbbfd42584dd45b69a8446dff713cc9f81","ssdeep":"384:+Lbluo/wV4aTO21xwsx/wiSjPeTBai1cVz29PIfCgep2I3:+LbluoYVvBJx/wiOz29PIf1ep2I3","tlshash":"26b288255cfc053ad1674096be75ba2b2e56e107d60e8918f5fc06a80fc7e8fdd1b228","dom_hash":"domhash39c2b82c0261dab184884045e9d014f5","first_seen":"2026-08-08T07:04:21.335953Z","last_seen":"2026-08-08T07:07:14.9079Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-12T07:07:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.profitnow.io","ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2021-10-28","domain_rank":0,"first_seen":"2026-08-08T07:04:18.243979Z","last_seen":"2026-08-08T07:04:18.243979Z","alert_count":98,"request_count":49,"received_data":2182551,"sent_data":27083,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Flot","description":"Attractive Javascript plotting for jQuery.","website":"https://flotcharts.org/","common_platform_enumeration":"","icon":"Flot.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-02T22:23:34.841384Z","alert_count":0,"request_count":5,"received_data":76174,"sent_data":2624,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-02T23:01:36.865069Z","alert_count":0,"request_count":2,"received_data":91705,"sent_data":1032,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-02T22:20:16.100749Z","alert_count":0,"request_count":4,"received_data":154272,"sent_data":2280,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a0c9cad1a64fb638593813f4637d47b3","sha1":"0330682f2523405f2ebffa8ec189a12942b0b021","sha256":"9f62c55035c76f9a0e8170cad2e01e217a7e2f51ca45dc92badc5d621c1064c7","sha512":"7d680f3225bcb54c2d485c6b3e9d0c8cfdeda05dbddfcf41eccd251a890eaff95761e4403b32e6a281d89085829ff040408bf1599bb49f32fb06875e722a97f2","ssdeep":"","tlshash":"88c02b083080b02b05363b73b5df13d7d0700085ec4d0702d07ab8007a3210206415e1","size":136,"data":"","first_seen":"2023-08-06T01:08:32Z","last_seen":"2026-08-08T07:07:14.94516Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"52d0342dc901b5bce6c1fba32dce6988","sha1":"9027683271b02c545b8c07a5ce66715276afafe1","sha256":"daba4185cf6b3b00ad53e46781ee23b2e9959901e9ae41b6932e6a00959d088d","sha512":"a5449be2c9598f5d4573a538c8bc083d85fc0e0f0eb0adf17f0232b305f214c8e151a0f43f566cc0625c9e716e80a153c218f31baea473ea7cc95223460f805a","ssdeep":"","tlshash":"8ea00238703d9322017f716e2c2ec6195e2d78467501e7a656a8715048a6957865bd09","size":66,"data":"","first_seen":"2026-08-08T07:04:21.456717Z","last_seen":"2026-08-08T07:07:14.945831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b3145245ec42d7c021916035778cd08","sha1":"019fee893d828846fa5b10cea9efaa2b5025b938","sha256":"43a6a9613e077df87cbd007c6fc84224d9286e4a611ce423ed8af23b90987262","sha512":"a20c7958bd6958f373d58f6341f30f3fc3b401209d9ffab1f448d0b3d07d37ccc29e0e6012e912c39e304e0c2bba62b65040cf5f0426ec6249cbe95f6f4dfded","ssdeep":"","tlshash":"65d0c25df1f411281423b43f0e36ea028938b4470205cb043d1c738c0f0a294a91676a","size":271,"data":"","first_seen":"2026-08-08T07:04:21.459291Z","last_seen":"2026-08-08T07:07:14.946423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e2f36376b7ebdf0566c63bc1fc47e40b","sha1":"39d50c91cb6fb2737817b6718edf7a567cdcd70b","sha256":"b9e5a97ba3463f5c1ebd3a796e3e530f385f0517f5b191b57735ad21690ec06c","sha512":"4df6dcd4b2319850b5c20db9ab306f8dd3d27ad3c33975c9fe2b0978f7ce50e65304b0a656f129b3fa529b6fde73045c5cecdc907ffe54638f515280c92bf1a0","ssdeep":"","tlshash":"e6b0122db0ac4070023f301f1df7f000151d7c0a20198780f52c93540f587353347002","size":95,"data":"","first_seen":"2026-08-08T07:04:21.462399Z","last_seen":"2026-08-08T07:07:14.947237Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a18cb65a7e21ff33e0e854d082fb9af","sha1":"1fb261f9a430102439463716343daa7d9bf4731b","sha256":"84a64d91dcc71b40fb35a08524a53ffcd466061dcca2b0b08dd892218e82139f","sha512":"7309fe7121b862ad2d39607bb904c638fca2a70a93ac552393e20661f02129316a3bbb0a4600541d54eff39ebbcffd1d980b7e50c69b0bbbff88e2cbfe7a4fac","ssdeep":"","tlshash":"e5012dee75d0546451f32067095e01006e43bc571215cdc878cf1ad46f9d468a57ef6b","size":708,"data":"","first_seen":"2026-08-08T07:04:21.465227Z","last_seen":"2026-08-08T07:07:14.947889Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"88a51a44cd2cf29f608c4543d9d4b7b9","sha1":"6b135070e5ccbcc30d5bf91a988b014886cb556b","sha256":"0ffcfbcd9e0f4487c700379540fcb0c87fb0f909ccbe6c04f59f6b0f35e1ad51","sha512":"7748648be5a750d8a808072e87aa779c46d125d75dab64e22ce757b54ac8012c84090db675a2b33e9892ec6b805c13f23b5d507cb946a7a12ab9ad4dff7f9913","ssdeep":"","tlshash":"e441a196f9b21220613f262f5e7fe0406d25601f7047dd643c9cdac08f897a9d26abb9","size":2209,"data":"","first_seen":"2026-08-08T07:04:21.468036Z","last_seen":"2026-08-08T07:07:14.948485Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"893b26be216760188f59e5e290022397","sha1":"e1290c6f7d362de41ed082ca016a9d323df06bc5","sha256":"9689c86423f8ecd681b9db541146888f0112cb3a5922a93f0437e1625200fc37","sha512":"3c959d0e4118272eb820c52d7bff608e8f588178431a1d83648466eab889f84b26ff8fc39a57d9ed86b0da8b2d583e5bc209b86d3ac1297b947e2d6112ad2765","ssdeep":"","tlshash":"b8d09e2f642862bcf97a9aca8c80c55532c5312d926449d5a3b5863f080c3c6b32b5a1","size":231,"data":"","first_seen":"2026-08-08T07:04:21.483583Z","last_seen":"2026-08-08T07:07:14.949006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/scripts/selectize.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"537acfe4cded2886d9bee03d792fbceb","sha1":"15ccd4bd87cf4f7ab13cbe15da1800f0e4a2774f","sha256":"4babefecabb43cc69d1f215189a012b23b5c5142155d778f40fc9910b028d094","sha512":"397f692947ee2092d0908047bfe5ac1017e2c02e9f543f904e1fa782b0fbd3852514b6f14cad02c5735a21ea93ed3e17e61051597f7a70afff478b5b01e9437e","ssdeep":"1536:6skyRF/lhCvjGnkSD0GYNHkx2jpWEe3hFLj0LA6beNa/HS8RqJHPn47Uk06iMGP1:6GXlhJnkSAN+QpdeRqeNa0g7ULb","tlshash":"aca362d0f78c315651a73068ac9e71cfa43d907ae41c6cabbc7ce9983b9482d5237c69","size":106441,"data":"","first_seen":"2026-08-08T07:04:21.351465Z","last_seen":"2026-08-08T07:07:14.93348Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/scripts/jquery.custom-file-input.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"542ee72906e26bb561156290053b1a5b","sha1":"9b7ec7d51c74ed494a4850bf3d6ccea6b4baa501","sha256":"840a72284ef1fd851467051cba9e25461a3c3650e0fc6a3a7f3fd3c43e50dd50","sha512":"47c048004ef13d669e09a2d6d877e1a6af07c6a02ab53dfa4384f03d17ec28c7c054f6efae61f703c20c7369a17592b9285c6006b2d29fac7900f0e68c3dfec2","ssdeep":"","tlshash":"21118c8eab0e1a42d0f330f4af9fcd523d2e403026845123dc6e1a95a9a4907b7d9d3c","size":886,"data":"","first_seen":"2025-07-03T17:09:32.443337Z","last_seen":"2026-08-08T07:07:14.925177Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/jquery/dist/jquery.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6fc159d00dc3cea4153c038739683f93","sha1":"5d7e5bbfa540f0e53bd599e4305e1a4e815b5dd1","sha256":"8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce","sha512":"a574742476d89bdf841a26fac51ff0fae62cfeed95f38a1f3eb0699202d8c8abe165826d514bca4b2d69822f2d25901a72c3f081fd646e1238cf082ef0e28ea8","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4msO7R6xfWBP4TCddWHs3ghna98o:P4KZ+sOsOV6x6pwhna98HrU","tlshash":"1683d6d9b2d6705297b734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","size":85589,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-11T15:30:47.417353Z","times_seen":10012,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/jquery-ui/jquery-ui.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"870b75c273a97501e7d1fb27776bafd0","sha1":"a83caf65714ff3a56aded6088acb525e9d305881","sha256":"7ab17d7c830048456601619d3a6422eb5e419b1d0bfef58d8b1c533435d2e054","sha512":"72659ebca85576b99c490ba39d39aeeffbf1f3ebd91d9681ff7d75e7a747d10078e7ac0379d33e79cdad20fdfa92db28d0ba16d0892cbdb2ffe6c78da803ef39","ssdeep":"3072:ymDzXUcSDVqCIhPxKYI7qSDzOyAskRsSSCQv+SuGC:JU5VOeYIB1CQvXuh","tlshash":"5534084db2413a3661ebe265103b2a0fa237555ca605805cb43ccede9e7de0531bbf7a","size":239564,"data":"","first_seen":"2023-03-07T01:31:57Z","last_seen":"2026-08-11T09:29:03.779204Z","times_seen":2604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/niceselect/jquery.nice-select.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54c44095be49a6716fb6b621135b5af6","sha1":"3350c5d43b955e725bcabbb03ac73d3093de85ec","sha256":"0a46cea0a6fac5d7e3dee53b768ae3120743f3ed8de8002ba73dba6ba7200f18","sha512":"6340710c085db30ee232c92e5f30eb8b3cb9132669c993f81ac058f71b2aa1020c608c61ad920a91cc074b8670ece9a5b0694bb92640027ab774fa477b16a9c9","ssdeep":"192:ii7qTYvPy0KPVCKKTpeKwfp1DCpoy8y9waMJ:iPYwf//","tlshash":"7cd1bb09b0f610710cbf34af1f9b5585b67690578108cf60f97d87e96fc4a20daa2b9e","size":6584,"data":"","first_seen":"2026-08-08T07:04:21.360329Z","last_seen":"2026-08-08T07:07:14.921324Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"52d681d4dd2305755508829aaf7bd0d4","sha1":"d927c2ff8ea88f8c5d14a157a84a9a7669f51015","sha256":"d52a99908b8cd44dffa18ce0d8444eb22866c2561b52dca1810851d02f2aa957","sha512":"12856d49e0a7c754021a4f2449d4215982b0c1a30b8fc4b2de8ffc44bf25c3f9a6d4b290a44bde20db142d477853790054f37a82193efa996c56d27680ff24a8","ssdeep":"3072:drLWhQl3DjY+DMywj3OUGRUrQmnzusnTqzA5BguYa1q:tLIQlYEwr5QmzusnIp","tlshash":"e934f84d72413a3691efe265103b2a0ba237555ca605805cb43cceee9e7de0531bbf7a","size":237548,"data":"","first_seen":"2023-03-13T05:25:56Z","last_seen":"2026-08-08T07:07:14.926071Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/toastr/toastr.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d59436971aa13b0e0c24d4332543fbef","sha1":"c73521049fbf59ece5a3583d83f096a1ca20a9ed","sha256":"b2f539c525219f3cb09b400f7c014dadad7adc90e2e83df56b2cd4c879290e0d","sha512":"6654b92768084812ef7ead152687488ce1f4bd50f0c47629a6d5d0c959f58035216ff731dc4b707b1d8d2a0247b967632d9afb751bacbe264f67871207324160","ssdeep":"96:OdPZ3hzJHdT+3jV759Ro8mKOvaKEHSXIFf0aPKVyfS7fr2:OxntM3jVzRUDdEHSY9P9Sr2","tlshash":"eea165847271badb5b731079819f004b933662618dce5440763ae98c7eb082893b7fed","size":4953,"data":"","first_seen":"2023-03-07T12:09:00Z","last_seen":"2026-08-11T10:16:24.666404Z","times_seen":713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/sparkline/index.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7638b825bc7deb1cf58c990825d35b2","sha1":"5bdadbf3f555341c5507059df20f67770df7f15a","sha256":"2f2bcb0b842f3ed514ec601e5e72386ad0ed0c348a3ad505a0846ccacbc34834","sha512":"fc5f06bdc75252262e2fcc0530b46ca71fcf7a620e39904c8aba3b33d5b09fd57fc1fcc81fe47021ab8049341d26a69a65d48704fe259adaba547e5b6d335a27","ssdeep":"1536:3e5LyCWhSavqz7UiUnscQnb7yZE68tNS7ra2nOd5q6q:OYCWhozX8ra2nOLq","tlshash":"3fc38219abf7115ac023306e0f4f82499332995b5a06eda97d6c53c04f54d3da2fafb8","size":123446,"data":"","first_seen":"2023-03-10T20:00:33Z","last_seen":"2026-08-08T07:07:14.936879Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/bootstrap/js/bootstrap.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","size":36868,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-08-11T14:55:20.358889Z","times_seen":21875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/bootstrap-multiselect/dist/js/bootstrap-multiselect.