{"report_id":"61596c1f-3a14-49eb-ac83-1b83f9e1a19a","version":0,"status":"done","tags":[],"date":"2026-09-28T18:28:57Z","url":{"schema":"http","addr":"getchatsupport.net/","fqdn":"getchatsupport.net","domain":"getchatsupport.net","tld":"net"},"ip":{"addr":"204.11.59.216","port":0,"asn":46606,"as":"Unified Layer","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"getchatsupport.net/","fqdn":"getchatsupport.net","domain":"getchatsupport.net","tld":"net"},"title":"Chat With Our Support Team","dom":{"size":4933,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"1c37dae3e95e79f5c114cab05cfd65fa","sha1":"6986c7bef685595f55272c07bb9abe8dad73e102","sha256":"ad88da06e5d87958fd55c14926db344d1eb7e83fc7e4a50bc646874459b551ba","sha512":"a27b651c04ff0203b9a69a766e93e368093c9c1fbfede058fa73445f84a02cf7476346c0c08cb3709b9c3a21031132194c387a29634d83cbe39d53886626de0c","ssdeep":"96:nS3ynLrT8CUl9Yu5c+YJlZR3ngcyHTo7guVUKfnK8SqZL1bR2wx:S3A8HHYcc+cR3ngfzoMgdSqcwx","tlshash":"32a1939a5673001c7472a445bffa264e6160c417d40bdaa8bfd872a8cfcb1dfada170c","dom_hash":"domhash52665ca6fa420d3b321a6955eaaee631","first_seen":"2026-09-28T18:28:55.182807Z","last_seen":"2026-09-28T18:29:01.384354Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"getchatsupport.net/","fqdn":"getchatsupport.net","domain":"getchatsupport.net","tld":"net"},"ip":{"addr":"204.11.59.216","port":0,"asn":46606,"as":"Unified Layer","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-02T18:28:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"urlquery","sensor_type":"reputation","title":"urlquery","description":"urlquery reputation","scan_date":"2026-09-28","alert":"Reputation: Exact JavaScript Match","trigger":"chat.arslive.com/socket.io/socket.io.js","verdict":"malicious","severity":"high","comment":"","link":null,"meta":{"alert_id":"reputation.javascript_exact_match","engine":"nox","match_type":"sha256","matched_sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","reputation_confidence":"high","resource_sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","tlsh_distance":""}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"getchatsupport.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-27T22:45:36.707646Z","alert_count":0,"request_count":3,"received_data":166801,"sent_data":1745,"comment":"","tags":null,"fingerprints":null},{"fqdn":"chat.arslive.com","ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"domain_registered":"2026-05-01","domain_rank":0,"first_seen":"2026-06-21T05:07:23.08729Z","last_seen":"2026-09-28T18:28:53.198586Z","alert_count":0,"request_count":10,"received_data":344010,"sent_data":5410,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"getchatsupport.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-04-22","domain_rank":0,"first_seen":"2026-09-28T18:28:57.709821Z","last_seen":"2026-09-28T18:28:57.709821Z","alert_count":3,"request_count":3,"received_data":6187,"sent_data":1314,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-27T22:44:07.016679Z","alert_count":0,"request_count":1,"received_data":12300,"sent_data":588,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chat.arslive.com/widget.js","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a3b269a256f104727470d014f089d6a","sha1":"ab7963987e60ce9bfe157bf68070ecd1a11170c2","sha256":"62ab1bb0dd5b10887c08510ac5c36d51678f7bae4038c49e849ab8cd8d174bb7","sha512":"7976a1d0380e2a0af328edaafbf1fdcb8f578da77a1d1e0671eeddda1e4c572ef86855f64c431c8274ea748485e896733da8d74aaffedb557d7c5ea711d34076","ssdeep":"1536:bjRBFWyxA7yKFJB1QIwaxkGpda9nCO4tQR5lgh4uyfV/9JknR1Ks0BRQKyzgLrKT:B/xe2a2e","tlshash":"1c43d86e78b3202a6137747e7b4fa50a75378003440aea20bd6cc6449fe5b6543f6fe9","size":60038,"data":"","first_seen":"2026-06-21T05:07:27.350261Z","last_seen":"2026-09-28T18:29:01.393718Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/socket.io/socket.io.js","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec127053f9c5cbfeeefd263b4b23bc0a","sha1":"11c08d7468ffe8980b0f862280c0c371776938a8","sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","sha512":"81ec905226bb2b6632f968b204f873331a4a75f24c0f27d50bb5ea930bec797a7c201eed1eaf1a9ef06cbbe923a722bb54fdcbf2be7147eea00d77a80565a39e","ssdeep":"3072:zLTygH4CO2KsFpWw0axS8RZIXyR7dSGg18FEEaLH32emV/Tfkmh0KbhEGtkSWq:zLTy7X1sFpWw0aTRrgaEEaLH32emV/D5","tlshash":"6ce35f49aaf72051917330398bafa045f239d01b620acd443d1cd7f49f65b3897aafe9","size":155836,"data":"","first_seen":"2026-01-01T23:52:44.961231Z","last_seen":"2026-09-29T03:17:22.679115Z","times_seen":477,"alerts":{"ids":null,"analyzer":[{"sensor_name":"urlquery","sensor_type":"reputation","title":"urlquery","description":"urlquery reputation","scan_date":"2026-09-28","alert":"Reputation: Exact JavaScript Match","trigger":"chat.arslive.com/socket.io/socket.io.js","verdict":"malicious","severity":"high","comment":"","link":null,"meta":{"alert_id":"reputation.javascript_exact_match","engine":"nox","match_type":"sha256","matched_sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","reputation_confidence":"high","resource_sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","tlsh_distance":""}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.154Z","timestamp":1790620102154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://getchatsupport.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9168\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49343,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-29T15:35:51.87492Z","times_seen":300179,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":3,"connect":30,"send":0,"wait":82,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.158Z","timestamp":1790620102158,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://getchatsupport.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 15:55:34 GMT\r\nexpires: Tue, 28 Sep 2027 15:55:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 9168\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49343,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-29T15:35:51.87492Z","times_seen":300179,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":85,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/sounds/new-message.mp3?v=1778049084225","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"media","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:23.365Z","timestamp":1790620103365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /sounds/new-message.mp3?v=1778049084225 HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nOrigin: http://getchatsupport.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 206 Partial Content\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:23 GMT\r\nContent-Type: audio/mpeg\r\nContent-Length: 13413\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nCache-Control: public, max-age=0, must-revalidate\r\nAccept-Ranges: bytes\r\nLast-Modified: Wed, 06 May 2026 06:31:24 GMT\r\nETag: W/\"3465-19dfbfbeb41\"\r\nContent-Range: bytes 0-13412/13413\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13413,"size_decoded":13859,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains:\n- MPEG ADTS, layer III, v2,  64 kbps, 24 kHz, Monaural","md5":"c57b33755edb16d18335714180d078a5","sha1":"947dabc2e4007b6d2aa0089bf3f0e6dfa46c8317","sha256":"2cb29497dada32a0ece29d63eb704b423b6fa6e7cf3ff253cfa5f5b06d86b167","sha512":"b9e94773ca5b122fb71f93e3ab9d9b90fd017bd0ef29d6c2ea6055fd83ef04ed778d463010fa504bb417776c1caec627b35271a5690c975b3f013d5eaa53054a","ssdeep":"384:r8Q/RyxmRcZ7cu3ERkwVHSlWUOBszghUAMhbd/34:SZArOwVHSlWGzghLgbdf4","tlshash":"4052af5fbb63e0f5f6bc3df40b0162aa38cae94ddadad1c90a449b0162d432359b3905","first_seen":"2026-06-21T05:07:27.338268Z","last_seen":"2026-09-28T18:29:01.386692Z","times_seen":5,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/api/public/widget-settings?t=1790620102889","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.892Z","timestamp":1790620102892,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /api/public/widget-settings?t=1790620102889 HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://getchatsupport.net/\r\nOrigin: http://getchatsupport.