{"report_id":"5fbe75fa-a7ad-48b0-9b3a-d6ec17aa9069","version":0,"status":"done","tags":[],"date":"2026-09-29T17:20:10Z","url":{"schema":"http","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"104.21.70.174","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"title":"StraitsX U.S. Dollar","dom":{"size":19563,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6271)","md5":"b3f5df8cd3012a3bb27c3cb7e4fc1797","sha1":"aea854d97b755904649d5c9fbbf32e818eb893b8","sha256":"66770f15e9e9c025c5312018c9aadcaafa44ec5af8a650f32928576664d08e19","sha512":"88108735f12653f285a51115f412b0a000db423fe317cf05eaf9a3c0dbc8ea15e18bee4073f58237cbec1f7e4c60aa3fb053d9378a6db8a9464179358a1a3ce0","ssdeep":"384:WD451YKkBzsju8pk9X+OIjlYAuN4qLeB5ZZMmS:x5xmoXp4+OI+A1qLCS","tlshash":"4592542b1c49102b2323a59969bbf74a30b79a0f894ea9007d5c43554fe7c786dbcf68","dom_hash":"domhashcb7461d7c9877407f985a30905f4f9a5","first_seen":"2026-09-29T17:20:31.786505Z","last_seen":"2026-09-29T17:20:32.02054Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"104.21.70.174","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-03T17:20:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-09-24T13:30:14.780012Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ai-bot-mining.vip","ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":19,"request_count":19,"received_data":2679767,"sent_data":9144,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":4,"received_data":96332,"sent_data":2334,"comment":"","tags":null,"fingerprints":null},{"fqdn":"api.ai-bot-mining.vip","ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":8,"request_count":8,"received_data":125146,"sent_data":4517,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-29T22:01:14.869808Z","times_seen":1398,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"536086a9ce8d05353cfeb120ac4fd1ab","sha1":"bb59694758af84327450d846adfa79d56f85b46b","sha256":"ed3256e3a29ebeaf1d215d48da80d15c11399660a044d566bbd23ba17316d5e8","sha512":"693090dc809d926c2a08689f4716708c37bf92263b51028dac66157981e9dd5d00a5655a3d81d2828ae62e39703c64f027d324530b688ee3f0941a912572a5af","ssdeep":"96:Xfkdoq1aBIBOjsXgInhubwM0eb9X+T60YTHC:Xfkdoq1aBIBksXZhu8M0k9X+T60YDC","tlshash":"84b1991b69e56468a703b0ba8c3fa406b521042b099cbd407e0cd7769f8953daab4edd","size":5542,"data":"","first_seen":"2026-06-07T18:48:55.868739Z","last_seen":"2026-09-29T17:20:32.053229Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcd305a37ee7f1258e59bd9679e8f370","sha1":"0342d4c6b41532d19751350afe30d65452668b17","sha256":"6820ba98e27b0300f981fa8a2f967cc10aba1ac94541c6ba51f2edf14df6f0f4","sha512":"d53d14de30f0ab439259f4890fe810d6cbfecfa1907e843eba85feeaa4896cfb3cff35928029be7cdb72388b7d3faa41afa8e38a7e3eac966bd1aee84a0df04f","ssdeep":"","tlshash":"b7f09e1b1886b07e13d660b6593bad5b322a11472c4119077d4c80142fe083d7ef5fde","size":611,"data":"","first_seen":"2026-06-07T18:48:55.869685Z","last_seen":"2026-09-29T17:20:32.055473Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"44895ff8dbfa9c298e0fe5f18348adcf","sha1":"4a9f12376e24c6a6fd23447fda6df16ab061f543","sha256":"1c123b61afbf0ff6f416d37cc3452af537022dc2bd4d6e55be002d0b84ccbe4d","sha512":"4408373a5389275620696a2921d39950726013ffb0ee5754f57b35a90d19ab18676d5b9e98d93204d4ccca6e62bc8d7dea3b4017686a8398cf93ec7221d0a0af","ssdeep":"","tlshash":"f231682918ea1118b2177166e17fe70d2725501b2dd4fc097a0cd2240f9997ee6b8cae","size":1579,"data":"","first_seen":"2026-06-07T18:48:55.870995Z","last_seen":"2026-09-29T17:20:32.056109Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9441918d9965dd6d393d511f2ea93f64","sha1":"b44adec9c36e9245a834d59262dcaa56dbcc07bc","sha256":"f3a0096219ff836f7921167d0b0d60ce3f6accd0fc8f0955b796c9464cfd4a66","sha512":"ea4bd41501468425ae706ac14c8542cfd42b5911db31db9f91e204978c1cfc13da3d1389643ad216152111161d4ba49a7b6d95a8f91f7e19b649cbf9f61fbd67","ssdeep":"","tlshash":"6901c8e59986493546db31fa2a9e301171315003b909beb0346f15446fdd73dd3f6bd8","size":677,"data":"","first_seen":"2026-06-07T18:48:55.872816Z","last_seen":"2026-09-29T17:20:32.056809Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b13d23f33bb9a86169aee1503a584f3b","sha1":"0a0236a3e192f94b560be63d67a5a86bd47455ba","sha256":"cd99dcab94b2164a86c1eeb74fdf3940765c26dce7481214fdb422026f9ba730","sha512":"e948abbce6641671806aef7c6bc91132c4ce8518ea770cdc885fbc3ffec2cfa36d894f963d2e8e6911733f23f7dc78895b69a5149ccd21d43c35ecea7fca6813","ssdeep":"","tlshash":"05f0f10b19d008319707b17a2a3fec0a1e42301f29647671be0c91109fce83f4674d5c","size":494,"data":"","first_seen":"2026-06-07T18:48:55.871885Z","last_seen":"2026-09-29T17:20:32.057481Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c5baab68b0b6e9a78ae2ac82f62968b","sha1":"465c605fed853350d148d71b225f91b89be9b792","sha256":"01c6411866d9f95f5d4b5ed3825fd79996a6a012983c579fed227263a945e12c","sha512":"e08b83fc5ae06d0d2231ed13ca3bd54ab54f699d42c9ed91f4fa449260985232be333df87aa769d393750cef74e84a25ea78e3c2932f1ff5989957a8473ec7ae","ssdeep":"","tlshash":"7cf08b531cd9549b6f2710bd6b3faa1232a51113544ad064fc0e9720af64d7c1724adc","size":644,"data":"","first_seen":"2026-06-07T18:48:55.87367Z","last_seen":"2026-09-29T17:20:32.058163Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/login-BwSQPJNn.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"71fb96ac5c17056aed846e6baa7f05c8","sha1":"811ed7d15f8c70951293227c74c95154b28f6bb7","sha256":"cad80a6d8edb3eb70882f83988c2010ccf2eacbcf9bcd936e3f9a834fcc41ef3","sha512":"f05b7183220ab082b01a7901e60571da8ef82976b90b86ae8da954ff62e3649edaa5b38777621738609fc3a6c5cf15adb4dff3d88173a81fb867f57684e2bc16","ssdeep":"1536:Ci9H9PifoYv80G+Qq4hhK2tOTfREjwF4TofaW8:CCViAS8hssIIC56UKoiv","tlshash":"81635309e4b6cfbae4b7621d3d4b5410f05e2befd1414f2296fc09116ea6cd0ae627b4","size":67602,"data":"","first_seen":"2025-12-21T16:06:54.064282Z","last_seen":"2026-09-29T17:20:32.040602Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f325222a758aeaf467ffd9902267b129","sha1":"ebb95b3866ab29d0ee9bb0755384b81ab12e000e","sha256":"cb11ef6823d7949b57e01ab9d6bb5c829be6b14322aa0dd5897a6d2d209d0672","sha512":"aa743a98e2ffb65897bee06760376bb5dbb7c2f10613ca12c8cc462ae79e1d3351855f14b3ea70088d449656bb4167061ab22d99f0eb628b9b63dc2a94131292","ssdeep":"","tlshash":"46c08cc4a0d26d001602641020af34e89024802674481b028c94d8482e220b09233ee8","size":138,"data":"","first_seen":"2023-04-14T14:41:51Z","last_seen":"2026-09-30T01:13:01.913829Z","times_seen":2903,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/index-D5f5Hqbm.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b67d25d6de9145343f6033f4325bb7af","sha1":"e3d530515e9bf767c5e66b91e7c2baed64c4cbbb","sha256":"1fdb633fb2ada6de11cb1d92bbdce28c230918416e3a2bdeb98bfa6f37bf5a3c","sha512":"0ebeb844533930f0c01ee790af8cfaa262c9e850f07c389de01914fb8f2703cefd9e94a7ce56a651f1ff512958c910e0373d2e3f1433acd18792e478d31f67cf","ssdeep":"12288:xPbvNHlR30T98cw1NMv+3Lt7NhnauTMgzPpVo2RTC1:BbvNH4aV1Ne+3V3nazgz9TC1","tlshash":"df55a1281a2bf344e459c0dbf9373c84c59de18aa00764d15fb54bb31ba2797eaacd13","size":1318846,"data":"","first_seen":"2025-12-21T16:06:54.086123Z","last_seen":"2026-09-29T17:20:32.066442Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-D_UM6vtB.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec97c4c9a1bfe45cceb134b380095746","sha1":"cd57900291a80be21bf0fccb5eb7016a4b4ef477","sha256":"56b8cd0b70c41b7e63bcf35ed1a690cb871402913dedfa60285796429c58485a","sha512":"bf5537181df93e3f06a99514be792f384f229be5b30b36be78df8e8d0694d7dcae3610b6a9c73ba0cecc652e8f28656cca11dc796666feebcf669e3de1f31f8c","ssdeep":"","tlshash":"4ff0e14f5d6e41fa91a344581a4b908021094e5ec634ab80f2f827356681c5d741db38","size":585,"data":"","first_seen":"2025-12-21T16:06:54.074562Z","last_seen":"2026-09-29T17:20:32.022475Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/default-CkDzSDB3.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9117fe7b64e3e4329f84304e6d54ac79","sha1":"f4e256669388c925113d48be6670d56dd5672ad9","sha256":"8c9b138eae30fb343d0491487f6f3716e0b3cbce607f8b4c513037c4f25d2d0d","sha512":"b9e81199a027beb4bd93d878459dd71111242bd5d421737753d74ca6e44e7eb23bc422e433b6820946090841fd7f6270dc43d81735386488904a49aa2d4bfa71","ssdeep":"768:u5nOVanOhfyOZ1ykQa5OGnOALaQfyOejO4VOsOJO2af2DidotqmLme3+xG3GJ+k/:oJh/cH+xdPQfk+gG4","tlshash":"4b1395815807933fc5729a4e4c466482328c5fdbd00c6fb6f2b4d52b86cac797a3af59","size":42410,"data":"","first_seen":"2025-12-21T16:06:54.080368Z","last_seen":"2026-09-29T17:20:32.048109Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-DB3SOHW2.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c5d505205ecf84241bbb10a7af283fa","sha1":"5bf51ef637b22f56b86c23457894a12adf0446fa","sha256":"007006e169aa95182e16363e83fba07daa151aeaaf595ced394bb0ca44fd1945","sha512":"abf16bf13315501da9e92957876582425a66a83c45279b022cf69c70abc7189be98b6236ee77810d8848985d97c1f7b335ca428a41db978fd57faaa37267af32","ssdeep":"","tlshash":"1d11888daca9cfb604f204e82e971069e094bb499614c926d05e4431325fcf8f68c32c","size":948,"data":"","first_seen":"2025-12-21T16:06:54.059483Z","last_seen":"2026-09-29T17:20:32.027741Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-VLODmcRf.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d4d8cbaaa6a90d82f07467dfc37259","sha1":"4ad6b9e5a960d416f206ec2eae5f617eb1c8e887","sha256":"97d9d0b7a9906119c88b28db58d27773ae289bdaacd796d1a7ba29b54a4aaaca","sha512":"a53c52cf5e3aea8181084e6d2ea8155ebeadba44775a8b419905c1a55ee10ba4f6b04fb222a773592dedaffea49b3e3c308bc1b83e3e2a9302ab635d2b80e391","ssdeep":"","tlshash":"a9f0c01c6c128af9823700453e4610a144580f7e659cba82e9eb18119fe20bc372b71c","size":531,"data":"","first_seen":"2025-12-21T16:06:54.07364Z","last_seen":"2026-09-29T17:20:32.048958Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-C_K1Z4sO.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cc1a3b272abdb88a0dbd16b4ed46e62","sha1":"9d62e67f492bfd6c04bedb2554dabb17a7dc218a","sha256":"244c743559473a50927a64a9e376eaacecedcbe645d0ccd11cbb9a9bc4703e8d","sha512":"1c43c1ab88973626612edb962518ec6ef096315061fb20b465654d32ba35597b3430deeb63ed89173dd31cf305329bfee4063bc854a1c88ae5955b210e3580b8","ssdeep":"","tlshash":"9f515104ec159fb3d6b39a4da5db58a0a05c2b9f85084f5110fa551c2f5ecf8233af28","size":2490,"data":"","first_seen":"2025-12-21T16:06:54.047444Z","last_seen":"2026-09-29T17:20:32.043042Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1faebd0b8ec83d9258948f07393e454f","sha1":"44d5ca89f13c7829bb8153a66ba0d76047eeb290","sha256":"9b72256f8545b5a7756926fc56e1d8634a74b0efdf96ee8291b743ac3434846f","sha512":"14dede173aa4e1c8244528fef9c867f813d3f391f66f1a356c2887fed20294f9df7265d0e8d5bab67bf8e1e1a3ca2238d1da9a6b806c008154a19ef701877830","ssdeep":"","tlshash":"dec08cc4a0c22d001602a41018af24e490248427704c1b428c94d8483e220b08233ee8","size":137,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-29T17:20:32.068575Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/index-BlGxPNI8.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"280b822aa2f203042c14c18f392dd74b","sha1":"6756363e275fe87243f5d30cb764771d73bbd1a6","sha256":"52238d4f30011e00d72b8479c2878366c501facc4e535aea0ec7f58b062397f3","sha512":"134d883ef955d89c3331d890dbb9ff5023297062a5a1d054489d23d4f5bf483f7ea72a14a9a7863ceeb047a1073430c85ef08bc603f3309a1060ba0edffba722","ssdeep":"","tlshash":"db6194acbed49534c6fb499854270912ba0f0b19522488f2e4ae9d4c2f3e458f13ff2c","size":3203,"data":"","first_seen":"2025-12-21T16:06:54.057622Z","last_seen":"2026-09-29T17:20:32.052382Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-29T17:20:32.06104Z","times_seen":4682,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/PhoneSelect-AeH-jqYk.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1386a02b5f8854ee01d29474f97371f3","sha1":"fd1d176533dd0a56f84517d08b28b14301af2511","sha256":"72d604d29f40fbb3f5abcbc662156b899d0e0bce67c34c87ba419537b2289097","sha512":"030b5eac5a9a5a229c15b8e676c46706144e1db8d5d57f534394abae3e421cc768f8c0eca667812bc5b09dcc4712133421d1ae899899dda2ac51f4f31f6988de","ssdeep":"192:Evxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFht:axj5a28wa8H5tnzxaF","tlshash":"c262bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf536259a00f7b5cb65c","size":15511,"data":"","first_seen":"2025-12-21T16:06:54.068067Z","last_seen":"2026-09-29T17:20:32.05148Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"94d71ca3d432c5a150ba0fec148bec8a","sha1":"f149c8d29e80003d26ed2e460cf5890f8bf67978","sha256":"5c8151446c3fb9fb384c25e941b64d83149cba01d5a7905fd2844d6b4679114d","sha512":"9e345046d828729d97f78fe91cdc987f97e0088d6de76d2171141348aec8b658006105e5172bfb5845491d5782b26c57a8c4245f30fab81daf9bd33adbc71ce3","ssdeep":"","tlshash":"24c08cc4a0c62d001602681010af34e49024402670481b428c94ec882e230b08233eac","size":139,"data":"","first_seen":"2023-09-13T19:31:22Z","last_seen":"2026-09-30T01:13:01.895331Z","times_seen":1100,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7144169280a69b1c180a70c7fb7c5047","sha1":"286b077ac1ddc843cb5a34c0310fec82d7628167","sha256":"0860f78a352e55f64ab8fa11ce266c6b60f40f4ee95040204fc70884babac6e9","sha512":"2cca64caa2a5ff4fdc390e7127fd89645a0e80135214f066e068f14d9726fdc0965fa5a9e79d7222283d8e0e12c90fd504367f81ae5fb580e3c1bc4c84a12f68","ssdeep":"","tlshash":"edc02bc5b0c33d101602641010bf38e490344027704c1b43ccd4dc583e230f08233edc","size":135,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-09-29T17:20:32.061839Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d3c179475c069daa765019fcdf095c98","sha1":"9d5e971b3bbdd55c33d85567413ca90cd41f8d30","sha256":"f7d35b51b9ae4b40029744115d377de034d946aa68a64bb981ccad4724abba5a","sha512":"94bfde7cf94f2516928b3235ed28d3a40c3b65d0cb4cf98d3dc1557c432bc391f99a582727f2994df0bee740c6baa4b0be7ef9dd4c236c9c15e9d13e6d98fa39","ssdeep":"","tlshash":"14c08cc4a0c72e101e02641514af28e4a0244027704c1b068d95dc892e220b0a237e98","size":143,"data":"","first_seen":"2024-10-12T13:51:31.5737Z","last_seen":"2026-09-29T17:20:32.069084Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"6900701ff959494d30437499abeb8885","sha1":"7cb4c820fbf30caa6b50d6c2dc4aa7c0c4b644d8","sha256":"3be52a71ee1e4d668cceef779a9942298cef4d68e03183d10681c4aa945c83f5","sha512":"731bc35b44d92adfda91474163cba7cbfe8ebb8faeb76364becb6a0f87c8d62c68a560257759546c0c38da3d0ea220cbee60eed126f77194441f92786231135b","ssdeep":"","tlshash":"b5c08cc4a0c22d101642645420af26e4a028802a70485b128c94d8482e620b48233ea8","size":138,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-09-30T02:13:42.917387Z","times_seen":9193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"95131263394cf919fdf0da6e43be8754","sha1":"e6b4ac4b5cc943721f3b559530efcaebd2269f9b","sha256":"de36442dc7a7225061c959e59e2949d1108164e2d8d036c838c0944cee449b74","sha512":"011b5b7bf367640b1141907276e28e80101f354561fa911e2ccb5e8657937fff855de5a87ca063c60994f5331a85bb8154a8bbdc7e5c7c2913627d9f4210df9e","ssdeep":"","tlshash":"9ec08cc8e0c73d106602641460af39e4a034802674485b13cc94d8492ea20f09237e9c","size":144,"data":"","first_seen":"2023-12-19T15:12:13Z","last_seen":"2026-09-29T17:20:32.069722Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"115e29b50b9087e3dcba6df87cbc7431","sha1":"478ab01b59274669d48732c700b3c868a34b7a78","sha256":"01e537892b16da64858fafaf493cdd3e29f01e4a3bd248bc91f42433c556f1e6","sha512":"5564200a26d435bbaa9b82dc0c7d3c17eacb022d055c55b232658412459b71a22d1c59254b79ab2ba497b98842d360184b8465cd16b1a436c8f10f0adcca8e06","ssdeep":"","tlshash":"e1c08cc8a0c66d001a02685124bf26e8a024842b70481b028cd4d8482e220f09233e98","size":145,"data":"","first_seen":"2023-08-30T16:45:15Z","last_seen":"2026-09-29T17:20:32.060021Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/LangLabel.vue_vue_type_script_setup_true_lang-BGJRNacP.