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b077bed3c0004613ae18c002ac12a2db","sha1":"eab8f757c3126244853e7c13ed3d4fc9d9084c8a","sha256":"ddc989c689f97da8d764110dadac324c568b8603ae8f0a971d99f69cfd8858bf","sha512":"6306ca09c7cc76a07a3587ddce9d4db4d728a6c1bce12c4ff16c64d05814c93be0b507b4b504519e714ec0adf17e76765d896cfab09f06b0f42f612a9920f6b0","ssdeep":"1536:EtfzXxrm20oTiGBnWhDFn2a7pWMu6wloqWIcVcd:EtrXxrm20oxyjID6wrWE","tlshash":"2f8333096af6223155bb30fb0faf0088a535822f5506dd6978ad83d49fc4534d2e7fba","size":83782,"data":"","first_seen":"2024-01-17T18:39:54Z","last_seen":"2026-08-08T07:07:14.942593Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/default/dragula.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3b3311bd3576d5bbd122fe5a99a0850","sha1":"ccbd0623b7f33039d4e0093e2c47fc92c276b2ba","sha256":"ad57f71fde036e584fe19eb02d26b69a9330452e6a78f056ca413a4163ce68ed","sha512":"7bb5543e2835ef748072df680a040efe4a1ccc2e93267b0d095b9df55da7747128f3330a0beda1cb59e88b04163180e2a23429f516a4a1ea27e81feb0d9bf1e9","ssdeep":"1536:toGhZk+ExOTzbFpXP8vq8gV8mXuxsuIUyflGYhbmhM:y+EUpXP8vq8w8m+xXyftT","tlshash":"cb53d8defd5930a5b5123a9e82cf856920a927434685cf08b80cb2d03ff562d53f9dda","size":65499,"data":"","first_seen":"2023-05-17T00:57:04Z","last_seen":"2026-08-08T07:07:14.929068Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/player/demo.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ee7b84dfc9dbfc414e2e2cbd2e641a6","sha1":"cd2398d44b818639a08aa5a850dd125ca133a2e5","sha256":"46577a7d145135a8cc75dc7630cdbd234724b69b47394d3e4d34b94e051520b3","sha512":"e08ae62db995af681596b1128d907bfbb3bb5a8395595603fd9547c02ee9db617e071a605e6bf8e493705389d6af9742da6aa8415c1e86312bc107dcaf629270","ssdeep":"","tlshash":"cf117626c17c61798922107593efb19275331103ee08babab84e93082f0c22ed4bf7d6","size":929,"data":"","first_seen":"2026-08-08T07:04:21.367019Z","last_seen":"2026-08-08T07:07:14.912288Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/default/manageaccount.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b64266202649f327385d8a242e8c93fe","sha1":"e2df219e0a50e3daa04148530ee8619d8cff7e7f","sha256":"c451f9671c2841c183df8cada2b440a3b8bdfdf3b6a1e14f8e45dc96a78a0bf2","sha512":"e35f6fcb972ab5fdc7d0f33691acbcd430b3d63724b0fe04dd841d971907991037010729f12edb8201582e681ab72d0b1759f472a92b62b8c96f6c218ad67847","ssdeep":"192:2Na55d5Z7QE5HoA5Egx7Ld53+Yk52fwQ1UWQjwUbgDAt:Ca5/5Z95Hz5EIZ5U5qb+","tlshash":"3fe1100421fb012284b35cfe3a57a72c396691276209de1cf6fe46902fdad5c43f2b59","size":7003,"data":"","first_seen":"2026-08-08T07:04:21.449149Z","last_seen":"2026-08-08T07:07:14.931374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/flot/jquery.flot.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9927ea93540a2a08b3c5125ff2126102","sha1":"935a7104dda9dcfce22258659ab6f6732059bc22","sha256":"ba4498a5218c71658ae6433b625664cd0fcc9980d06549983ea079828159c169","sha512":"5fcfc0ead65c8258213ba3e8dfb5fac2ab69e8cfc20d859d61aa9d4f3756adc9a8bca8bc5d2b597cea73e383b2685928d069d96c68ef45f2bac2c9b490dbc852","ssdeep":"768:HGKwOx6qLsBQLd4OEe5+luXCOZhpS6+FYFsWMFlg7:m+6qLQQV5DpS63p","tlshash":"4e333d8f93212217c2d312f7bc9b1dcf5136aa1349409665bce9d6a13974a8a33f7f24","size":52966,"data":"","first_seen":"2023-03-07T01:39:58Z","last_seen":"2026-08-08T16:24:09.068046Z","times_seen":509,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/flot/jquery.flot.resize.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e21fd1856200b80b1ed9f64f78dee0","sha1":"ca15494c798ac1393d1ce2733845f04e378b086f","sha256":"082e4e0fea3505e50b3534a6e801b3b55a00857aaa9b8a242ae669edf1affc99","sha512":"607fc561a80ba653de85ee23cc8df2b004b79fc1a2b9c8eb4e0799e0e5ae834d8981b803c8da59e8caa92c08cb6774098c45e076f6284bfdb11a25f3e5a5e843","ssdeep":"","tlshash":"df413fce32712277bb8b4272527f560a71757221610a50b1b334bce92f3058ca773bb8","size":2344,"data":"","first_seen":"2023-03-07T01:39:59Z","last_seen":"2026-08-08T16:24:09.098005Z","times_seen":385,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/flot/jquery.flot.spline.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"204161f30a99defbf20fa10721ea45ea","sha1":"37cd28d8a5167e96f1310c02576ca7d2562b5648","sha256":"c7617954eae9f3278ffea896031e235ed503cbe9d8cfdb5588c70a3af516eed8","sha512":"f6e031fbd93ca2e142907bafe77113d176d7fc53acbcbd843cc07eaa2f2a99890c29dc0aae66990c7ad0f6f11ce9dabae6936aa8e58998abdbfce1795bda4caa","ssdeep":"96:5c6IiTAdvZviHlnmZK3NjcAQRiBStdKLdqv7BK1Xa0B+syxYLLBnTWCCm:XtHtVcKEcLdWIHyxYLFnqCN","tlshash":"c7d182ce45f656624016603d6baf2401a123a41b29e1be60fccdb6708fc856c5fb6ff8","size":6252,"data":"","first_seen":"2023-07-05T17:17:39Z","last_seen":"2026-08-08T07:07:14.919105Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/script.js?v=1.1","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"862ef2a1354eb7cacb38f0876a1dd10c","sha1":"11ca0fde70fda5ccd9cb346bcf6a58cbd487742c","sha256":"84a5dc7d0b0eceda770791aeb9071eeba9b82e267a86dfe2d20896b59ce14be4","sha512":"3ea79ec01107a8208dd678a1a5dd7a4e62d0fdddff3b734bc45fcb84c4245d97f5784c64d4a2e39b32b37fe77e85faa613a36f0d7dd0fcaf64c4e3b53d9c7d8f","ssdeep":"","tlshash":"9631a91932735a74c5e7613323afa28830a6125bae48c60930dd1bc80fb5d51a3b6aed","size":1630,"data":"","first_seen":"2026-08-08T07:04:21.345479Z","last_seen":"2026-08-08T07:07:14.940554Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/moment/moment.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"15bc84f89593b12b043a282b88bb32db","sha1":"a699249676eb4903f241fac9b029dcc0a72834f4","sha256":"76ed5f26170ae03324e5b7c44266e3ee36e754e77d581a2314ceceb9768c7ddf","sha512":"066f0505f38520b5bbab37f9d7897f289696f95298c84ad13e3051729089d487e604970bf4f452068e9fca11348bc0419816e233242b342f7b9b56f574358cd2","ssdeep":"1536:FybK6L0ensA/O+nbD3qukGrhGVLXaDlV+Z:FgsA/O0bD4mlsZ","tlshash":"cfa31c4a29e72c12466771384bcf61c57a249827090dae097d8db3d4af5dc3847bafec","size":99201,"data":"","first_seen":"2023-03-08T21:46:04Z","last_seen":"2026-08-08T07:07:14.928516Z","times_seen":111,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/datetimepicker/bootstrap-datetimepicker.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a36160a466cad1a9e414321f4784baf","sha1":"4ed91e4ed7e1a2a7e5f05654e2f62695c9e6ce40","sha256":"e5899ac40c0c8c8a4cad594af3863ff8d8c2a4a9c561af1b59605b50748119f5","sha512":"1837b2dfb459031164a45789a2b114c0da086e44f0b320bbdfa28d498b9cbb55895852bda9377362e6fc013c64b6be83c247bb9db15a8a8ca9cdb0ce43292846","ssdeep":"768:+85tRKDmhd/onYDM38NvdyMmpu3II1R+qlyTo/KR6MJodCBSEpfh6Aq8Sd4KI+po:z5UrsNvdyoII1llyTjpWnvAMLI+p+7","tlshash":"eb03b604b1b1729795bf7495102e6507e266cc3efc59487168ce10b83dbec89a1bef2b","size":38510,"data":"","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-08-10T17:41:49.003817Z","times_seen":1720,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/scripts/luna.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0aad69daa68b50f2bd55468a4cd9be61","sha1":"7eef2168da8cce972f725256b1d6500e4e38eabd","sha256":"4e267e4baf19b7f9c42b8d7c6e50cf6dc19ac9fbec1da0078986451f116d8ba9","sha512":"af4ebb4008ed637704b80e668d336d742811e989d907841fe9f29443995cbbd400a9dd07c53d44eea8c447cdd1fd43512be8bd7f98eebbcb3f7e4d1cad8687c2","ssdeep":"","tlshash":"7421250bf4aba1d2287fb12e177ba8483639488ba107c534746e9f900f1024f72a16fd","size":1313,"data":"","first_seen":"2026-08-08T07:04:21.398819Z","last_seen":"2026-08-08T07:07:14.93726Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c98b05dd4f3d7c693eb34690737f0d8","sha1":"6de10e74a992fca15e803d910d130f826631cb86","sha256":"f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0","sha512":"e0cbdc1f071ba972941c1e8bc7765be4210056813dbbce2a37e65230ceacef3f08789ae2131ad5dcd0f9cd1cdef66c4d940049ea4f3ae0ffd597c9b449ddc3b5","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGookOlxN3/fq0ZtjTTYovuYE4kpxcWQiIsoT:eQg2BneK38kOvBpXc9ST7","tlshash":"5c63b75c7a537231026f20e635ab140d22376b3e600a5668b068cded6dbec15736bf7e","size":73163,"data":"","first_seen":"2023-03-07T01:23:49Z","last_seen":"2026-08-11T14:39:52.022505Z","times_seen":8721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/player/plyr.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d0249bd3f9f79b8215f20d6c1abe7d","sha1":"3d019b53db77487e54083573a9f2313a6d334949","sha256":"4b5b56f7067112aa1fec4f6506f5474165ad002bf76c129cb4e82a5c4aa3f1f8","sha512":"a06ecd948920a76a01fa74bdb5172557f78a954448492b6d225971cbad5f0953f830611ff8576431b57b8550c444d715143d28ec72de88b56c11eea5f109dbe5","ssdeep":"1536:Vp0TnRRTokg4In5o8nMKS9FkIjkJ1XclMNfkm0weM3iTJBkVqk1ssN1ow2u8QMkn:Vp0TUXR0rObjSBxUNytm3","tlshash":"12b3f8ca7246b171c6977469503f220a72379b8a1405c65cf83afdd86d38e8a7277f38","size":115182,"data":"","first_seen":"2025-11-05T16:40:30.442078Z","last_seen":"2026-08-08T07:07:14.939328Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.structure.min.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.635Z","timestamp":1786172794635,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.structure.min.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:34 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"30a6-6135cb7ddc76e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 2910\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12454,"size_decoded":3279,"mime_type":"text/css","magic":"ASCII text, with very long lines (12319)","md5":"61d2aa89c3c86f030710b57a4fd76ef7","sha1":"bdb8098ab958c6f14a56c0240a3b6cc6ab0ea58b","sha256":"87dda9c237552e03a873d92d206da24229e1d5253272c2927d40e33400d26ceb","sha512":"378ede6c1cdda59c16755b9fb04909733dc6472808848416ff47f873fe753df5137a2e05b3decdb7328e51fb6251975c600f3917e5f343a16e74bba23df377f0","ssdeep":"192:yW4WuxrjH7PrJLzB3NCNPHvfeRk2MZuQEjQDMsrsUR9P:yxJvLzBERiI","tlshash":"66424371a6432a3e7d33d26194525ffeb32dc197faf6e46ff00581438bad4a1029e468","first_seen":"2023-07-06T12:21:29Z","last_seen":"2026-08-08T07:07:14.908998Z","times_seen":32,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":161,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/images/auth-v1-tree-2.png","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.690Z","timestamp":1786172794690,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/images/auth-v1-tree-2.png HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:41 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"e53-6135cb7ddd70e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 3667\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3667,"size_decoded":3984,"mime_type":"image/png","magic":"PNG image data, 377 x 289, 8-bit colormap, non-interlaced","md5":"3a4977b8b50e579d01db97cfaaf4a1b1","sha1":"1a546f1615d09d854613b45450469769e6ea6204","sha256":"b2a502683112fef0b644b57c8cbbad594e0c44f7401d88e70c02255ff9013495","sha512":"0d8ed25c5bb241075b90be524332811fdaa3342f6ef13d9f064b2ba282c5165616dc06fa95d2635b3101409c7f8012f47edca013b79796a599e170dbfec5405b","ssdeep":"","tlshash":"f6716dbcf7dd44d2cf821b4c27283a260f6a6a72e41f1029798240a31f5553f245ac5c","first_seen":"2025-05-06T11:45:49.658166Z","last_seen":"2026-08-08T07:07:14.909571Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6536,"timings":{"blocked":6375,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/favicon.ico","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:41.626Z","timestamp":1786172801626,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:41 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"13e-6135cb7dccd6e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 318\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=90\r\nConnection: Keep-Alive\r\nContent-Type: image/vnd.microsoft.icon\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":318,"size_decoded":649,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 16 colors","md5":"11fb4799192313dd5474a343d9cc0a17","sha1":"85f4d0e62f74e23ef6d4682073ec75e194dc3a54","sha256":"467f3d85cdf7bf5b57cb7eb270fd99c628bdc8d688b2132cc203229e311eb609","sha512":"62f412a33484dc33b8acc2423d7a36a2ce69490b792f10a754c48ff2e7b9a52be289295cb2e8b726e45741c79cd14f5ee0fbc0363501340a13b73c94bdc7f666","ssdeep":"","tlshash":"7ae092223105e421c0480330c0c7d6f231848d0240ea760b00023c8b38125c8dc37aa2","first_seen":"2023-04-26T12:55:01Z","last_seen":"2026-08-11T12:50:48.439845Z","times_seen":2758,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/styles/stroke-icons/style.