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:24 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 1063\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type,Authorization\r\nCache-Control: no-store\r\nETag: W/\"427-WhnmcYGFf1QkUQjVnDtdwtmhnmQ\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1063,"size_decoded":1463,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f867d6e71db212856ecdf0d6cd303871","sha1":"5a19e67181857f54245108d59c3b5dc2d9a19e64","sha256":"03ce717bd82d89bb793c99cf5e2f8fb4d9e76db4a10d69a5bf59ac23060b8c99","sha512":"cd1f7a83cddc6c41b55280953f5754cc4bb91f8bade51ca99450ce0ea2340513dee8f0056fc1c54753c90c51692999911e4b23f9e2cf62b6f39e266ded042cb2","ssdeep":"","tlshash":"8811e22751a22b3a27704bf0f94f3f4f1ca7303691c28a26e6ddcb5850a3259752bd24","first_seen":"2026-09-28T18:28:55.190788Z","last_seen":"2026-09-28T18:29:01.387455Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1204,"timings":{"blocked":-1,"dns":0,"connect":144,"send":0,"wait":147,"receive":0,"ssl":913},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/widget-icon.jpeg?v=20260503","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.900Z","timestamp":1790620102900,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /widget-icon.jpeg?v=20260503 HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 73210\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Sun, 03 May 2026 17:43:18 GMT\r\nETag: W/\"11dfa-19deeeffe45\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":73210,"size_decoded":73515,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1254x1254, components 3","md5":"470a6701426cb3784abf8880b955c381","sha1":"98be1c8556e357690fc106fc43933f27b8dec8fa","sha256":"233657372b6bebce94b0f736b8b4cedb88c8423df80439494590f2370c9e37e2","sha512":"1c4425e20bd4b35b374dc7e81bf6aab25bc1c7e85c6d68e44103f69813f3e86c502a1f2a1319dc5c0d7a8cc58ac1a85673524faff06727ce71644977e629d705","ssdeep":"768:CdQtwTBoKbQ8VrlI29Q1nSXpPHNlyrQeYFNgH5T5Dye/v+nQQBwe4OQegXuzF8y8:4Mgo0EANlsv5FDyeX+PBw9TsZotrPR7","tlshash":"6b63022882150b04de3a0f7526947b29f876363d58fd2f58fa7970d27788e9c585e03e","first_seen":"2026-06-21T05:07:27.33668Z","last_seen":"2026-09-28T18:29:01.388552Z","times_seen":5,"resource_available":false,"data":null}},"time_used":698,"timings":{"blocked":-1,"dns":0,"connect":145,"send":0,"wait":552,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/uploads/greeting-images/1778150446341-ae1302dfd991383f.jpeg","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:24.103Z","timestamp":1790620104103,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /uploads/greeting-images/1778150446341-ae1302dfd991383f.jpeg HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:24 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17465\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Resource-Policy: cross-origin\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=604800\r\nLast-Modified: Thu, 07 May 2026 10:40:46 GMT\r\nETag: W/\"4439-19e02069505\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17465,"size_decoded":17850,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 283x425, components 3","md5":"178f9afff921222df9c8f3d81c39db94","sha1":"2ae1f215f85c078084f2c0d516c98972338f9ff8","sha256":"0424fd29434c9a039ba665c779b383a89f7b18f5804fda7a1d68ef4b5c0c3977","sha512":"ae91e8f13fc80fa7b27a2d958a759debe609d4bd44679a46544c970be1d9c3c862274674742e7e7c730c9069bd55a0bc61b6f8b2600a620f3174ce48d955ccb9","ssdeep":"384:9w7IegdbFUV6FjkHIOgIiT6ehDotZplVQsGDAOKCg:C7ib06FjK2T6xzlVQsGTa","tlshash":"7e72aecbfa28fa1dec3c8271f55a53ceaa595b101cd7c01c4f1b2ad90488d4a4636bd6","first_seen":"2026-06-21T05:07:27.347449Z","last_seen":"2026-09-28T18:29:01.389237Z","times_seen":5,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/api/public/agent-profile?chatId=chat_1790620102881_orcmka\u0026t=1790620102890","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.894Z","timestamp":1790620102894,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /api/public/agent-profile?chatId=chat_1790620102881_orcmka\u0026t=1790620102890 HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://getchatsupport.net/\r\nOrigin: http://getchatsupport.