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2e6b5c3d70214eb8503049475ca75d8","sha1":"df4302ed03231cdacedc5140dedf73d152fef46a","sha256":"7eca91f7fcb1735a90582dad155356b862303319fa4542d9413b841a77da5c19","sha512":"1d40c4dd463511fe97ee8662e8cfea4c4c55642d903495de0157bdec736487e2a4d6b4d5900f2ddb3ff01a75bae3f14fc5378ead26eb2554f7cb6e32d4b56f07","ssdeep":"","tlshash":"caf0e16f1c218630c1b609183997040050491f6b6224e941e29e5e134ee246db3fe724","size":555,"data":"","first_seen":"2025-12-21T16:06:54.066443Z","last_seen":"2026-09-29T17:20:32.031834Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"76811db4a3d5546de19bc46f245652b4","sha1":"065ddba5bf95b5d1f278bb4a908a53fc4f0a41b2","sha256":"237e40d42319f90c108ee79382b7200ea26929d92fe7799cf0bd33efc343ebfa","sha512":"f7d218cf377027fbcbadd061e0a97768fe6955ff69385e531406117b74cd36e368441724eabbcca6f4424131d73e6f50baf10591dde8509fefd6f7cfa727dcf6","ssdeep":"","tlshash":"efc08cc8a0c22d002602a61020af39e4b038802b70485b128da4de483e630f58233e9c","size":147,"data":"","first_seen":"2023-10-29T04:01:47Z","last_seen":"2026-09-29T17:20:32.0678Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2d92dc8de7ba0955978f33e6e55d3ba7","sha1":"abdc897a1782ec89be6dc383c01c3e036cf1d705","sha256":"859c9ce33368158aac6132da5411ae98f1f4153e32d6687743fdd31bc3842ab6","sha512":"91818a78face301f4f680652dbcc09009dc5bec1e989b49da512e2e84f601bd6a30090e5226dded37fafd04ddf31faf686f97985fabeddce753509d860191467","ssdeep":"","tlshash":"1fc08cc4b0d22d0026026410a0bf34e49024802670481b038ca4d84c2e621b08233e98","size":140,"data":"","first_seen":"2024-08-10T08:38:06Z","last_seen":"2026-09-29T17:20:32.063438Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/#/login","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"02408d922d2e1998a79d8d6f850a8fa5","sha1":"05881ad7e2edf93b804c00b4998f794b9be830e2","sha256":"2864865ce925856a2bf5886ef5970aa3f3c2c592f2f6963f42fc77308efe5b95","sha512":"d79c14118cc3f703cf56276c6432e4c886ed04c65964fa528d842d1f2efb256ea5cb7f313b5dcf870032fddad8b695ac049c3d0de86f8ceeb0a5932b7586cc2a","ssdeep":"","tlshash":"c9c08cc4a0c26d105602645010af24e490244027b0481b028cd4d8482e220b08233e98","size":137,"data":"","first_seen":"2023-04-18T06:39:26Z","last_seen":"2026-09-30T02:13:24.790314Z","times_seen":1091,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj20 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js","line_number":135,"column_number":13},{"level":"log","text":"isTgfalse","filename":"https://ai-bot-mining.vip/assets/index-D5f5Hqbm.js","line_number":69,"column_number":858719},{"level":"log","text":"isTgfalse","filename":"https://ai-bot-mining.vip/assets/index-D5f5Hqbm.js","line_number":69,"column_number":858719}]},"http":[{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:33.921Z","timestamp":1790702373921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Tue, 29 Sep 2026 17:19:33 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Sat, 03 Oct 2026 17:19:33 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-29T22:01:14.869808Z","times_seen":1398,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":37,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseAlarmLogoBtn-B1F5Xzzt.css","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.363Z","timestamp":1790702375363,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn-B1F5Xzzt.css HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t8sZa6t8JKVQ6OQ23H802hQcN%2Bax%2B%2FlldRq1Hl6IE6bwgeUrL9vdBQjB%2BZ%2BXBSsYxRfLx%2F6lCU3HXBIHLibkGJkeHokp2MyXFxfP3h50xrfjYS2mMp1VT1mshiNJEAoaIJKf2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b843b98f7d7569052182eead07cb3746\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7560bd256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374,"size_decoded":1028,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (373)","md5":"a0b95e2ac4d02f765d36b86d50825b05","sha1":"a6c56b78ff5416000ca81c9c385f14c4ad745e90","sha256":"018fe58c9101deb6798cb3463760d1abaf1be712f511ec85e3be65cd5de35d13","sha512":"3a38ceda1e85ec5eab12bfda941daef96627543de051677653a7d45d707214789d8cff522362480ff722358f3b78f51f5bdd95642d1442c22f8f30c2cd116ed2","ssdeep":"","tlshash":"fae0924c0d94111b7aef4e2754da4a7500288f537e330d5ea742325622c6ae4317634a","first_seen":"2025-06-18T05:12:49.455026Z","last_seen":"2026-09-29T17:20:32.021624Z","times_seen":108,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/LangLabel.vue_vue_type_script_setup_true_lang-BGJRNacP.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.364Z","timestamp":1790702375364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/LangLabel.vue_vue_type_script_setup_true_lang-BGJRNacP.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBMhfvS0ea97FnClqzAyir6h8Nz8RZUtA1dwfna78nXrHfEzvSH2AnA9PesG9nYwHoWjyDN9TdS8%2FR1Sf%2F9hkHPzoq52TsyECExzzc%2Bfnc%2FpErMgcipgh2T4BPWpx2iM%2FoIEYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"eab5bea5bfc23d061b6a890c1139e44c\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7560bd356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":555,"size_decoded":1217,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (554)","md5":"f2e6b5c3d70214eb8503049475ca75d8","sha1":"df4302ed03231cdacedc5140dedf73d152fef46a","sha256":"7eca91f7fcb1735a90582dad155356b862303319fa4542d9413b841a77da5c19","sha512":"1d40c4dd463511fe97ee8662e8cfea4c4c55642d903495de0157bdec736487e2a4d6b4d5900f2ddb3ff01a75bae3f14fc5378ead26eb2554f7cb6e32d4b56f07","ssdeep":"","tlshash":"caf0e16f1c218630c1b609183997040050491f6b6224e941e29e5e134ee246db3fe724","first_seen":"2025-12-21T16:06:54.066443Z","last_seen":"2026-09-29T17:20:32.031834Z","times_seen":8,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/index-c7An_eE9.css","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.370Z","timestamp":1790702375370,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/index-c7An_eE9.css HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D7DYJPfysmOgCAMdwVq%2FPvICxUUQ1DUfMQtO23rteR10L8oH9nF%2Ff9WU%2BH8o5C3%2BavIxdYwswG8NA5Quaxt7DUhyy%2FCrhwHYYT5xkvX6NRhY4sYF0IoD3iMoMUjcr1NlNi0OAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1701a6ccf3990df83fa5844f5f1083ac\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7561bd856b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2327,"size_decoded":1434,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2326)","md5":"7bd4a66586ac0efcaee53f78939a74ba","sha1":"506817c8069af3f01be6682795c718270bdfafa5","sha256":"8f0b1520474e30bcdf8479f160f6e797bfcda0b6391f1227b1bb8d3fa131e74c","sha512":"32e6864dae9dac89056c4ba748f1c9419c58c48447653c67631b2cefd408d585c5e410d7c75734db1122aa6164d5a47b1e864d09915f07449b366f2687c4e2c4","ssdeep":"","tlshash":"ce41f567daa055faaf33a1991f5585cab13ce9208e00df72b180d11c8dcf6f626136ec","first_seen":"2025-05-07T21:58:18.032036Z","last_seen":"2026-09-29T17:20:32.026635Z","times_seen":58,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.563Z","timestamp":1790702375563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ai-bot-mining.vip/\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23664\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:52:54 