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.644Z","timestamp":1786172794644,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/styles/stroke-icons/style.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"10c6-6135cb7ddf64e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 931\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4294,"size_decoded":1299,"mime_type":"text/css","magic":"ASCII text","md5":"0479f0e2d7918e106bdc8923c15d11be","sha1":"f90619f080f5c3cc8e20901338a0cc96a6d3c9c8","sha256":"6de199344a102e1bdd9c7f75d05383f1d37f0dfe794f092cc07ba20dace52e3b","sha512":"038ae2ea68c45430336af8afdd7df17501a6cffead8a26dbcdf068ae818ea5b8d6ae9e323b25cd6359743dfeddc239b032a5e5528d69f70a39d65a0f68484859","ssdeep":"96:6dXBpduF9ciU9zWC5BSwYUoOjFIfYVWKOLYYpkpd36q+937vlRAyyll6k7GW8+VL:OBTQcXTN5","tlshash":"b59112a5ea0e3cb257d1e4c16b85be041b1df2288f02bd5ad4127d3cabc239591b23d9","first_seen":"2023-09-12T01:01:08Z","last_seen":"2026-08-08T07:07:14.910918Z","times_seen":5,"resource_available":false,"data":null}},"time_used":621,"timings":{"blocked":451,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/bootstrap/js/bootstrap.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.670Z","timestamp":1786172794670,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"9004-6135cb7dea22e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 9765\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":36868,"size_decoded":10148,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32003)","md5":"c5b5b2fa19bd66ff23211d9f844e0131","sha1":"791aa054a026bddc0de92bad6cf7a1c6e73713d5","sha256":"2979f9a6e32fc42c3e7406339ee9fe76b31d1b52059776a02b4a7fa6a4fd280a","sha512":"d9ef2aab411371f5912381c9073422037528c8593ab5b3721bea926880592f25bd5dfdec5991cdfe5c5ef5f4e1d54e390e93dfd3bca3f782ac5071d67b8624d4","ssdeep":"768:4UfYD27UwlNHMl9lqNuCPNjhqg8epm5CCJFXflA8Gf3ZTbQ:z/76whqKGvlm3ZXQ","tlshash":"47f29606b23031a147efb1e1525b020a7239696ee906907c78b9daf53db9c48717bf3d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-08-11T14:55:20.358889Z","times_seen":21875,"resource_available":true,"data":null}},"time_used":1404,"timings":{"blocked":1241,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/player/demo.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.679Z","timestamp":1786172794679,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/player/demo.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"3a1-6135cb7ddd70e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 383\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":929,"size_decoded":764,"mime_type":"application/javascript","magic":"ASCII text","md5":"8ee7b84dfc9dbfc414e2e2cbd2e641a6","sha1":"cd2398d44b818639a08aa5a850dd125ca133a2e5","sha256":"46577a7d145135a8cc75dc7630cdbd234724b69b47394d3e4d34b94e051520b3","sha512":"e08ae62db995af681596b1128d907bfbb3bb5a8395595603fd9547c02ee9db617e071a605e6bf8e493705389d6af9742da6aa8415c1e86312bc107dcaf629270","ssdeep":"","tlshash":"cf117626c17c61798922107593efb19275331103ee08babab84e93082f0c22ed4bf7d6","first_seen":"2026-08-08T07:04:21.367019Z","last_seen":"2026-08-08T07:07:14.912288Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1573,"timings":{"blocked":1412,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:300,400,500,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.622Z","timestamp":1786172794622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css?family=Roboto:300,400,500,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 07:06:34 GMT\r\ndate: Sat, 08 Aug 2026 07:06:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26935,"size_decoded":2501,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4cf6f5866e3994db89cf9d8316e605d0","sha1":"5046740a1d497dd687c1f0d7bda6d6f406a2e303","sha256":"d630214019fa641e6972a1392da1813b2c8de40399a0c9a75e133dcabd0b9c94","sha512":"6f7831a540c571854f30dc582b58c1a969518fc5f015ef74ffce21ff3c521e79910433be5c2970c16415078e7ec0e69d0c5c37c794e124adaadd375723aae626","ssdeep":"768:3FsbbYSRv4wFMl22YfRiJhan6BBYERNeWwhQHHYORjUM+DeNNYARB6C8:LIHTxj","tlshash":"8dc20ca10417440097834ce223cebf35fe1f92507142d0b5abfd9b6baddbca652693ad","first_seen":"2026-02-20T12:17:22.858862Z","last_seen":"2026-08-11T05:40:49.162152Z","times_seen":1227,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/animate.css/animate.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.628Z","timestamp":1786172794628,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/animate.css/animate.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"11a43-6135cb7ddf64e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 4430\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":72259,"size_decoded":4801,"mime_type":"text/css","magic":"ASCII text","md5":"07f146141537e04ee282a965d8053198","sha1":"5bac0162dbfcfd0c701b8d0848411a288c27a2c2","sha256":"d34c3af0d3b74cbb878ca4472668ebae02410ed1bfe8e85b244bb582d1dcb2ea","sha512":"439160867a718c13e064ec3a421d9943c6bd7d774c78023f3e77719cbc7d7826e3f859bdef7a76dceb91bf6b31ec5672543f6665a06ceedcb552e1b146a0f33b","ssdeep":"384:B4HuaurH2fqftulucfwf7l3laGPGF+1fHf7SpS/fjfHqDxbe3NxdV2PVriL:yHuauafqftulucfwfk+1fHf7SpS/fjfB","tlshash":"7e630e6d2991118457238a5d83df9e68273ce573182a9cef73c2488bdf86fac67c5207","first_seen":"2023-04-05T13:39:40Z","last_seen":"2026-08-10T22:46:55.567297Z","times_seen":5171,"resource_available":false,"data":null}},"time_used":490,"timings":{"blocked":-1,"dns":0,"connect":161,"send":0,"wait":164,"receive":0,"ssl":165},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.theme.min.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.636Z","timestamp":1786172794636,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.theme.min.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"35d6-6135cb7ddc76e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 2302\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":13782,"size_decoded":2672,"mime_type":"text/css","magic":"ASCII text, with very long lines (13647)","md5":"92921f064f9428e4c3dc271622518c00","sha1":"1da0e9459772a7820126cb9963acc8c905a84ca7","sha256":"b37bf0783506d69a941088c81a133bb2d75149a2be870597ea5176b5066a95a3","sha512":"3f64a40fc745fc420cb97948cc0b54eb2d7a42518cf0334c35268c72a3c3d981d000bd5daea8d0f9169b3bdbd74755541d89de558dcc0fd52a2df7dcc689f272","ssdeep":"192:NzWvvV6Yf+4pkDbtqdvL5yB8gB6mBpNPzFhCNBjVs5y6sybYw9QoFYx59BbA5GJA:Ni+4uGUL/72fZBhVg","tlshash":"b152e610a4c2202dff13d97172e11ef0503b9241dda61f7c64aafba961e28e9c977d72","first_seen":"2026-08-08T07:04:21.342571Z","last_seen":"2026-08-08T07:07:14.914085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":280,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/styles/selectize.bootstrap3.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.639Z","timestamp":1786172794639,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/styles/selectize.bootstrap3.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"2ac3-6135cb7ddf64e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 2450\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":10947,"size_decoded":2819,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"b1c0a12d5788ebe4debd742cd73414f1","sha1":"091585bd0a7207ffc2723c3253fe1e18197dedc8","sha256":"22ebe0e3eb3186c9c6d61c2303fb7c5025fb602efa5d519da7ff8495982d69b8","sha512":"2f437c9d0d4041f99666eb7afacb4c463c66534a774df1b0f20aefd1248caf605a2fa20031bd11a738b889a97a4f1fab02aa7a228d057737cb00514dfde3bcc6","ssdeep":"96:eX4y/vHnci8yXYvTHC7QW8dm+FXqV23nBWbQUk60LuNpx+PgeaHktI+ITNUA:uhvHmyXYbu8dK2R+BIuNpoY7Hku","tlshash":"da3233b1ed9427303069c56ebec2dec7e369c1258005d8796ab9241c7fcd6e485b3e1b","first_seen":"2025-04-07T17:50:04.549191Z","last_seen":"2026-08-08T07:07:14.915133Z","times_seen":106,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":435,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/datetimepicker/bootstrap-datetimepicker.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.640Z","timestamp":1786172794640,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/datetimepicker/bootstrap-datetimepicker.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"262e-6135cb7dee0ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1405\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9774,"size_decoded":1774,"mime_type":"text/css","magic":"ASCII text","md5":"e2ae8f05abe3502bb30e8c819ad325e5","sha1":"f5f0ae10a971b0543ead4eeb925dd0cc2a810017","sha256":"a5065eb8774426633581282cffe2a325c64526e7e020640228d780c48539fc5e","sha512":"29704d47be883c46cd6ad1dc2dec1cc34b962ec7e6a005cb4f17ec3427d556f9ad6b11a1bdb5b0732237ca8f7587544fefbab3dba05c3141dd8a385bed0d0099","ssdeep":"96:Gah98T5t41f8nzjRvoDu6uDsYgV+FEoid:Gah98lt4x8nzjRvoa6ugYgV+FEoid","tlshash":"8d126a6e76a325c5783aa36d262979811787900fd205cc2e3fc7b3688f1dad938fa550","first_seen":"2026-08-08T07:04:21.357861Z","last_seen":"2026-08-08T07:07:14.915852Z","times_seen":2,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":441,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/niceselect/css/nice-select.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.655Z","timestamp":1786172794655,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/niceselect/css/nice-select.