GMT\r\nexpires: Tue, 28 Sep 2027 15:52:54 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91601\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23664,"size_decoded":24476,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23664, version 1.0","md5":"da03732a27e16543f09d6a6a62b0cdd4","sha1":"68f645c6b6ff12e25c54b13d4ed119e631dcbb26","sha256":"8909904ab6c872eb994093482a88a28eca2cd95912d7b6fecd72103b0dc07edc","sha512":"8f8a1b22d7fedc8a5c0b75a237932fa00b71d25b1c13d1ec6f9c31fbeceba5d7e1a728a06fc3c2abd803337617394f91d2cc08e9798417b73e3587da3b9d882e","ssdeep":"384:LDIByvvcpxzNfjZ7amidC7gcUH6rpfmzO59sT+m+WFg5ivhjpaBNSS6X:LMBYabZ7aXvaVfSCWSogoSSSi","tlshash":"fdb2e0e97b5be3e2e077c67d41bbdf94e64c2860435e4b830e24be14e2d24fe6484416","first_seen":"2025-05-30T09:01:41.826892Z","last_seen":"2026-09-30T03:45:18.48784Z","times_seen":19792,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/PhoneSelect-AeH-jqYk.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.371Z","timestamp":1790702375371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/PhoneSelect-AeH-jqYk.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFoxJZMZvfb3iTjgqtT%2Bu%2FoPlQq8Jz7m8FV4GdY11fEDDHm20eoPQU8NGwmqLaajElAuwd%2Fa9eJMFPsXzN8gub%2BXZ9bSm%2BWh845bK2%2FylaHHLAvcnMlaxrUiJmzegtDpoBF%2Ffg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d0a78ffc4f8dbf3b063c081ec0f7e07f\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7561bd956b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15571,"size_decoded":5183,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (14209)","md5":"1386a02b5f8854ee01d29474f97371f3","sha1":"fd1d176533dd0a56f84517d08b28b14301af2511","sha256":"72d604d29f40fbb3f5abcbc662156b899d0e0bce67c34c87ba419537b2289097","sha512":"030b5eac5a9a5a229c15b8e676c46706144e1db8d5d57f534394abae3e421cc768f8c0eca667812bc5b09dcc4712133421d1ae899899dda2ac51f4f31f6988de","ssdeep":"192:Evxs/hrvvvkR1aCuhPU8mZsdisBTrP2BrhuGQ7w/yYf8/TkqqjNeGQTuOalAtFht:axj5a28wa8H5tnzxaF","tlshash":"c262bd6b00b017a6fbf19321f101f8a663c91e862857a5f38dbf536259a00f7b5cb65c","first_seen":"2025-12-21T16:06:54.068067Z","last_seen":"2026-09-29T17:20:32.05148Z","times_seen":8,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/index-D5f5Hqbm.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:33.923Z","timestamp":1790702373923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/index-D5f5Hqbm.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enuf1sOVV9sJzwtcqvDd6KqCGy54NWfPAheswSGl6Y%2BEf8n4uoWk0eq3mMD9yjC6MCevM7IqnkJ0G6sermAk4Ttqk4MrMgS%2Bs5FC3Eye8Qt2tUMAMXaVFsQc9h828OL3ChR7bA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"0872952ee41e0ba72af06641bc739b93\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:34 GMT\r\ncf-ray: a42ca74d0a8256b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":1318846,"size_decoded":217952,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16718)","md5":"4bc622fc1a702626cff06dafd53d186b","sha1":"d0c728e64a5f55b2265383a069865963b603e3f5","sha256":"eead69b05d97030207acbec2acce2a4833f861aabad783c9d4e2a1ca6ac8f855","sha512":"75a8adeb167a9661cc7ab01f0acafcd77957afde0a17f4ed1b80b470116cc33bb154695d808eeb46e566ed222d6171a62fb6a9c8ca141e6da97f013fa93628b0","ssdeep":"12288:xPbvNHlR30T98cw1NMv+3Lt7NhnauTMgzPpVo2Q:BbvNH4aV1Ne+3V3nazgzM","tlshash":"d02539282a5bf344e419c0dbfa373c84c59de18aa00b64d15f7547b31ba2797eaacd13","first_seen":"2025-12-21T16:06:54.054382Z","last_seen":"2026-09-29T17:20:32.030057Z","times_seen":8,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/api/public/init?d=1790702374204","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:34.214Z","timestamp":1790702374214,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"GET /api/public/init?d=1790702374204 HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nst-ctime: 1790702374204\r\nst-ttgn: e0bd8842dee1f9d846cf1950e5423aef\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:34 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ai-bot-mining.vip\r\naccess-control-allow-methods: *\r\naccess-control-allow-headers: *\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VqsD4DRAYERCBQ%2BXEQMTg6Rp8Z3LpJzfAdGLmKWDJXy4ajxyvS0Xx3R8bFaNcCGLY4T67H5lLogLfoCMtYbC2LyF3dTO2L6tFMk92GRbDmga7Ct80F5tIZTYppG9YS1QA8C%2BUURUdB8%3D\"}]}\r\ncontent-encoding: zstd\r\npriority: u=3,i=?0\r\ncf-ray: a42ca751befe56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5957,"size_decoded":2679,"mime_type":"application/json","magic":"JSON text data","md5":"a442d0f6ca137776aba8aa7e48d0a171","sha1":"4f8f07976da31a65473baa2140567f6aa6154fe0","sha256":"2fd37f402a96e409cb29e9ae053c9cd28cbdb4d17356ee7fb6f2d1d36ea7c6ee","sha512":"a797bb14889577fe24c42510513936ca47ac9fcc2d323326ab6d80b1ffe27b5d11ebd78911c3cbf351cd15513af8a498617f6ae6f90569f5cb5e76939a4c5f44","ssdeep":"96:IlS2HBgV3ycyhycAbymnpYeMbfkczygcTr0Go7Dt7ewe085jNYAkIaWf0r3SEEnq:IlS2HBgV3ycyhypbykCeysczjBPtih0l","tlshash":"c8c12e153057dd7feae6bdd826cb7115898c788aeccceb4a9b2cdea605dd091202f107","first_seen":"2026-09-29T17:20:31.800261Z","last_seen":"2026-09-29T17:20:32.049752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/favicon.ico","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:34.318Z","timestamp":1790702374318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BklIcRgHiFpz1Oz1VEgTlOENt1XMxZgPB35NatUcHJgUjvzrVrjbp7Z6UUrrf%2FNymf80gR2hJ7IjpYrUcI9YvqJx8c%2BRNuH5p2rp08FdXNixBQoaRep5mrO7miXvPRgi6ZT%2BPw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: EXPIRED\r\ndate: Tue, 29 Sep 2026 17:19:34 GMT\r\nlast-modified: Tue, 29 Sep 2026 17:19:34 GMT\r\ncf-ray: a42ca74f7ae556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":3633,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"eea5903b024411d254134ac34bbc0536","sha1":"7b8f0cf1f7a0fc9173696f636470facdb3fb8cf3","sha256":"ce2187b6312f0f4f1ba2b9ef411ce23e851ed42991f6678e92b65cfd2862a855","sha512":"d5528cd73a0af8fa028bd50a4293b8e9d214fa3f2c993408e0d54ff9a8bc170c2a249271dad15fbd20e540bfe1d849e14aa92eb53982e1d837e64e0e43afc655","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6cO:xYKkBzsju8pk9X+OIjlYAuN4qLlM","tlshash":"61221f5b2ce66028631370ba9d7ff50a7621001b1998ec007e0cd7345f99a7dabb5eed","first_seen":"2025-12-21T16:06:54.040519Z","last_seen":"2026-09-29T17:20:32.028902Z","times_seen":8,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/upload/img/68342a002af5.webp","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.321Z","timestamp":1790702375321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"GET /upload/img/68342a002af5.webp HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 May 2025 08:44:49 GMT\r\netag: \"68342a01-240a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BY0akzYYHEdvBTWwyIHZ5pPD2CwLaNeU1DviQCPN8wUM3Djm4fhsENB514afSTJC4DU6orHZ1zOOFbUHaVN0nBsBoOL7Q78LufrhRkic7JD9fInD%2B4Crbfc6Hxqx55d4Z%2BTT3%2BZGfpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a42ca755cf8856c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9226,"size_decoded":9980,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3999cf099f157d99e1977d93d3bb5c1e","sha1":"ab960be910747bf69217596a07becbd3c41c71ec","sha256":"b059e58803c28c3746ded06eee8c81fd7abbe4c60f21bf35855afdccc7c7b832","sha512":"d371686f5dddefe39cbb9991c41b7ff151b9fcdd6bf66392eeb3b673fbd0b3796a46a26d7d04ac00b0570bca8bb1c83e269990f106f6fa1bd96f74321b334db4","ssdeep":"192:t+BILBAJKmQyWb/1vfdClarPkB7XZpDIxNeVOAtYEHDer54XFBJ:tV1AMmQPmik/VIxzWYEHDe+XZ","tlshash":"f112cf1a1eb7e0539535d634e35b5a12eead9ae6308310c7d1425fa848f86204b9517c","first_seen":"2025-12-21T16:06:54.045042Z","last_seen":"2026-09-29T17:20:32.047044Z","times_seen":7,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/upload/img/68342a002af5.webp","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.322Z","timestamp":1790702375322,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"GET /upload/img/68342a002af5.webp HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 May 2025 08:44:49 GMT\r\netag: \"68342a01-240a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qh6BUPsGf2kuF5naqCC5aJ%2BxpdGUvr1zM5SrG8JLyiDdlkUGE%2F1N6t39xgPAoNWgt2wq%2BCVSMJX4KKtUQH%2BM4P0k%2B4W6sDB%2F%2BURpsoKgdY34frq9a%2FqXrlaqqkdV9WfCJkTSaeKVT2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a42ca755cf8756c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9226,"size_decoded":9981,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3999cf099f157d99e1977d93d3bb5c1e","sha1":"ab960be910747bf69217596a07becbd3c41c71ec","sha256":"b059e58803c28c3746ded06eee8c81fd7abbe4c60f21bf35855afdccc7c7b832","sha512":"d371686f5dddefe39cbb9991c41b7ff151b9fcdd6bf66392eeb3b673fbd0b3796a46a26d7d04ac00b0570bca8bb1c83e269990f106f6fa1bd96f74321b334db4","ssdeep":"192:t+BILBAJKmQyWb/1vfdClarPkB7XZpDIxNeVOAtYEHDer54XFBJ:tV1AMmQPmik/VIxzWYEHDe+XZ","tlshash":"f112cf1a1eb7e0539535d634e35b5a12eead9ae6308310c7d1425fa848f86204b9517c","first_seen":"2025-12-21T16:06:54.045042Z","last_seen":"2026-09-29T17:20:32.047044Z","times_seen":7,"resource_available":false,"data":null}},"time_used":539,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":410,"receive":129,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/api/public/init?d=1790702374204","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:34.223Z","timestamp":1790702374223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"OPTIONS /api/public/init?d=1790702374204 HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-ttgn\r\nReferer: https://ai-bot-mining.vip/\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:34 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4OkD20u%2BbtrWeBjbetW%2FmxdmoX14IPAWV%2FjV7uMof6vz4XL0Ii6deG7C7bU9%2FV0zBBos4geK3RT6Bid0y5WJykjDnm5Ix3y%2FZDfe%2Fb10%2FpIFnk3Me3X4V8gUcafCBQU1LWOHuBjli0U%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ai-bot-mining.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42ca74eff8dc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":805,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":0,"connect":15,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseLogo.vue_vue_type_script_setup_true_lang-D_UM6vtB.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.365Z","timestamp":1790702375365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/BaseLogo.vue_vue_type_script_setup_true_lang-D_UM6vtB.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wt1syF6a8CEgRkGCplxfSLi13PeHpU1XSj%2BJqnM8tIl79LYzFsNe%2BNTMQaMqK7dDjqy0y%2BRepyeOvbMkHnjZM9QUShfE4wXUjMB%2FXyGJBkYDzexIZuJTFCaiOa%2BVT%2Fxlfld7pg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"a581ae2151c620d721932eff4dcf38c0\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7560bd456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":585,"size_decoded":1231,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (584)","md5":"ec97c4c9a1bfe45cceb134b380095746","sha1":"cd57900291a80be21bf0fccb5eb7016a4b4ef477","sha256":"56b8cd0b70c41b7e63bcf35ed1a690cb871402913dedfa60285796429c58485a","sha512":"bf5537181df93e3f06a99514be792f384f229be5b30b36be78df8e8d0694d7dcae3610b6a9c73ba0cecc652e8f28656cca11dc796666feebcf669e3de1f31f8c","ssdeep":"","tlshash":"4ff0e14f5d6e41fa91a344581a4b908021094e5ec634ab80f2f827356681c5d741db38","first_seen":"2025-12-21T16:06:54.074562Z","last_seen":"2026-09-29T17:20:32.022475Z","times_seen":8,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseInput-Bza8nYTg.css","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.374Z","timestamp":1790702375374,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/BaseInput-Bza8nYTg.css HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sJ1MpOBQgbH7OPJT97MKTii3oI3iuRKLYbpCRg1ezROncMdBuY9p3mXqTEQ5Kbhy5svWK%2FM84EKtoyzovPQ%2F2att7fQ0XuKFDwzLTn1UE7oFRAn9LNijE9oWu3oWvAPClSycg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"1f072beeaf6c83e94e575a93d4390f27\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7561bdc56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1716,"size_decoded":1315,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1715)","md5":"2dec063ddcc835dcb02abeee35f28a19","sha1":"4de369e362b979bb2da80eae83575519cbdcff57","sha256":"13805720d9b1ee8f859d1d9c0bb28fbe2b00b92720e8faa8f364f4c0eb7c7df4","sha512":"835a0a498bc59d2be5947eac8765d6364036648e5b821a0f71cf7b9670c60c47bb0267f22da5e902608a2528e9e4147306dd09748d1e798a68f02ec17565b7ca","ssdeep":"","tlshash":"8431af0c1e50df1a18ba5ef3e1c4ea97380954b38fa38d05c040541a87969b52f7fe68","first_seen":"2025-06-18T05:12:49.455997Z","last_seen":"2026-09-29T17:20:32.032838Z","times_seen":57,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseUserTab.vue_vue_type_style_index_0_lang-DB3SOHW2.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.375Z","timestamp":1790702375375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/BaseUserTab.vue_vue_type_style_index_0_lang-DB3SOHW2.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fqsSHVob470Ygz2sR1WF75%2Fj3eBFg1nQYq3clQQHmmgOOelKTq2ckzZMMDqJJKA3vJrU%2B5M9MIdAwAOFlJLEHuuT8IxTjLBxEDjwg1nI%2BCZ%2FsCxlqx0C1Haslx9hwaCbWNChAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"55f1c157232efcee87865109ff53520f\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7561bdd56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":948,"size_decoded":1436,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (947)","md5":"8c5d505205ecf84241bbb10a7af283fa","sha1":"5bf51ef637b22f56b86c23457894a12adf0446fa","sha256":"007006e169aa95182e16363e83fba07daa151aeaaf595ced394bb0ca44fd1945","sha512":"abf16bf13315501da9e92957876582425a66a83c45279b022cf69c70abc7189be98b6236ee77810d8848985d97c1f7b335ca428a41db978fd57faaa37267af32","ssdeep":"","tlshash":"1d11888daca9cfb604f204e82e971069e094bb499614c926d05e4431325fcf8f68c32c","first_seen":"2025-12-21T16:06:54.059483Z","last_seen":"2026-09-29T17:20:32.027741Z","times_seen":8,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/upload/img/68342a002af5.webp","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.539Z","timestamp":1790702375539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"GET /upload/img/68342a002af5.webp HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 26 May 2025 08:44:49 GMT\r\netag: \"68342a01-240a\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GP%2F89INr6hh0%2FgtGUzxOOuEWfzcXvzYE9I8EHpVJ5P4WZDqNPBWhZC7CZlYbM8GyjK7d9%2FCoBcX1HJuutMaO2e3OlOGKmzpyCW%2B2RlPlIgObHJmUFFLfbh1dpyBks19fFA5I4Zig2sA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a42ca7571fba56c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9226\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9226,"size_decoded":9977,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3999cf099f157d99e1977d93d3bb5c1e","sha1":"ab960be910747bf69217596a07becbd3c41c71ec","sha256":"b059e58803c28c3746ded06eee8c81fd7abbe4c60f21bf35855afdccc7c7b832","sha512":"d371686f5dddefe39cbb9991c41b7ff151b9fcdd6bf66392eeb3b673fbd0b3796a46a26d7d04ac00b0570bca8bb1c83e269990f106f6fa1bd96f74321b334db4","ssdeep":"192:t+BILBAJKmQyWb/1vfdClarPkB7XZpDIxNeVOAtYEHDer54XFBJ:tV1AMmQPmik/VIxzWYEHDe+XZ","tlshash":"f112cf1a1eb7e0539535d634e35b5a12eead9ae6308310c7d1425fa848f86204b9517c","first_seen":"2025-12-21T16:06:54.045042Z","last_seen":"2026-09-29T17:20:32.047044Z","times_seen":7,"resource_available":false,"data":null}},"time_used":321,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/index-4_dMG82r.css","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:33.925Z","timestamp":1790702373925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/index-4_dMG82r.css HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xc8pUEpNxKm55dL5dQTE2Tl%2ByiGWIgBDUUcDr9q%2B1%2B55n1BXy8qT5ZMYFERKulm4esfI3JrJWktYEzY0sD2naAZkwkqSDj%2BmJaM%2BFp5kYZ2BXiuK9651CtDXaLshueUKk0XVHA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"02d5e162c291cb84a4551f35ab0f59ed\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:34 GMT\r\ncf-ray: a42ca74d0a8356b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":978166,"size_decoded":144027,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65018), with no line terminators","md5":"cc7658aeeafc4de267be66af6469b0f0","sha1":"6f5265c3005f299c1d56bb3fc161ce9b1c1b6922","sha256":"a31ded33f017b0d58d343caa9c38fcf9f38a545eaf14cc12914778a718f00f4e","sha512":"7d8b4ed4f2c5617af48cc6316438fbc0b3b071f4193b014f997ffc9eee62abdc42347f277543acca49f44c41236341288c15abf1f30c419c815ebdab6a38d2ac","ssdeep":"3072:UnNIClDsIxuVSR8M+mNa8IyjYQKOxm814c5ZrHE4hB+JI2sF3QoU8XTWyicfRAZP:UnxsaR8qaeYGme5HB+2qHQ2Zguuch","tlshash":"8d25f9723701842ce9fb8e3302df6d0c7019e11a7b33466de11e5e7447aa29b976636b","first_seen":"2025-12-21T16:06:54.075454Z","last_seen":"2026-09-29T17:20:32.025311Z","times_seen":25,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.566Z","timestamp":1790702375566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ai-bot-mining.vip/\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24452\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:45 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91550\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24452,"size_decoded":25264,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24452, version 1.0","md5":"2ede57db1a3a5f41f40467e7a43a1dd4","sha1":"e0d61f6dc511d64a072b2f4dc94e155ecf1bb6f6","sha256":"f9a06e79cd3a2a20951c0f0e28f66dd0e6d3fda73911d640a2125c8fcb78f21a","sha512":"a30d204efb2a66231f29804b8c1e467d61a741b0252eccb40aea60206bd4d5cdb0a32a76cb01d1ba8ba0c73469d10fc55df1d8e54ea3b55b6b75b17e94afc80b","ssdeep":"384:WuaNAiwkOHiuWl18daDX7+rEvHG297z5lzWMTSbXhVR7ebvio772036BhuJJRiVF:zaKfkOHiJEdWX+svP5m7R7eTio7JKWHC","tlshash":"79b2e03132ea530e5b14c43c9537287e5eca2fe78aa93e5e9fd5d004b2104d6836fe06","first_seen":"2025-05-30T14:20:15.679609Z","last_seen":"2026-09-30T02:15:12.913936Z","times_seen":7924,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-29T17:19:33.338Z","timestamp":1790702373338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ttIVvXMNtZA8Q02grgQjJMhZIFs2n6M92mQm1rCTULf9WSeqe0MwEHLLRYbYkOWwxD3B6fHRu3H%2BzcLi4CK9wbohqW0r5OU4Bh%2B1svHZYRSxzLviwJumTNWIqwcQKfuRZL2%2F9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ndate: Tue, 29 Sep 2026 17:19:33 GMT\r\ncf-ray: a42ca7499a2556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10439,"size_decoded":3580,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"eea5903b024411d254134ac34bbc0536","sha1":"7b8f0cf1f7a0fc9173696f636470facdb3fb8cf3","sha256":"ce2187b6312f0f4f1ba2b9ef411ce23e851ed42991f6678e92b65cfd2862a855","sha512":"d5528cd73a0af8fa028bd50a4293b8e9d214fa3f2c993408e0d54ff9a8bc170c2a249271dad15fbd20e540bfe1d849e14aa92eb53982e1d837e64e0e43afc655","ssdeep":"192:SUYfkdoq1aBIBksXZhu8M0k9X+T60YDIVkKy5cbjlxixIb8IuQGthsriMHLqj6cO:xYKkBzsju8pk9X+OIjlYAuN4qLlM","tlshash":"61221f5b2ce66028631370ba9d7ff50a7621001b1998ec007e0cd7345f99a7dabb5eed","first_seen":"2025-12-21T16:06:54.040519Z","last_seen":"2026-09-29T17:20:32.028902Z","times_seen":8,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":3,"connect":25,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/index-BlGxPNI8.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.369Z","timestamp":1790702375369,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/index-BlGxPNI8.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21PWacgbaWJqWoFmzYQswhItkSiv0SXikLZZMJ3jHvDmbFUaXAWXyt%2FB3rc9ZtcXzJmqDwIIjdWa0HIBbFjUsLo6Epg8S5jrvrSG93gPHTop3ueyejRyLVJ8J1LjvrS3hlWBEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"336b7505018ed7e318fd35453f5525a8\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7560bd756b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3203,"size_decoded":2222,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (3202)","md5":"280b822aa2f203042c14c18f392dd74b","sha1":"6756363e275fe87243f5d30cb764771d73bbd1a6","sha256":"52238d4f30011e00d72b8479c2878366c501facc4e535aea0ec7f58b062397f3","sha512":"134d883ef955d89c3331d890dbb9ff5023297062a5a1d054489d23d4f5bf483f7ea72a14a9a7863ceeb047a1073430c85ef08bc603f3309a1060ba0edffba722","ssdeep":"","tlshash":"db6194acbed49534c6fb499854270912ba0f0b19522488f2e4ae9d4c2f3e458f13ff2c","first_seen":"2025-12-21T16:06:54.057622Z","last_seen":"2026-09-29T17:20:32.052382Z","times_seen":8,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.565Z","timestamp":1790702375565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuFuYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ai-bot-mining.vip/\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24356\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:53:01 GMT\r\nexpires: Tue, 28 Sep 2027 15:53:01 GMT\r\ncache-control: public, max-age=31536000\r\nage: 91594\r\nlast-modified: Tue, 09 Sep 2025 18:36:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24356,"size_decoded":25168,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24356, version 1.0","md5":"8ca0a51552960933d0fd52c19175cbe9","sha1":"5197a7aeb22454110aa1f3ef3ed4c98ca7ef1ba1","sha256":"6f56409fd3d64bb85f7d070bce20749db2d66b6d63cec586cc22d1c761be2491","sha512":"90ab60c6717c27109e8b818e17a696f8665b2fa6247dfcd13a8eb22027aad26ab7becf08e3260bffa8ab3e97d7b1e09830f7d59652c28ec6af13cf925a176393","ssdeep":"384:18j7oxsH+H811z2d2GksjGcVQbNTw4W0LclnfWf7xN5mmOFbxOBAeVLLRIDqGrdt:Y7B1h20GkXRTw70L/pmmybCAaBZGBprf","tlshash":"d9b2e07b99dfeba1dde7def5252e0480ca6c80d06380a6fa135c51b7f50b80710af989","first_seen":"2025-09-20T14:27:23.117722Z","last_seen":"2026-09-30T02:13:14.026192Z","times_seen":5964,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/login-BwSQPJNn.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.367Z","timestamp":1790702375367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/login-BwSQPJNn.