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Fri, 10 Jan 2025 12:39:27 GMT\r\nETag: \"f96-62b5962a972ba-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1109\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3990,"size_decoded":1477,"mime_type":"text/css","magic":"ASCII text","md5":"597c78b4a2ba1432f0a1b349bd2aa642","sha1":"3e38be2453da24a80b6dc87543aa4929b53b937e","sha256":"db9d14accd46186bd478b186a04b8fec430928d8cf42fbf62969850c891ef870","sha512":"6541debf8b28e177e9fed590e0489ed736cc5f9250f0eef60295bd872bbebce7e19410ad8bc24e8c1d05daaa39cf453f04653f823279b66091cf8c54f0442531","ssdeep":"","tlshash":"94811167db630556246e826b7fd66a042339c003b426ce6cbbcc860b8f0d1d8a8e5787","first_seen":"2026-08-08T07:04:21.409607Z","last_seen":"2026-08-08T07:07:14.916492Z","times_seen":2,"resource_available":false,"data":null}},"time_used":961,"timings":{"blocked":791,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/styles/custom/bt.css?v=1.2","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:35.449Z","timestamp":1786172795449,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/styles/custom/bt.css?v=1.2 HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/themes/current/styles/style.css?v=1.3\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Tue, 14 Jan 2025 13:30:08 GMT\r\nETag: \"a3ff-62baa8f425a05-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 5933\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41983,"size_decoded":6302,"mime_type":"text/css","magic":"ASCII text","md5":"2c61ed48a82005e9e288035cc312b185","sha1":"f1fb71837648926a1d3ad0d2e30b110884413f92","sha256":"26d46e3f1b8b0dd58dbbaadf118ed963c2dde8c2f24db9a7bfd59696ff0abb92","sha512":"205611e96ebaefbce02ba233ae575d5e0d57bb10e3c28851e8adf782070ab679e24c9ed42c04904bd3882f93a61baec4da653ed0f9fc7625af1c1e90b73d81d1","ssdeep":"192:L77zuOyo5TdBz2C5Dh2YgwH1Ve5D0FuID3VZ8VQ8y63TM1FwSFPlU49866yFanpK:L77zm8z2C5D7VHJVZDaE","tlshash":"67131acefee318c48a6f408dd197f678bebd04d6570e5c6aa6627620eb143db0871c49","first_seen":"2026-08-08T07:04:21.376406Z","last_seen":"2026-08-08T07:07:14.91711Z","times_seen":2,"resource_available":false,"data":null}},"time_used":819,"timings":{"blocked":655,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/index.php?m=account","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-08T07:06:33.803Z","timestamp":1786172793803,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /index.php?m=account HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:34 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nSet-Cookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t; expires=Sun, 09-Aug-2026 07:06:34 GMT; Max-Age=86400; path=/\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nPragma: no-cache\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 4957\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Select2","description":"Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.","website":"https://select2.org/","common_platform_enumeration":"","icon":"Select2.png","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"RequireJS","description":"RequireJS is a JavaScript library and file loader which manages the dependencies between JavaScript files and in modular programming.","website":"https://requirejs.org","common_platform_enumeration":"","icon":"RequireJS.svg","categories":["JavaScript frameworks"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Flot","description":"Attractive Javascript plotting for jQuery.","website":"https://flotcharts.org/","common_platform_enumeration":"","icon":"Flot.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]}],"data":{"size":25131,"size_decoded":5464,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (546)","md5":"2935a0ddd7f80b1ebc020b8001fd2dd4","sha1":"1402baeea3681df5974909f09b3f588a08c98023","sha256":"d8d20333f6841a72825993a1130af290f5cbf147d7cf73411cca400501f121fb","sha512":"d1225cb5457b1cdf982b5a776465885187f30a5bf5ad398160a4f451754d43230dcfb9dd2d75320004c4643b6c4c22c202dd126e50d448e902c06cf7b0498b94","ssdeep":"384:pLblLx/waTOl3Nwnm/wiSjM6TBav1cVz29PIfCgep2Zy:pLblLxY0Wam/wisz29PIf1ep2Zy","tlshash":"43b278265cfc053a916340a5ba75ba2b6e56e107d70e8518f5fc06e80fc7e8fdc1b268","first_seen":"2026-08-08T07:04:21.391287Z","last_seen":"2026-08-08T07:07:14.91772Z","times_seen":2,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":-1,"dns":82,"connect":170,"send":0,"wait":175,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.660Z","timestamp":1786172794660,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/select2@4.1.0-rc.0/dist/js/select2.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 08 Aug 2026 07:06:34 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 19993\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.1.0-rc.0\r\nx-jsd-version-type: version\r\netag: W/\"11dcb-beEOdKmS/KFegD2RDRMPgmYxy4Y\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230074-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 2602852\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=usHuqTEPHj6NgKm0Okg8qpBbZ0zhPIHpMZkaWYsp%2BtHEXwcJpNc2WUVCXGBJrLknSMlk7W9rfnzTAPDnyJ9bMxVagd3WHWxqlHFMLehy8bLaGJ0TkaEFqO5ONfprYMAg8hY%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a27caddff964120a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73163,"size_decoded":21110,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64127)","md5":"7c98b05dd4f3d7c693eb34690737f0d8","sha1":"6de10e74a992fca15e803d910d130f826631cb86","sha256":"f7244fff610595b944f76bf3080d74e3af42b5dd234f8f079e698cc39ac966b0","sha512":"e0cbdc1f071ba972941c1e8bc7765be4210056813dbbce2a37e65230ceacef3f08789ae2131ad5dcd0f9cd1cdef66c4d940049ea4f3ae0ffd597c9b449ddc3b5","ssdeep":"768:eLrL0yRTkmazJCf2B0eeKuWBcsGookOlxN3/fq0ZtjTTYovuYE4kpxcWQiIsoT:eQg2BneK38kOvBpXc9ST7","tlshash":"5c63b75c7a537231026f20e635ab140d22376b3e600a5668b068cded6dbec15736bf7e","first_seen":"2023-03-07T01:23:49Z","last_seen":"2026-08-11T14:39:52.022505Z","times_seen":8721,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":1,"connect":2,"send":0,"wait":5,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/flot/jquery.flot.spline.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.668Z","timestamp":1786172794668,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/flot/jquery.flot.spline.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"186c-6135cb7dee0ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 2161\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":6252,"size_decoded":2544,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"204161f30a99defbf20fa10721ea45ea","sha1":"37cd28d8a5167e96f1310c02576ca7d2562b5648","sha256":"c7617954eae9f3278ffea896031e235ed503cbe9d8cfdb5588c70a3af516eed8","sha512":"f6e031fbd93ca2e142907bafe77113d176d7fc53acbcbd843cc07eaa2f2a99890c29dc0aae66990c7ad0f6f11ce9dabae6936aa8e58998abdbfce1795bda4caa","ssdeep":"96:5c6IiTAdvZviHlnmZK3NjcAQRiBStdKLdqv7BK1Xa0B+syxYLLBnTWCCm:XtHtVcKEcLdWIHyxYLFnqCN","tlshash":"c7d182ce45f656624016603d6baf2401a123a41b29e1be60fccdb6708fc856c5fb6ff8","first_seen":"2023-07-05T17:17:39Z","last_seen":"2026-08-08T07:07:14.919105Z","times_seen":13,"resource_available":true,"data":null}},"time_used":1257,"timings":{"blocked":1095,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:41.115Z","timestamp":1786172801115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.profitnow.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46772\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T14:59:37.492767Z","times_seen":548456,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":3,"connect":32,"send":0,"wait":18,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/flot/jquery.flot.resize.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.667Z","timestamp":1786172794667,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/flot/jquery.flot.resize.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"928-6135cb7dee0ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1046\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2344,"size_decoded":1428,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2203)","md5":"31e21fd1856200b80b1ed9f64f78dee0","sha1":"ca15494c798ac1393d1ce2733845f04e378b086f","sha256":"082e4e0fea3505e50b3534a6e801b3b55a00857aaa9b8a242ae669edf1affc99","sha512":"607fc561a80ba653de85ee23cc8df2b004b79fc1a2b9c8eb4e0799e0e5ae834d8981b803c8da59e8caa92c08cb6774098c45e076f6284bfdb11a25f3e5a5e843","ssdeep":"","tlshash":"df413fce32712277bb8b4272527f560a71757221610a50b1b334bce92f3058ca773bb8","first_seen":"2023-03-07T01:39:59Z","last_seen":"2026-08-08T16:24:09.098005Z","times_seen":385,"resource_available":true,"data":null}},"time_used":1251,"timings":{"blocked":1088,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:41.121Z","timestamp":1786172801121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.profitnow.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46772\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T14:59:37.492767Z","times_seen":548456,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":22,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/jquery-ui/jquery-ui.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.648Z","timestamp":1786172794648,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/jquery-ui/jquery-ui.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"3a7cc-6135cb7df1f2e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":239564,"size_decoded":64820,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32157)","md5":"870b75c273a97501e7d1fb27776bafd0","sha1":"a83caf65714ff3a56aded6088acb525e9d305881","sha256":"7ab17d7c830048456601619d3a6422eb5e419b1d0bfef58d8b1c533435d2e054","sha512":"72659ebca85576b99c490ba39d39aeeffbf1f3ebd91d9681ff7d75e7a747d10078e7ac0379d33e79cdad20fdfa92db28d0ba16d0892cbdb2ffe6c78da803ef39","ssdeep":"3072:ymDzXUcSDVqCIhPxKYI7qSDzOyAskRsSSCQv+SuGC:JU5VOeYIB1CQvXuh","tlshash":"5534084db2413a3661ebe265103b2a0fa237555ca605805cb43ccede9e7de0531bbf7a","first_seen":"2023-03-07T01:31:57Z","last_seen":"2026-08-11T09:29:03.779204Z","times_seen":2604,"resource_available":true,"data":null}},"time_used":1101,"timings":{"blocked":604,"dns":0,"connect":0,"send":0,"wait":173,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/niceselect/jquery.nice-select.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.662Z","timestamp":1786172794662,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/niceselect/jquery.nice-select.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"19b8-6135cb7e028ce-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1662\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6584,"size_decoded":2045,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"54c44095be49a6716fb6b621135b5af6","sha1":"3350c5d43b955e725bcabbb03ac73d3093de85ec","sha256":"0a46cea0a6fac5d7e3dee53b768ae3120743f3ed8de8002ba73dba6ba7200f18","sha512":"6340710c085db30ee232c92e5f30eb8b3cb9132669c993f81ac058f71b2aa1020c608c61ad920a91cc074b8670ece9a5b0694bb92640027ab774fa477b16a9c9","ssdeep":"192:ii7qTYvPy0KPVCKKTpeKwfp1DCpoy8y9waMJ:iPYwf//","tlshash":"7cd1bb09b0f610710cbf34af1f9b5585b67690578108cf60f97d87e96fc4a20daa2b9e","first_seen":"2026-08-08T07:04:21.360329Z","last_seen":"2026-08-08T07:07:14.921324Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1089,"timings":{"blocked":926,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:35.777Z","timestamp":1786172795777,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css?family=Open+Sans:400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 07:06:35 GMT\r\ndate: Sat, 08 Aug 2026 07:06:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17382,"size_decoded":2401,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"ffd41acdcc232188d2b780ef5a5e7fd4","sha1":"0470fc954b033c9d7e7a45b84bf1a2110aa1324f","sha256":"b9060310a235189e01661bef8198f993bbb8b1d0acc8841bb80d3a194e11f071","sha512":"f5bfad231c50d4072fda6fb55904a5fbc60792662962aba5a9b44d6f3137f0d8e6687d6934c48627ff937555598cf5e0505a30ccfd425f675464f78f7ee51539","ssdeep":"192:wCAAN21/rqbnbqGIwV4RazqbCuuH2PlrqxnbqGIwV478zM4CZZE2s6rqmnbqGIwc:TjXqY4ahhqY4tU8qY4Z","tlshash":"cb722ba00017285067431de623de7e34ee0fa2657044d0766bfd8b9beedad6963b431d","first_seen":"2025-09-17T09:53:39.596121Z","last_seen":"2026-08-11T15:54:36.898911Z","times_seen":4901,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.min.