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LHELCA3zAsidUIfK4ufZV5gVVSmmmI%2BcAzZ1aLayaKGOSKRj7GRQD5TSzZcYNvI9%2Ft9956iwo%2F2ozVakj8IuC1x%2FUxL2hhzvGRMRZ%2B0wqBW7mroVH%2F0lWkebRGeHsnZ7A8Hnrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"424dbeaa773293c3e4c4a7ab8ea98fb3\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7560bd656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67602,"size_decoded":5999,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"71fb96ac5c17056aed846e6baa7f05c8","sha1":"811ed7d15f8c70951293227c74c95154b28f6bb7","sha256":"cad80a6d8edb3eb70882f83988c2010ccf2eacbcf9bcd936e3f9a834fcc41ef3","sha512":"f05b7183220ab082b01a7901e60571da8ef82976b90b86ae8da954ff62e3649edaa5b38777621738609fc3a6c5cf15adb4dff3d88173a81fb867f57684e2bc16","ssdeep":"1536:Ci9H9PifoYv80G+Qq4hhK2tOTfREjwF4TofaW8:CCViAS8hssIIC56UKoiv","tlshash":"81635309e4b6cfbae4b7621d3d4b5410f05e2befd1414f2296fc09116ea6cd0ae627b4","first_seen":"2025-12-21T16:06:54.064282Z","last_seen":"2026-09-29T17:20:32.040602Z","times_seen":8,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/api/public/get_lang_json?d=1790702374878\u0026lang=en","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:34.885Z","timestamp":1790702374885,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"OPTIONS /api/public/get_lang_json?d=1790702374878\u0026lang=en HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://ai-bot-mining.vip/\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WEHZELmzvbrZ%2FUf4ihajsV%2B4qEitQ1OD8Ri%2FaT4nVILDcr5EtbnrFhPsuICRuoYlOjBitpu3wblIYxg%2BhZ3nBtMpyCMGBzile9McJ726BP9CtlSJ0fM6EJhl6JObJ72vD7CWO%2FC0Rms%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ai-bot-mining.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42ca75308acc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":809,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/api/public/home?d=1790702374885\u0026language_type=en","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:34.889Z","timestamp":1790702374889,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"OPTIONS /api/public/home?d=1790702374885\u0026language_type=en HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: st-ctime,st-lang,st-ttgn\r\nReferer: https://ai-bot-mining.vip/\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyBCiyBZB000yWdNFekmqG116Z5vDm061R3BMHp%2BB7aEiAA97NzseIRI2Sf5B%2FDgCOUJf%2FFUPMCO4QZxNKuLGuhljt4N%2FLB4EKS8NwFXxQ06uqtDTqmLs4%2FnXqi1NSXhKGN0IZckhBs%3D\"}]}\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://ai-bot-mining.vip\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: st-ctime,st-lang,st-ttgn\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a42ca75308afc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":809,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-30T04:35:38.282382Z","times_seen":18732258,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.ai-bot-mining.vip/upload/img/6836e412505d.webp","fqdn":"api.ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:34.880Z","timestamp":1790702374880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:32:59 GMT","end":"Fri, 06 Nov 2026 16:31:25 GMT"},"fingerprint":{"sha1":"D4:9B:B3:9B:F0:B0:AC:13:60:61:C5:FD:EC:FB:39:CE:84:56:60:39","sha256":"93:94:2D:0F:42:9C:40:96:23:E9:09:51:BC:60:2B:78:E1:B5:77:61:F7:80:0C:28:D4:AD:35:18:B9:DA:8E:8B"}}},"request":{"raw":"GET /upload/img/6836e412505d.webp HTTP/1.1\r\nHost: api.ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 28 May 2025 10:23:15 GMT\r\netag: \"6836e413-14d1e\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONWnpXmM7MqulNLZjld%2BDGiiDoAitgwjM2g%2BNvLlmY6mGmw%2FfDIfoX1uPlSVlrQWv2hKjf5fNuUBVTamVJnn7p5B0XwQqYD2s0UV5CoValg9uo5Dw%2BiT7WNAP0Z%2BIhoc0wdINs2xWNQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a42ca7530f1056c4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 85278\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85278,"size_decoded":86033,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1d88982315ac8ea05aaa11969b685c5a","sha1":"7536fa85ef7fd414e070c701b9e110de0f5f8780","sha256":"8d8a6b64cdfc92c5766bfd3836c735c439abd61e9a5d304a524fdbab9d3a3948","sha512":"bed1598b1959b7c26e512cae47b49e326490de0d78ffeade786429d4fba0b569d034564b0982f60f98b9a82a545ae8d0915005da77f6a47c8457b6cd82e2be5a","ssdeep":"1536:Z1jETPoyk2yXryTE7Sn5HwjBBJe12hmii09jB4sH1DB:juG2IH+BwjrI2QC4i1","tlshash":"818302bf178a39770874234519cd365bde2ab46cb2222be5e60fd2f3e331627847a441","first_seen":"2025-12-21T16:06:54.076414Z","last_seen":"2026-09-29T17:20:32.045761Z","times_seen":7,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":333,"receive":260,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"api.ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:34.894Z","timestamp":1790702374894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v50/KFOMCnqEu92Fr1ME7kSn66aGLdTylUAMQXC89YmC2DPNWubEbVmUiAo.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: https://ai-bot-mining.vip/\r\nOrigin: https://ai-bot-mining.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 29 Sep 2026 05:42:24 GMT\r\nexpires: Wed, 29 Sep 2027 05:42:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 41830\r\nlast-modified: Tue, 18 Nov 2025 19:00:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20612,"size_decoded":21424,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20612, version 1.0","md5":"b07da7aa3e4f363c5cdbc11312239e8c","sha1":"47bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8","sha256":"e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa","sha512":"420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532","ssdeep":"384:k5Eu+yl5Y9RpwjjmD/8Qu+POP9w+oB7rezldH9W4EMs8qCr9WvS80M8T4PTEXPFw:YEu+/Jw3FF+WP9DC/ez79jcCrb8BK4Eq","tlshash":"8192df6bce71497ac711262c773917addb8b44f627f91f2ba0562411c7b8e015c2cc7a","first_seen":"2025-01-09T06:25:34.419113Z","last_seen":"2026-09-29T17:20:32.031043Z","times_seen":48007,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":3,"connect":44,"send":0,"wait":28,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/default-CkDzSDB3.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.358Z","timestamp":1790702375358,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/default-CkDzSDB3.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJdNunW0S%2BrSW4TrfirQeNtrFadJnSfAYRxQAVIBqE5l8hOczuUQacfm6GAug4bHrGulv6%2FX1MI87FjGQXM%2FqSK%2FmYH8mwfJ%2FxLn4%2B3tPFPkwMS69AS1pk%2FYtBvzztA%2F1P4l1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"41a6d299b8bbc463f63f9ebbf81b556e\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca755fbd056b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42410,"size_decoded":6474,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (42409)","md5":"9117fe7b64e3e4329f84304e6d54ac79","sha1":"f4e256669388c925113d48be6670d56dd5672ad9","sha256":"8c9b138eae30fb343d0491487f6f3716e0b3cbce607f8b4c513037c4f25d2d0d","sha512":"b9e81199a027beb4bd93d878459dd71111242bd5d421737753d74ca6e44e7eb23bc422e433b6820946090841fd7f6270dc43d81735386488904a49aa2d4bfa71","ssdeep":"768:u5nOVanOhfyOZ1ykQa5OGnOALaQfyOejO4VOsOJO2af2DidotqmLme3+xG3GJ+k/:oJh/cH+xdPQfk+gG4","tlshash":"4b1395815807933fc5729a4e4c466482328c5fdbd00c6fb6f2b4d52b86cac797a3af59","first_seen":"2025-12-21T16:06:54.080368Z","last_seen":"2026-09-29T17:20:32.048109Z","times_seen":8,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/grid-qow2DIkz.png","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.542Z","timestamp":1790702375542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/grid-qow2DIkz.png HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/assets/index-4_dMG82r.