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.633Z","timestamp":1786172794633,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.min.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"6c42-6135cb7ddc76e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 5440\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":27714,"size_decoded":5810,"mime_type":"text/css","magic":"ASCII text, with very long lines (25966)","md5":"5a54a7c692c39157630bdfe2a1d4304e","sha1":"9aa3bd23f4a71a4650cc7d23a265fcca0eb3ff5e","sha256":"871965fadc130988b40f0d3b41b3a5ea97c0ed95e184fa6fdbb79f1edba51cc6","sha512":"fb225a89335116aa1c2ce6e4e3f39e39cd7b00e59621d827d9977acc9df97531a02ca16ddfc2f80c98368df5f7c557b0896a889c2a7792c0fde30a6be3a84710","ssdeep":"192:esOxJcuNW4WuxrjH7PrJLzB3NCNPHvfeRk2MZuQEjQDMsrsUR9YWvvV6Yf+4pkDx:RuNxJvLzBERiY+4uGUL/72fZBhVg","tlshash":"b8c24030a5c2202efe23d231a1e11ff4523bc141eda65e7db09ae75993e98e4847f971","first_seen":"2026-08-08T07:04:21.339333Z","last_seen":"2026-08-08T07:07:14.922476Z","times_seen":2,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":161,"send":0,"wait":162,"receive":0,"ssl":168},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/styles/pe-icons/helper.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.643Z","timestamp":1786172794643,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/styles/pe-icons/helper.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"e9c-6135cb7ddf64e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1013\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3740,"size_decoded":1381,"mime_type":"text/css","magic":"ASCII text","md5":"b041b560d4bd6a2b307610fc17db2047","sha1":"96811bbdc35ce67af9d3b5dad262d5f7bfcb742c","sha256":"2b80e4c11c367db768ff06716ce027e87db54cd4132fd75891646a9407a453ea","sha512":"30356ed5a265c6d82feca15d42f139d3029d3b563638db22fc82ad75d4c573ce4ff24f0423f7b3ece2b50cf196473c9f4d475726c916f4048b183c33d65d52ef","ssdeep":"","tlshash":"8371ad986ea10481e73f8619b3ce4b647a2c96532c19fd8e3bd5140d5ec6f9c9a8831f","first_seen":"2023-04-12T10:03:37Z","last_seen":"2026-08-11T15:23:57.607025Z","times_seen":1269,"resource_available":false,"data":null}},"time_used":605,"timings":{"blocked":442,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/jquery/dist/jquery.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.647Z","timestamp":1786172794647,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/jquery/dist/jquery.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"14e55-6135cb7dfdaae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 29885\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":85589,"size_decoded":30270,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32069)","md5":"6fc159d00dc3cea4153c038739683f93","sha1":"5d7e5bbfa540f0e53bd599e4305e1a4e815b5dd1","sha256":"8a102873a33f24f7eb22221e6b23c4f718e29f85168ecc769a35bfaed9b12cce","sha512":"a574742476d89bdf841a26fac51ff0fae62cfeed95f38a1f3eb0699202d8c8abe165826d514bca4b2d69822f2d25901a72c3f081fd646e1238cf082ef0e28ea8","ssdeep":"1536:kYE1JVoiB9JqZdXXe2pD3PgoIK6alrUnzZ6a4msO7R6xfWBP4TCddWHs3ghna98o:P4KZ+sOsOV6x6pwhna98HrU","tlshash":"1683d6d9b2d6705297b734b850bf410bb17a98dab44c8c60f098d4e47eb4a8e507bf2d","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-08-11T15:30:47.417353Z","times_seen":10012,"resource_available":true,"data":null}},"time_used":927,"timings":{"blocked":601,"dns":0,"connect":0,"send":0,"wait":166,"receive":160,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/style23102801.css?v=1.4","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.654Z","timestamp":1786172794654,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/style23102801.css?v=1.4 HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Tue, 19 Aug 2025 09:58:38 GMT\r\nETag: \"29c3-63cb4e6787cd0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 2980\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":10691,"size_decoded":3349,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"bb24f5e6e2fb8a441238eeedebf26e71","sha1":"2856d306342170aeda98f12d60de8f4fbc4a11c5","sha256":"ac15aadff61f3d6630251c3c9fd8b39056c44fd24390e239d5267d255129e2e8","sha512":"75f4d4180de28f6efb099dea8789d5c451bd1ab48823403e1b89e95330c399bce9c3bfabe259b2482da10776ca57a1788056c3a114225e298388ec86a4608cf5","ssdeep":"192:tU74F9hQBJPIvn23+By9lWeldFWdFF5hxFyFZLLL/S3IFGh499vcMrKWLkTIC13g:tdFTuwvaWeldFUFzxFyFZLLuY399vVPt","tlshash":"6b22c753aaf70909b067884a3fef6b56172d8043550ef8697fa0714c8fca5d8c163b4e","first_seen":"2026-08-08T07:04:21.431648Z","last_seen":"2026-08-08T07:07:14.924553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":931,"timings":{"blocked":768,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/scripts/jquery.custom-file-input.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.663Z","timestamp":1786172794663,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/scripts/jquery.custom-file-input.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"376-6135cb7dde6ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 470\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":886,"size_decoded":851,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"542ee72906e26bb561156290053b1a5b","sha1":"9b7ec7d51c74ed494a4850bf3d6ccea6b4baa501","sha256":"840a72284ef1fd851467051cba9e25461a3c3650e0fc6a3a7f3fd3c43e50dd50","sha512":"47c048004ef13d669e09a2d6d877e1a6af07c6a02ab53dfa4384f03d17ec28c7c054f6efae61f703c20c7369a17592b9285c6006b2d29fac7900f0e68c3dfec2","ssdeep":"","tlshash":"21118c8eab0e1a42d0f330f4af9fcd523d2e403026845123dc6e1a95a9a4907b7d9d3c","first_seen":"2025-07-03T17:09:32.443337Z","last_seen":"2026-08-08T07:07:14.925177Z","times_seen":29,"resource_available":true,"data":null}},"time_used":1124,"timings":{"blocked":955,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.669Z","timestamp":1786172794669,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/assets/js/required/jquery-ui-1.11.0.custom/jquery-ui.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"39fec-6135cb7ddc76e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":237548,"size_decoded":63305,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32649)","md5":"52d681d4dd2305755508829aaf7bd0d4","sha1":"d927c2ff8ea88f8c5d14a157a84a9a7669f51015","sha256":"d52a99908b8cd44dffa18ce0d8444eb22866c2561b52dca1810851d02f2aa957","sha512":"12856d49e0a7c754021a4f2449d4215982b0c1a30b8fc4b2de8ffc44bf25c3f9a6d4b290a44bde20db142d477853790054f37a82193efa996c56d27680ff24a8","ssdeep":"3072:drLWhQl3DjY+DMywj3OUGRUrQmnzusnTqzA5BguYa1q:tLIQlYEwr5QmzusnIp","tlshash":"e934f84d72413a3691efe265103b2a0ba237555ca605805cb43cceee9e7de0531bbf7a","first_seen":"2023-03-13T05:25:56Z","last_seen":"2026-08-08T07:07:14.926071Z","times_seen":278,"resource_available":true,"data":null}},"time_used":1471,"timings":{"blocked":1124,"dns":0,"connect":0,"send":0,"wait":178,"receive":169,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/datetimepicker/bootstrap-datetimepicker.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.673Z","timestamp":1786172794673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/datetimepicker/bootstrap-datetimepicker.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"966e-6135cb7dee0ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 9494\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":38510,"size_decoded":9877,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32039)","md5":"8a36160a466cad1a9e414321f4784baf","sha1":"4ed91e4ed7e1a2a7e5f05654e2f62695c9e6ce40","sha256":"e5899ac40c0c8c8a4cad594af3863ff8d8c2a4a9c561af1b59605b50748119f5","sha512":"1837b2dfb459031164a45789a2b114c0da086e44f0b320bbdfa28d498b9cbb55895852bda9377362e6fc013c64b6be83c247bb9db15a8a8ca9cdb0ce43292846","ssdeep":"768:+85tRKDmhd/onYDM38NvdyMmpu3II1R+qlyTo/KR6MJodCBSEpfh6Aq8Sd4KI+po:z5UrsNvdyoII1llyTjpWnvAMLI+p+7","tlshash":"eb03b604b1b1729795bf7495102e6507e266cc3efc59487168ce10b83dbec89a1bef2b","first_seen":"2023-03-07T01:03:13Z","last_seen":"2026-08-10T17:41:49.003817Z","times_seen":1720,"resource_available":true,"data":null}},"time_used":1411,"timings":{"blocked":1248,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/fontawesome/fonts/fontawesome-webfont.woff2?v=4.5.0","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:41.119Z","timestamp":1786172801119,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/fontawesome/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/themes/current/vendor/fontawesome/css/font-awesome.css\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:41 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"10440-6135cb7df0f8e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 66624\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":66624,"size_decoded":66920,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 66624, version 4.262","md5":"db812d8a70a4e88e888744c1c9a27e89","sha1":"638c652d623280a58144f93e7b552c66d1667a11","sha256":"ff82aeed6b9bb6701696c84d1b223d2e682eb78c89117a438ce6cfea8c498995","sha512":"17222f02957b3335849e3fe277b17c21c4aaf0c76cd3da01a4ca39c035629695d29645913865b78e097066492f9cee5618af5159560363d2723bed7c3b9cf2a8","ssdeep":"1536:P7P0ehdxE792JHJ2qrz+MoCpeUtsG9eDeh9Zw+ZyqJ:PPlYw1re8Lsqh7MqJ","tlshash":"ae5302303406ab26ecdf0e8776b888f2b4da91d37b5f22c753aa84115dc91d5d94ca3e","first_seen":"2023-04-05T13:28:44Z","last_seen":"2026-08-11T15:23:31.242928Z","times_seen":33876,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":-1,"dns":0,"connect":0,"send":420,"wait":163,"receive":324,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/bootstrap/css/bootstrap.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.630Z","timestamp":1786172794630,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/bootstrap/css/bootstrap.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"23aa2-6135cb7de82ee-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 21337\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":146082,"size_decoded":21709,"mime_type":"text/css","magic":"ASCII text, with very long lines (540)","md5":"5ba37ad9163643c32251366754f08b2a","sha1":"4316dcfb54e1b0a428e1d37203a4028fd0408298","sha256":"ad850187e2746ffcc60b36c6d36c0986277e9dc1f277406ca146298cb2d2a309","sha512":"1dd5dbbfc97238d0f551ebb2d28ac8a295611709735b27327d21bd62f151f3c4e08a23149129a1fed7b39828efdfac2dcd3264dd02b786706256de812419ea51","ssdeep":"1536:X8dv6SUZjywXbH53PBHsWj8g1UCFz96nOdG/JP9IZptcJ23NsOCj+:XoUZO45ZHkgCc8nOU/JP9IZptcJ23z","tlshash":"6ee394d8f6b039407223c09835938e52771da143d41fed79b7ea35acafc81958973b8a","first_seen":"2023-04-06T08:04:00Z","last_seen":"2026-08-08T07:07:14.927773Z","times_seen":822,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":162,"send":0,"wait":166,"receive":162,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/moment/moment.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.672Z","timestamp":1786172794672,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/moment/moment.