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=16yae9o4OiwvR6KLSSTH0P1f7WI1G7H12WZbMHX9IQ%2F7ekAW%2BfO3LBMps3wU%2F32NWhwb40aZKw4BnD48rd1aXWeWHhuZAq5NFIDXf2cxmCiuIWxUuohs6NrR%2BbIKgUtBZMvixg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d4bc4f3d4b60c9a7720be1ba1ca6cb0f\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\naccept-ranges: bytes\r\ncf-ray: a42ca7572bed56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 200557\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200557,"size_decoded":201375,"mime_type":"image/png","magic":"PNG image data, 750 x 868, 8-bit/color RGBA, non-interlaced","md5":"5b411b784c5d885a20cd2d8afef2b14e","sha1":"dbadff699576ecac8d400c1689c844d8db7ca85c","sha256":"83660ee825a418775450673ce4dc6833b309d81beb41b918ad5f6b55ad590277","sha512":"74cc273f17d13823f61a85342508784cc4f2520c3aca6e9e7005d7593786b9a1eaf41062eb7fca3605ef2e13cae6b4df8a0bd4519d8db54ebd26a525c3ca805d","ssdeep":"3072:6rWJvjcLAaAaTujk4IDPe4A2nKjG1CVZamWspp8gYNQ2iiuOpIX9CoQQZuPdA1wc:VbzACjk4IDuVY3mVv9hK3KXAoV0Uw5m","tlshash":"9f141292e2c04d6d21af2d78141e3f7937e4daf0f26e83bb437131950baad701a5a645","first_seen":"2025-06-05T04:49:34.376603Z","last_seen":"2026-09-29T17:20:32.023201Z","times_seen":33,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-VLODmcRf.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.361Z","timestamp":1790702375361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/BaseAlarmLogoBtn.vue_vue_type_style_index_0_lang-VLODmcRf.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M6LR4xijJFebNmiKBSRXeQsxVfwa75gYZC0x1%2FRHVLwbLD48KwSRoxkxiWvXQk%2FA%2F6NhHGWGOV1o7TNHSBoYAjPle4FUScr3yrs%2BYtdGLUvjySPcqVqu3ore%2FaHrW2At502gnw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"b55ed1ec2d1ac023a4cf85904b580c04\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7560bd156b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":1194,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (530)","md5":"14d4d8cbaaa6a90d82f07467dfc37259","sha1":"4ad6b9e5a960d416f206ec2eae5f617eb1c8e887","sha256":"97d9d0b7a9906119c88b28db58d27773ae289bdaacd796d1a7ba29b54a4aaaca","sha512":"a53c52cf5e3aea8181084e6d2ea8155ebeadba44775a8b419905c1a55ee10ba4f6b04fb222a773592dedaffea49b3e3c308bc1b83e3e2a9302ab635d2b80e391","ssdeep":"","tlshash":"a9f0c01c6c128af9823700453e4610a144580f7e659cba82e9eb18119fe20bc372b71c","first_seen":"2025-12-21T16:06:54.07364Z","last_seen":"2026-09-29T17:20:32.048958Z","times_seen":8,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/default-CNw7G3Q0.css","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.366Z","timestamp":1790702375366,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/default-CNw7G3Q0.css HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRyhjjDuXECqWVUarMOL8xTN23vUKQbXJRbf7nmnnZUN2%2FkBt1BcYtvVn3EZA40Uq%2BQl08dulc%2B7EyZYGL17s4WQMgIXzmdeS%2BsAkznfYFhkCO0SSvch5E39PpimlqQOiH90dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"faec5eaf1ebda90533d7a7ee16bf17a7\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7560bd556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6983,"size_decoded":2109,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (6982)","md5":"3c69d43351fdf4044b0b765057feee47","sha1":"b2418355c718c5e0da93c27cc4e04c5dba528821","sha256":"4fbcef29d3f8d2af0aacf62b8864e823715bd631adb0b4e2ef8ed17339638a1a","sha512":"c21ffa030ccde244c0611947d4a93ef687b1a7873c212e04be45331c3a04bb1aa6851d7fc435b98cbc4120c333eb50a8664c2bc56f3b620fe73dedc2cecd8dd4","ssdeep":"96:Ukat9lAqhvtjr33m8O+2rVG1mhg2/z5CJwyksVuVw:UkatjtTf33m8O++VGg6CMwyksVuVw","tlshash":"9de1bf142438732e9a77f1a766ff518c4824e652d6536b8eb313b50059ebb933132bcb","first_seen":"2025-10-09T12:29:11.737912Z","last_seen":"2026-09-29T17:20:32.050622Z","times_seen":39,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseInput.vue_vue_type_style_index_0_lang-C_K1Z4sO.js","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.373Z","timestamp":1790702375373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/BaseInput.vue_vue_type_style_index_0_lang-C_K1Z4sO.js HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i8vd9QP3rAfL5NJwMCeEJyHcBTlInVvS15Z2tD77w1v5Wpd57EHCm3dKRy4gl2gR27CkBLtEWqnH4CwBoymvWqaWwMOpPKCW13oBzurT%2BvxBdiFK5Roc749MCxueE1b2bgZKlQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"55420fa78ca4befc5150dcd2f29191a3\"\r\ncontent-encoding: br\r\npriority: u=1,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7561bda56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2490,"size_decoded":1776,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2489)","md5":"9cc1a3b272abdb88a0dbd16b4ed46e62","sha1":"9d62e67f492bfd6c04bedb2554dabb17a7dc218a","sha256":"244c743559473a50927a64a9e376eaacecedcbe645d0ccd11cbb9a9bc4703e8d","sha512":"1c43c1ab88973626612edb962518ec6ef096315061fb20b465654d32ba35597b3430deeb63ed89173dd31cf305329bfee4063bc854a1c88ae5955b210e3580b8","ssdeep":"","tlshash":"9f515104ec159fb3d6b39a4da5db58a0a05c2b9f85084f5110fa551c2f5ecf8233af28","first_seen":"2025-12-21T16:06:54.047444Z","last_seen":"2026-09-29T17:20:32.043042Z","times_seen":8,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ai-bot-mining.vip/assets/BaseUserTab-DVdcH4fp.css","fqdn":"ai-bot-mining.vip","domain":"ai-bot-mining.vip","tld":"vip"},"ip":{"addr":"172.67.138.9","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-bot-mining.vip/","date":"2026-09-29T17:19:35.376Z","timestamp":1790702375376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-bot-mining.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 15:43:28 GMT","end":"Fri, 06 Nov 2026 16:43:25 GMT"},"fingerprint":{"sha1":"4A:F0:59:E7:AB:10:DD:3B:68:12:A9:B0:A6:86:3E:75:64:C3:A4:18","sha256":"91:77:A3:6E:99:C7:B1:2C:94:DC:8F:A2:4B:32:25:79:20:43:AE:B3:12:20:CA:B0:A0:93:10:28:4E:52:1E:C5"}}},"request":{"raw":"GET /assets/BaseUserTab-DVdcH4fp.css HTTP/1.1\r\nHost: ai-bot-mining.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ai-bot-mining.vip/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQhbzuz1q2M3UdNcD720nhmmqLfXycmVj3Hmy6AscDghM%2FA3ad4R9AxMHtxy5oLUf2lk9f0tm6V8UIlP8odln8hTrVqYMJRUShDqf1GJexjV4A77T6Ihjccq40Q5zsRGHWpU2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"d220730bd5c0a69dcefb0e619cfae803\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Tue, 29 Sep 2026 17:19:35 GMT\r\ncf-ray: a42ca7561bde56b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":220,"size_decoded":959,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2571e9c1678f7890b2944076ddacb4af","sha1":"d36697fae0e1aecd7f151e50ea3808c9f155e5f0","sha256":"d27ee7a4a4e398c3fd2bb36d227fa8d1a2c0d648ababbf68b900c279709230b2","sha512":"6c1a50c9b8cc632500a99e5ed2e7b6b4f1ef621db803b52a9c4a59fbcf03bd6fce5ae57bda4b07f1b4bef632dde82ace2b87e26ebbf6a3aeaa64b620a5147500","ssdeep":"","tlshash":"37d0a91c0894f0be28c9b2a81fa852dc08aa2205fe035fa83024bd2101d6af5213bc6f","first_seen":"2025-09-11T15:59:47.603631Z","last_seen":"2026-09-29T17:20:32.034074Z","times_seen":115,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-29","alert":"Sinkholed","trigger":"ai-bot-mining.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}