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"18381-6135cb7e028ce-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 22865\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":99201,"size_decoded":23250,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"15bc84f89593b12b043a282b88bb32db","sha1":"a699249676eb4903f241fac9b029dcc0a72834f4","sha256":"76ed5f26170ae03324e5b7c44266e3ee36e754e77d581a2314ceceb9768c7ddf","sha512":"066f0505f38520b5bbab37f9d7897f289696f95298c84ad13e3051729089d487e604970bf4f452068e9fca11348bc0419816e233242b342f7b9b56f574358cd2","ssdeep":"1536:FybK6L0ensA/O+nbD3qukGrhGVLXaDlV+Z:FgsA/O0bD4mlsZ","tlshash":"cfa31c4a29e72c12466771384bcf61c57a249827090dae097d8db3d4af5dc3847bafec","first_seen":"2023-03-08T21:46:04Z","last_seen":"2026-08-08T07:07:14.928516Z","times_seen":111,"resource_available":true,"data":null}},"time_used":1412,"timings":{"blocked":1247,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/default/dragula.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.677Z","timestamp":1786172794677,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/default/dragula.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"ffdb-6135cb7e0b56e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 18259\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":65499,"size_decoded":18643,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39900)","md5":"f3b3311bd3576d5bbd122fe5a99a0850","sha1":"ccbd0623b7f33039d4e0093e2c47fc92c276b2ba","sha256":"ad57f71fde036e584fe19eb02d26b69a9330452e6a78f056ca413a4163ce68ed","sha512":"7bb5543e2835ef748072df680a040efe4a1ccc2e93267b0d095b9df55da7747128f3330a0beda1cb59e88b04163180e2a23429f516a4a1ea27e81feb0d9bf1e9","ssdeep":"1536:toGhZk+ExOTzbFpXP8vq8gV8mXuxsuIUyflGYhbmhM:y+EUpXP8vq8w8m+xXyftT","tlshash":"cb53d8defd5930a5b5123a9e82cf856920a927434685cf08b80cb2d03ff562d53f9dda","first_seen":"2023-05-17T00:57:04Z","last_seen":"2026-08-08T07:07:14.929068Z","times_seen":15,"resource_available":true,"data":null}},"time_used":1567,"timings":{"blocked":1403,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/fontawesome/css/font-awesome.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.624Z","timestamp":1786172794624,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/fontawesome/css/font-awesome.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:34 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"81d1-6135cb7def04e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 6588\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":33233,"size_decoded":6957,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (372)","md5":"5343ee1a287a65ff20961476fd8a6188","sha1":"b488600451227b445414796e9b8550e7c1bd6d29","sha256":"082b0736a3408950e50fd65a090921003fe83d89ec6e3084549a01d5dfa9e854","sha512":"11a6a5760819b780cf28c6016b5e37bf15d0a8bab92c4dbd0c6ff43a855e9e8cb10eb012718adc61c1c8bb160ef583532103200fc73c808514f05430ed6a5749","ssdeep":"768:r0j++A4CSIDqvnI+YTBrQPvVlJjPiRAiq:Ij++A4GDUI+Y9rMVLjPiI","tlshash":"b4e230ece5bf18904391e0d16386a370bb3dbb2c9c4a6d9cd2a6798cb1c1255d2c63dd","first_seen":"2023-04-05T14:27:18Z","last_seen":"2026-08-11T15:29:15.874871Z","times_seen":1642,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/styles/pe-icons/pe-icon-7-stroke.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.642Z","timestamp":1786172794642,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/styles/pe-icons/pe-icon-7-stroke.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"25e1-6135cb7ddf64e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1819\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9697,"size_decoded":2188,"mime_type":"text/css","magic":"ASCII text","md5":"49f1756b752aecad2608578df3251202","sha1":"a9ab3c321af8c77f5efbcf9b4a446f3996906bad","sha256":"d75d34dff947afc2640f17fa5632e56e1d1d8020a9158075a00bdce6e4468f72","sha512":"129fbb3c26a27b413835685fc54db0e3dab474e1189906865d2ac732c1b2be5c7a47324a770408b4c0cd8a76cd6fa363c948c715e502a5052e1a91539f0a09bb","ssdeep":"96:wI8jiHVnzuudOeo9qjwYKoZc3AHdOJz5BJOSTrbI2RLcwR/UGkqmMMO0s+9o/4DA:YjiHBzCTq18t05xpoCr6vHZ","tlshash":"d812c9a4fd6f38a25791e0d16ac82e552f0de26d9f412c79c81b7e7cb3d321ca5806d8","first_seen":"2023-05-02T01:52:09Z","last_seen":"2026-08-08T07:07:14.930112Z","times_seen":28,"resource_available":false,"data":null}},"time_used":602,"timings":{"blocked":441,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/styles/style.css?v=1.3","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.645Z","timestamp":1786172794645,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/styles/style.css?v=1.3 HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Fri, 21 Nov 2025 13:23:07 GMT\r\nETag: \"ba47-6441ab6d2137f-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 7882\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":47687,"size_decoded":8251,"mime_type":"text/css","magic":"ASCII text","md5":"0ebf0c3d81d179fba2bbef2d960808aa","sha1":"0e60cde1712dc8d78d4cc8e6e37d87c1d63ab68f","sha256":"2381103f12b65d63618364833248083868c041fd610191df3f6048e751fa6c19","sha512":"5b82405591f7f0a08ffbbed8017027220ab4212b0cda69b3fa2cb9f562a4e7b35d8cab09070b88c5223bead00fa73f86bcbe8680b0b5b2d966e9d455c2763522","ssdeep":"768:1xFa8hZcqoetUFU+SyIofmWbKEdy9VFTZ19L/LdTgCswV2CEbh9ZujnTb6+4Wj:1xQ8hZpoetU/SyIotmx","tlshash":"f8234392ffb33c83b10b80486abbda42676d10c7441ecf7e7b45a264df0c5985672e99","first_seen":"2026-08-08T07:04:21.384545Z","last_seen":"2026-08-08T07:07:14.930614Z","times_seen":2,"resource_available":false,"data":null}},"time_used":759,"timings":{"blocked":596,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/default/manageaccount.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.650Z","timestamp":1786172794650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/default/manageaccount.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"1b5b-6135cb7e1808e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1820\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7003,"size_decoded":2203,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b64266202649f327385d8a242e8c93fe","sha1":"e2df219e0a50e3daa04148530ee8619d8cff7e7f","sha256":"c451f9671c2841c183df8cada2b440a3b8bdfdf3b6a1e14f8e45dc96a78a0bf2","sha512":"e35f6fcb972ab5fdc7d0f33691acbcd430b3d63724b0fe04dd841d971907991037010729f12edb8201582e681ab72d0b1759f472a92b62b8c96f6c218ad67847","ssdeep":"192:2Na55d5Z7QE5HoA5Egx7Ld53+Yk52fwQ1UWQjwUbgDAt:Ca5/5Z95Hz5EIZ5U5qb+","tlshash":"3fe1100421fb012284b35cfe3a57a72c396691276209de1cf6fe46902fdad5c43f2b59","first_seen":"2026-08-08T07:04:21.449149Z","last_seen":"2026-08-08T07:07:14.931374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":791,"timings":{"blocked":621,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/stylesheets.css?v=1.0","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.652Z","timestamp":1786172794652,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/stylesheets.css?v=1.0 HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Fri, 22 Aug 2025 12:47:48 GMT\r\nETag: \"1b28d-63cf39cfb8ae4-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 20052\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":111245,"size_decoded":20423,"mime_type":"text/css","magic":"ASCII text","md5":"fbbe238169ccb1ae10771678c515d8f1","sha1":"fb22b940a720a70a18d0463ba9311b4ca7bfdc6b","sha256":"f1434b6a72e3b47c3f9450aa2383ac629b217c4be2c7344166779a5f1afd9349","sha512":"806f9e362dc7ab5eb6f9125b385a3ae05eccc36d2c8f4f92bc2a542bb6f586fe1a481ad849a6a7af1a6f4d1e687ba2922ee52147b76ce1ae029ca2649090b10e","ssdeep":"3072:Io6AoPa71EGBU6WN0RhDEsKbofhxlxAdIf39fzAood4+lAyXjck7zPQh+y9QNDHS:Io6AoPa71EGBU6WN0RhDEsKbofhxlxAg","tlshash":"1db33087abb72946b803e4a83faf53a5235e4003950ee56d7f957248cfc91e5c073b89","first_seen":"2026-08-08T07:04:21.396501Z","last_seen":"2026-08-08T07:07:14.931958Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":758,"dns":0,"connect":0,"send":0,"wait":166,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/flot/jquery.flot.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.666Z","timestamp":1786172794666,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/flot/jquery.flot.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"cee6-6135cb7dee0ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 14624\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":52966,"size_decoded":15008,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033)","md5":"9927ea93540a2a08b3c5125ff2126102","sha1":"935a7104dda9dcfce22258659ab6f6732059bc22","sha256":"ba4498a5218c71658ae6433b625664cd0fcc9980d06549983ea079828159c169","sha512":"5fcfc0ead65c8258213ba3e8dfb5fac2ab69e8cfc20d859d61aa9d4f3756adc9a8bca8bc5d2b597cea73e383b2685928d069d96c68ef45f2bac2c9b490dbc852","ssdeep":"768:HGKwOx6qLsBQLd4OEe5+luXCOZhpS6+FYFsWMFlg7:m+6qLQQV5DpS63p","tlshash":"4e333d8f93212217c2d312f7bc9b1dcf5136aa1349409665bce9d6a13974a8a33f7f24","first_seen":"2023-03-07T01:39:58Z","last_seen":"2026-08-08T16:24:09.068046Z","times_seen":509,"resource_available":true,"data":null}},"time_used":1247,"timings":{"blocked":1083,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/scripts/selectize.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.676Z","timestamp":1786172794676,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/scripts/selectize.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"19fc9-6135cb7dde6ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 27912\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":106441,"size_decoded":28297,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"537acfe4cded2886d9bee03d792fbceb","sha1":"15ccd4bd87cf4f7ab13cbe15da1800f0e4a2774f","sha256":"4babefecabb43cc69d1f215189a012b23b5c5142155d778f40fc9910b028d094","sha512":"397f692947ee2092d0908047bfe5ac1017e2c02e9f543f904e1fa782b0fbd3852514b6f14cad02c5735a21ea93ed3e17e61051597f7a70afff478b5b01e9437e","ssdeep":"1536:6skyRF/lhCvjGnkSD0GYNHkx2jpWEe3hFLj0LA6beNa/HS8RqJHPn47Uk06iMGP1:6GXlhJnkSAN+QpdeRqeNa0g7ULb","tlshash":"aca362d0f78c315651a73068ac9e71cfa43d907ae41c6cabbc7ce9983b9482d5237c69","first_seen":"2026-08-08T07:04:21.351465Z","last_seen":"2026-08-08T07:07:14.93348Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1424,"timings":{"blocked":1257,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@300;400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:35.782Z","timestamp":1786172795782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@300;400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 07:06:35 GMT\r\ndate: Sat, 08 Aug 2026 07:06:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7708,"size_decoded":1321,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8c63225de4e66b224cb6bb3bd45a7aa5","sha1":"155c6e7309fd8ee4baf0eb9cc82bacc66d3d905d","sha256":"60f2deaf2b8bb9cd75135769b6f8b27810032f700b6709b6ef68c40ff178a02a","sha512":"80d499ee1fb1461cd0b5129bc8891cc36fadb2b50353c617e3d5033fba20b8495fdb88c9e1a2b56e4d34837153cb48697cfc6b284b93712516b07f59fa91eb31","ssdeep":"192:FRV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu8:zRPQPTza7","tlshash":"83f1ac91105be500e6472cc923cf7e2add4e61627494c5797ffe2ca8adeac224325b3d","first_seen":"2025-09-09T13:12:33.084361Z","last_seen":"2026-08-09T16:10:08.672319Z","times_seen":304,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/default/lib/main.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.646Z","timestamp":1786172794646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/default/lib/main.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"9ca0-6135cb7e1326e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 9678\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40096,"size_decoded":10047,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (3183)","md5":"ca83f9e713b1843c7a0cfa0696da53f9","sha1":"38eaf47bdf3809f83b16d7b6a3343a4f31b9797f","sha256":"d66f5f9e70cb5bcc891806861ff8a6c9a49c6864c2f70316330e7e1153d35afa","sha512":"a187f97d17ce552235bfe20a0fc74b086f8c2e10120c8d74edb6eb3430eb551bc8c8153a1de8d4674409b676534cbe7cb1beaf4ce4d40f814055ca913c0b69df","ssdeep":"384:YneFNJoWMXfY1hoEyFO4D7ma9XnCS2H/WqcBHT2OJRajNFQ:YK3ztoEyFOwHVpBz2OJRajNFQ","tlshash":"e10385f5bda321a3101fe3a817197685eb35a3c3d52dc8ba36c45e248f846ec184e7d9","first_seen":"2026-08-08T07:04:21.428421Z","last_seen":"2026-08-08T07:07:14.934751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":763,"timings":{"blocked":601,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/bootstrap-multiselect/dist/css/bootstrap-multiselect.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.657Z","timestamp":1786172794657,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/bootstrap-multiselect/dist/css/bootstrap-multiselect.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"1aa5-6135cb7de05ee-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 2041\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":6821,"size_decoded":2410,"mime_type":"text/css","magic":"ASCII text","md5":"bd42dd620a37b5d6cca6849efcb47806","sha1":"8ba492764db5f372fa4da193658fec87097a6a3f","sha256":"86928a27b59afe67408eba0c21388adff610c5d07e7218593052c85045cca883","sha512":"b653f8c863ad1ddc5d796f7f569b48b1530bb609ce6cd36bd3b2a51f32b8079cd552ecc9fbd2ab17ce81fdaecf267cf112080f00cce857f78e8a965df305a96a","ssdeep":"96:jIt4o/F2LHJ4JzyVt3U3d/gVAER0yOAP2Ooww4ck4sHAYOxO5OtnBrqWoQ5N:jItp0pMeVt3U39ahrakck4sgYOxO5Oae","tlshash":"88e1cb166e81bd3154ee35df6c7153c96a0fb03edd3a7c6cf0d98600bac8aab9022517","first_seen":"2023-08-02T17:53:09Z","last_seen":"2026-08-08T07:07:14.935452Z","times_seen":167,"resource_available":false,"data":null}},"time_used":1088,"timings":{"blocked":927,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/images/auth-v1-tree.png","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.687Z","timestamp":1786172794687,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/images/auth-v1-tree.png HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:41 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"852-6135cb7ddd70e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 2130\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2130,"size_decoded":2447,"mime_type":"image/png","magic":"PNG image data, 248 x 185, 8-bit colormap, non-interlaced","md5":"b874842ce6114ec5f83893b00e0a189c","sha1":"cd35eb60935d0c73eada0666a703efb1d513a49d","sha256":"1ebec22f38d42f334cde00d17f6341fd2af7d9c4e309e997ab0f6bf26b7d0557","sha512":"91f033d85f1390ae9c962a0adb6326265a59a698ce4a0ddc26778220465d9954aa075fe1bcb4abc0bf46da71a5c3dded2d87ccbdfbee908de6fcd3ec049ef681","ssdeep":"","tlshash":"56413824c22300dc9dabba39e3d93579cd0ec03596f184031d24a6ba2c988e45ac238c","first_seen":"2025-05-06T11:45:49.677872Z","last_seen":"2026-08-08T07:07:14.936301Z","times_seen":8,"resource_available":false,"data":null}},"time_used":6729,"timings":{"blocked":6375,"dns":0,"connect":0,"send":192,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:41.117Z","timestamp":1786172801117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.profitnow.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46772\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T14:59:37.492767Z","times_seen":548456,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":29,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/sparkline/index.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.665Z","timestamp":1786172794665,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/sparkline/index.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"1e236-6135cb7e0386e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 24116\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":123446,"size_decoded":24501,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c7638b825bc7deb1cf58c990825d35b2","sha1":"5bdadbf3f555341c5507059df20f67770df7f15a","sha256":"2f2bcb0b842f3ed514ec601e5e72386ad0ed0c348a3ad505a0846ccacbc34834","sha512":"fc5f06bdc75252262e2fcc0530b46ca71fcf7a620e39904c8aba3b33d5b09fd57fc1fcc81fe47021ab8049341d26a69a65d48704fe259adaba547e5b6d335a27","ssdeep":"1536:3e5LyCWhSavqz7UiUnscQnb7yZE68tNS7ra2nOd5q6q:OYCWhozX8ra2nOLq","tlshash":"3fc38219abf7115ac023306e0f4f82499332995b5a06eda97d6c53c04f54d3da2fafb8","first_seen":"2023-03-10T20:00:33Z","last_seen":"2026-08-08T07:07:14.936879Z","times_seen":74,"resource_available":true,"data":null}},"time_used":1248,"timings":{"blocked":1083,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/scripts/luna.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.674Z","timestamp":1786172794674,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/scripts/luna.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"521-6135cb7dde6ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 488\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1313,"size_decoded":869,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"0aad69daa68b50f2bd55468a4cd9be61","sha1":"7eef2168da8cce972f725256b1d6500e4e38eabd","sha256":"4e267e4baf19b7f9c42b8d7c6e50cf6dc19ac9fbec1da0078986451f116d8ba9","sha512":"af4ebb4008ed637704b80e668d336d742811e989d907841fe9f29443995cbbd400a9dd07c53d44eea8c447cdd1fd43512be8bd7f98eebbcb3f7e4d1cad8687c2","ssdeep":"","tlshash":"7421250bf4aba1d2287fb12e177ba8483639488ba107c534746e9f900f1024f72a16fd","first_seen":"2026-08-08T07:04:21.398819Z","last_seen":"2026-08-08T07:07:14.93726Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1414,"timings":{"blocked":1251,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/toastr/toastr.min.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.632Z","timestamp":1786172794632,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/toastr/toastr.min.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"1769-6135cb7e0480e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 2748\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5993,"size_decoded":3118,"mime_type":"text/css","magic":"ASCII text, with very long lines (5993), with no line terminators","md5":"c4d50504a82305d607ae5ff7b33e0c39","sha1":"6be38e5f7d02e41b211ec1e141a0f4655c899572","sha256":"a2426f1111a7c61667d668e9012e3eab58f4e784fe70fe16293dc43b634f812a","sha512":"ed68263e695728d39e5a3370e1bcaa462ace12534f4d81470f91050151e8a884b65bd9de8fd9a064cc017d2ca8fa06cbb72e70635300bd9655d8584c1e33687e","ssdeep":"96:X4GSD6SjY1Sq9octfUM/WQ78GhJZCjts/WP+zLmlDI/WKG8Czy4/WVMz2Tb6wtVc:X41jY1Sqv4Y8syRttzGjVMSbb6","tlshash":"53c194329a852a1dfed3815af45965092d0be163e6ee5dae254fa17cd2c77c06c33280","first_seen":"2023-04-08T00:22:18Z","last_seen":"2026-08-11T10:16:24.669835Z","times_seen":764,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":162,"send":0,"wait":163,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/player/plyr.css","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.637Z","timestamp":1786172794637,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/player/plyr.css HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"6133-6135cb7ddd70e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 4233\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":24883,"size_decoded":4602,"mime_type":"text/css","magic":"ASCII text, with very long lines (24883), with no line terminators","md5":"c5bb2d2f60609941f0ccf0fd55ecddb4","sha1":"462cd8e4eca2210df072311d53b96faf439922a4","sha256":"5991fbed4bf098d2649b5e7715f407d7e99e0a660099158f557c3c4e7986c338","sha512":"a7ade1af620f03a586cddf6b66c94b1c412e1228478689ccd99a3d5615da8d4dd82a94f24e2f6eff25b066b505612aecabef109c8a2ded3f0c10861669f46d4d","ssdeep":"768:DGN8LO042jq6I+pbWr5XBjzgWpF+Ine6pdeb:KN8Ct2jjb","tlshash":"c1b25871b56d1164a033896e3bf1caca73bcc202f5e23b5ab255b5708ece25687b7142","first_seen":"2026-08-08T07:04:21.37833Z","last_seen":"2026-08-08T07:07:14.938298Z","times_seen":2,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":283,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/toastr/toastr.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.663Z","timestamp":1786172794663,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/toastr/toastr.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:23 GMT\r\nETag: \"1359-6135cb7e0480e-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 1921\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4953,"size_decoded":2304,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4918)","md5":"d59436971aa13b0e0c24d4332543fbef","sha1":"c73521049fbf59ece5a3583d83f096a1ca20a9ed","sha256":"b2f539c525219f3cb09b400f7c014dadad7adc90e2e83df56b2cd4c879290e0d","sha512":"6654b92768084812ef7ead152687488ce1f4bd50f0c47629a6d5d0c959f58035216ff731dc4b707b1d8d2a0247b967632d9afb751bacbe264f67871207324160","ssdeep":"96:OdPZ3hzJHdT+3jV759Ro8mKOvaKEHSXIFf0aPKVyfS7fr2:OxntM3jVzRUDdEHSY9P9Sr2","tlshash":"eea165847271badb5b731079819f004b933662618dce5440763ae98c7eb082893b7fed","first_seen":"2023-03-07T12:09:00Z","last_seen":"2026-08-11T10:16:24.666404Z","times_seen":713,"resource_available":true,"data":null}},"time_used":1241,"timings":{"blocked":1079,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/player/plyr.min.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.678Z","timestamp":1786172794678,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/player/plyr.min.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:36 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"1c1ee-6135cb7dde6ae-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 31714\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":115182,"size_decoded":32099,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f5d0249bd3f9f79b8215f20d6c1abe7d","sha1":"3d019b53db77487e54083573a9f2313a6d334949","sha256":"4b5b56f7067112aa1fec4f6506f5474165ad002bf76c129cb4e82a5c4aa3f1f8","sha512":"a06ecd948920a76a01fa74bdb5172557f78a954448492b6d225971cbad5f0953f830611ff8576431b57b8550c444d715143d28ec72de88b56c11eea5f109dbe5","ssdeep":"1536:Vp0TnRRTokg4In5o8nMKS9FkIjkJ1XclMNfkm0weM3iTJBkVqk1ssN1ow2u8QMkn:Vp0TUXR0rObjSBxUNytm3","tlshash":"12b3f8ca7246b171c6977469503f220a72379b8a1405c65cf83afdd86d38e8a7277f38","first_seen":"2025-11-05T16:40:30.442078Z","last_seen":"2026-08-08T07:07:14.939328Z","times_seen":3,"resource_available":true,"data":null}},"time_used":1578,"timings":{"blocked":1411,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/styles/pe-icons/Pe-icon-7-stroke.woff?d7yf1v","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:41.209Z","timestamp":1786172801209,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/styles/pe-icons/Pe-icon-7-stroke.woff?d7yf1v HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/themes/current/styles/pe-icons/pe-icon-7-stroke.css\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:41 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"e4bc-6135cb7ddf64e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 58556\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: application/font-woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":58556,"size_decoded":58887,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 58556, version 1.0","md5":"b38ef310874bdd008ac14ef3db939032","sha1":"7e544bb11b7655998db6f324c612f7ffbf0ab66e","sha256":"6fb4217048f333e23e0fd0ba2ab05e05fd7500f86a5a80a7cf04a2f94b257bec","sha512":"2cc9509bdfd9043009ed626a7d0c0d7f0ed1486690b02a482cbe859a0d851ba89843933da62e79eb5c472c55b9f33f2535909d795341e3c9d2b1277bdbc0bc50","ssdeep":"768:DOdt4kAa4qfoTLYTziyxHOtDN3gaP2iol8fpMzFt/L4gv1rn+ZapZzfJLY0uYQ:DO0LYfiV3mflGpMP3oMptJLY0u","tlshash":"36430903270bef0bd013b9f7994461738e93e1116b3396972c8a5d184b196b58e2cbbf","first_seen":"2023-04-07T03:24:12Z","last_seen":"2026-08-11T15:23:57.517266Z","times_seen":7702,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":162,"send":0,"wait":161,"receive":321,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/script.js?v=1.1","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.649Z","timestamp":1786172794649,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/script.js?v=1.1 HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Fri, 21 Nov 2025 13:23:07 GMT\r\nETag: \"65e-6441ab6d203df-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 669\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1630,"size_decoded":1050,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"862ef2a1354eb7cacb38f0876a1dd10c","sha1":"11ca0fde70fda5ccd9cb346bcf6a58cbd487742c","sha256":"84a5dc7d0b0eceda770791aeb9071eeba9b82e267a86dfe2d20896b59ce14be4","sha512":"3ea79ec01107a8208dd678a1a5dd7a4e62d0fdddff3b734bc45fcb84c4245d97f5784c64d4a2e39b32b37fe77e85faa613a36f0d7dd0fcaf64c4e3b53d9c7d8f","ssdeep":"","tlshash":"9631a91932735a74c5e7613323afa28830a6125bae48c60930dd1bc80fb5d51a3b6aed","first_seen":"2026-08-08T07:04:21.345479Z","last_seen":"2026-08-08T07:07:14.940554Z","times_seen":2,"resource_available":true,"data":null}},"time_used":768,"timings":{"blocked":605,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;300;400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:35.779Z","timestamp":1786172795779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;300;400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 07:06:35 GMT\r\ndate: Sat, 08 Aug 2026 07:06:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17689,"size_decoded":1543,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e958ec6c17c69ecc1c901f473ab22065","sha1":"f327d46430c00309645e4a818d18d27940b9c34f","sha256":"6198e410872ffdd1b14a01bb379f33bba24b8d59111346365c45f50e69931bef","sha512":"9c99f6a4e8c38b45a446f68900c39b0f6b3584ab4b0cfa22929bc8c892c10f3a1d253bfed5fdf7133c31ee3552a0ad5cb61c84aa3a457f65f2ce312de7ee3b94","ssdeep":"192:WpNmp9pKpO3tp3pxYpKNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlOR:WLmXoKtZIQKYXuM0p2+g7r","tlshash":"6f828992002ba400ab971dc233cf7f3aaece10856085d1b95ffd0dc55cead66436875d","first_seen":"2025-10-28T14:15:03.450185Z","last_seen":"2026-08-08T07:07:14.941315Z","times_seen":13,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:41.211Z","timestamp":1786172801211,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://app.profitnow.io\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 07 Aug 2026 18:07:09 GMT\r\nexpires: Sat, 07 Aug 2027 18:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 46772\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":37756,"size_decoded":38568,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-11T14:59:37.492767Z","times_seen":548456,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/style.css?v=1.3","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.653Z","timestamp":1786172794653,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/style.css?v=1.3 HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Tue, 22 Apr 2025 11:15:40 GMT\r\nETag: \"d00c-6335c1ad10ac9-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 9452\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":53260,"size_decoded":9821,"mime_type":"text/css","magic":"ASCII text","md5":"e6baf20e778e3ec6b3aba12533586d56","sha1":"261f8294755c4224e8128ea8edea24871f41adea","sha256":"a7fe098cca4ace430daba51009c14d02cd5221ba72b933fb59500032af04cf9a","sha512":"156ac7d3d6e759f311bee19b7879485a441fa9f98fccf3434cd0c4bb3a296863bfa8722f4afcc1576e21f10776d6ea2db29f0f58799dcbc19f0e8f25ff2ae133","ssdeep":"1536:YYzio3rYGEOdvzGNE+t+aw/XNGGEOA54iL1MuJZopWFOaex1yxJeZfu0:Yoio3rYGEOdvzUE+t+aw/dFE954iL1MX","tlshash":"3033a342eaf72845745794993fff6b566b6e4003920de9683ba5724ccfca2c4c0a3b4d","first_seen":"2026-08-08T07:04:21.38662Z","last_seen":"2026-08-08T07:07:14.941846Z","times_seen":2,"resource_available":false,"data":null}},"time_used":926,"timings":{"blocked":763,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/vendor/bootstrap-multiselect/dist/js/bootstrap-multiselect.js","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.656Z","timestamp":1786172794656,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/vendor/bootstrap-multiselect/dist/js/bootstrap-multiselect.js HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:35 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"14746-6135cb7de05ee-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nAccess-Control-Allow-Origin: *\r\nContent-Length: 15087\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: application/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":83782,"size_decoded":15472,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"b077bed3c0004613ae18c002ac12a2db","sha1":"eab8f757c3126244853e7c13ed3d4fc9d9084c8a","sha256":"ddc989c689f97da8d764110dadac324c568b8603ae8f0a971d99f69cfd8858bf","sha512":"6306ca09c7cc76a07a3587ddce9d4db4d728a6c1bce12c4ff16c64d05814c93be0b507b4b504519e714ec0adf17e76765d896cfab09f06b0f42f612a9920f6b0","ssdeep":"1536:EtfzXxrm20oTiGBnWhDFn2a7pWMu6wloqWIcVcd:EtrXxrm20oxyjID6wrWE","tlshash":"2f8333096af6223155bb30fb0faf0088a535822f5506dd6978ad83d49fc4534d2e7fba","first_seen":"2024-01-17T18:39:54Z","last_seen":"2026-08-08T07:07:14.942593Z","times_seen":16,"resource_available":true,"data":null}},"time_used":1088,"timings":{"blocked":925,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.207.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.658Z","timestamp":1786172794658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/select2@4.1.0-rc.0/dist/css/select2.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 08 Aug 2026 07:06:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2247\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.1.0-rc.0\r\nx-jsd-version-type: version\r\netag: W/\"3f88-kT+fe5U1rseQyjzp1uNaz682mZM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220086-FRA, cache-bma-essb1270021-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=2,i=?0\r\nage: 250674\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pVuglH9gcW9v8ncsrB4wF4OvczzNuNbE%2F%2F0KkRwV%2BMz61pjTdaD2AQRPad75YD1RHQtJnSGumXA4hAteNhBGcplHV6L0kmQ0zTrIG2kPqMubU6FkvQtPMtMAAW8GFYipcqI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a27cae06abcb7131-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16264,"size_decoded":3408,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (16263)","md5":"e71c39430469a3eea74514a2b48f6536","sha1":"913f9f7b9535aec790ca3ce9d6e35acfaf369993","sha256":"cda4a81c187015d95ed2c71f1841540b08203cdec5fa2a7d5d1825a3c2166f8c","sha512":"683f68a61a4543ad671593fa85762ee10fdbfd4496eeba4b0902d7e818b45891d734eec9b3f7d410da4141fffe3f836da73357d234a0479cd5bcf389a7e5b62a","ssdeep":"192:1EaNSrenTfc3aq6J5wV1Q9CPxWqAUJKk3BcH9t39:1keTfXnS1Q9sWqbxRcdp9","tlshash":"6b72d935becc2239b0bf8e7f6cf2b4946629dd5fc4111b9ab8e9e154c8e04540a4b60f","first_seen":"2023-04-05T14:56:11Z","last_seen":"2026-08-11T14:39:51.964454Z","times_seen":10692,"resource_available":false,"data":null}},"time_used":6418,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":7,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.profitnow.io/themes/current/images/auth-v1-mask-light.png","fqdn":"app.profitnow.io","domain":"profitnow.io","tld":"io"},"ip":{"addr":"143.198.68.206","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:34.689Z","timestamp":1786172794689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.profitnow.io","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 20 Jul 2026 23:03:13 GMT","end":"Sun, 18 Oct 2026 23:03:12 GMT"},"fingerprint":{"sha1":"29:E3:A6:2B:F5:02:79:AB:54:70:48:9E:D7:F4:BB:6E:C5:65:8A:EF","sha256":"88:FD:00:32:FC:08:F7:2A:C6:4B:D5:0D:2E:6F:5D:28:27:81:55:61:E5:C0:4B:88:38:CB:BC:D3:F7:8F:6F:98"}}},"request":{"raw":"GET /themes/current/images/auth-v1-mask-light.png HTTP/1.1\r\nHost: app.profitnow.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/index.php?m=account\r\nCookie: PHPSESSID=d2murn7a24pi7vfpserksopu8t\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 08 Aug 2026 07:06:41 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLast-Modified: Mon, 11 Mar 2024 06:33:22 GMT\r\nETag: \"309-6135cb7ddd70e\"\r\nAccept-Ranges: bytes\r\nContent-Length: 777\r\nAccess-Control-Allow-Origin: *\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: image/png\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":777,"size_decoded":1093,"mime_type":"image/png","magic":"PNG image data, 1440 x 173, 4-bit colormap, non-interlaced","md5":"a2b8c84f88b7d9735b1ad214d0efb36e","sha1":"ad5d2668c7f78d5603b12e7645c7cc28ea29b507","sha256":"15795da8d7409631c8eb5758703e1fc56c06bd30cbe024da2b51b3f7702767a8","sha512":"00b9e3e655c0f43701fbd3d80d136c613b796ee5987322295b921ff4835930b7d36933a293760020c781c643a67ef4262d4dc33dc5c86e1d4623ac868a4bf00a","ssdeep":"","tlshash":"3801656bf4f7586018ff4287900bd3c0d51191c3ae88e08ef59c18a4816704b77e0e01","first_seen":"2025-03-23T02:41:18.914315Z","last_seen":"2026-08-08T07:07:14.943858Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6536,"timings":{"blocked":6375,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-08","alert":"Sinkholed","trigger":"app.profitnow.io","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato:300,400,700,900","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://app.profitnow.io/index.php?m=account","date":"2026-08-08T07:06:35.776Z","timestamp":1786172795776,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css?family=Lato:300,400,700,900 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://app.profitnow.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 08 Aug 2026 07:06:35 GMT\r\ndate: Sat, 08 Aug 2026 07:06:35 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3120,"size_decoded":1101,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"18517f5588e7718106a9324c50e27827","sha1":"e937175b833b7dca4e6a183518bbc41a1c415c3a","sha256":"febf977cb236ff76151d402d7a830d5673bfebc8b0cb27be0a73492b0b5bebcd","sha512":"144857c19d306e8b17ca12ad41e0ff760ffd8ac5337d475754f1ce9dac14d33ab234f89212be1a20f6f5538fde6fe2316715e5bc97f9d56227391b1942af9c78","ssdeep":"","tlshash":"fa51be92096fb908db830cc212c97d32ef0f625064499935aeff14d8bca7d699372b0d","first_seen":"2025-09-17T10:10:53.658643Z","last_seen":"2026-08-11T02:36:35.358802Z","times_seen":2487,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}