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:23 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 222\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type,Authorization\r\nCache-Control: no-store\r\nETag: W/\"de-96maYdAQXj1MSFOJwxfvsuGDIjI\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":222,"size_decoded":620,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e8fe409e26280820a62e8345eb6c83b5","sha1":"f7a99a61d0105e3d4c485389c317efb2e1832232","sha256":"04d543f129fa0957c538c6404f34c2f44b32ff11f23f4dcd1980bf7db5424e44","sha512":"e0c1e8b9001a19c2a6ca26b0778ac4a9b58eb4fb610885f2d65d01901d2c2ff09472bb2c4c84806d8000c7e1f881aebcf94fe23edca4262ebdccf6bbd05f1b8e","ssdeep":"","tlshash":"47d0a7d71c7b49fc47001680b9067698523d912355c31714fb5551c2c42615e0857f10","first_seen":"2026-09-28T18:28:55.191978Z","last_seen":"2026-09-28T18:29:01.389933Z","times_seen":2,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":144,"send":0,"wait":150,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/socket.io/socket.io.js","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.895Z","timestamp":1790620102895,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /socket.io/socket.io.js HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:22 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=0\r\nETag: \"4.8.3\"\r\ncontent-encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155836,"size_decoded":37948,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ec127053f9c5cbfeeefd263b4b23bc0a","sha1":"11c08d7468ffe8980b0f862280c0c371776938a8","sha256":"bc425714aa8f2547d6939e3721ebafd3830a7562a1f6cb08acc1e794bd707954","sha512":"81ec905226bb2b6632f968b204f873331a4a75f24c0f27d50bb5ea930bec797a7c201eed1eaf1a9ef06cbbe923a722bb54fdcbf2be7147eea00d77a80565a39e","ssdeep":"3072:zLTygH4CO2KsFpWw0axS8RZIXyR7dSGg18FEEaLH32emV/Tfkmh0KbhEGtkSWq:zLTy7X1sFpWw0aTRrgaEEaLH32emV/D5","tlshash":"6ce35f49aaf72051917330398bafa045f239d01b620acd443d1cd7f49f65b3897aafe9","first_seen":"2026-01-01T23:52:44.961231Z","last_seen":"2026-09-29T03:17:22.679115Z","times_seen":477,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/api/public/notification-sounds","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.896Z","timestamp":1790620102896,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /api/public/notification-sounds HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://getchatsupport.net/\r\nOrigin: http://getchatsupport.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:23 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 1687\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type,Authorization\r\nCache-Control: no-store\r\nETag: W/\"697-WaPNmDHpVGXi/rSXoi8zdruLZYA\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1687,"size_decoded":2087,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83d6fb58452eedc0902e0417c38878b8","sha1":"59a3cd9831e95465e2feb497a22f3376bb8b6580","sha256":"259997fd828a084f451d45542375757e1427eccce64d36cbd3bf49941765bd6c","sha512":"92b0fe070d5b4dca6fcfeff1b8994e7cb1f9be48428562911a217aa5b0020279f2f8e402d3b14ebbcffa3a9104e7e34845a322022c07205bb96aabdeae7911a6","ssdeep":"","tlshash":"1f31790e143d5cbe8746c9e0daafa60f46fe846321cc0a18f45d8f1822ae266174b60a","first_seen":"2026-06-21T05:07:27.345547Z","last_seen":"2026-09-28T18:29:01.391782Z","times_seen":5,"resource_available":true,"data":null}},"time_used":461,"timings":{"blocked":-1,"dns":0,"connect":152,"send":0,"wait":154,"receive":0,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://chat.arslive.com/socket.io/?EIO=4\u0026transport=websocket","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:23.072Z","timestamp":1790620103072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: http://getchatsupport.net\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: OI0wW6PRPOkVv31aGMYBww==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:23 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 5t/+wviA3BKkcVefiSvv3J4iXmo=\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":220,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T15:35:27.120197Z","times_seen":18724884,"resource_available":true,"data":null}},"time_used":441,"timings":{"blocked":0,"dns":0,"connect":146,"send":0,"wait":146,"receive":0,"ssl":149},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getchatsupport.net/","fqdn":"getchatsupport.net","domain":"getchatsupport.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T18:28:18.660Z","timestamp":1790620098660,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: getchatsupport.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-29T15:35:27.120197Z","times_seen":18724884,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"getchatsupport.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fraunces:opsz,wght@9..144,400;9..144,600;9..144,700\u0026family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:21.993Z","timestamp":1790620101993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Fraunces:opsz,wght@9..144,400;9..144,600;9..144,700\u0026family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 28 Sep 2026 18:28:22 GMT\r\ndate: Mon, 28 Sep 2026 18:28:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11616,"size_decoded":1534,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2fab88b333eed6ee4e89042e79d81d91","sha1":"233ccf36a8ab518032ee32cc35999c7b158787f6","sha256":"88902b1535d1981a58a08de96ef3ea2132924f593eb750ed734df0f03079e55b","sha512":"1accbaaf4ef4a7dbec5f0c0e186f723efe82973205de6c507b6b55a94b9bc4e95fc1742f79707345dbaa6e403512cc71f55c922d4441de7395a87ff3f2397947","ssdeep":"192:cpMpMEUMwXMXMEeMwwMwMEdM5NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:cN7JXuM0pR","tlshash":"1332dd92042ba500eb831dc373cf7f3aae8e61946085c1795ffd1c86acdad66536871e","first_seen":"2026-05-10T10:30:21.335103Z","last_seen":"2026-09-28T18:29:01.393049Z","times_seen":11,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":53,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/widget.js","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:21.994Z","timestamp":1790620101994,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /widget.js HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:22 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 60038\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET,POST,OPTIONS\r\nAccess-Control-Allow-Headers: Content-Type,Authorization\r\nCache-Control: no-store\r\nAccept-Ranges: bytes\r\nLast-Modified: Thu, 28 May 2026 10:30:18 GMT\r\nETag: W/\"ea86-19e6e228b30\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":60038,"size_decoded":60498,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (586)","md5":"8a3b269a256f104727470d014f089d6a","sha1":"ab7963987e60ce9bfe157bf68070ecd1a11170c2","sha256":"62ab1bb0dd5b10887c08510ac5c36d51678f7bae4038c49e849ab8cd8d174bb7","sha512":"7976a1d0380e2a0af328edaafbf1fdcb8f578da77a1d1e0671eeddda1e4c572ef86855f64c431c8274ea748485e896733da8d74aaffedb557d7c5ea711d34076","ssdeep":"1536:bjRBFWyxA7yKFJB1QIwaxkGpda9nCO4tQR5lgh4uyfV/9JknR1Ks0BRQKyzgLrKT:B/xe2a2e","tlshash":"1c43d86e78b3202a6137747e7b4fa50a75378003440aea20bd6cc6449fe5b6543f6fe9","first_seen":"2026-06-21T05:07:27.350261Z","last_seen":"2026-09-28T18:29:01.393718Z","times_seen":5,"resource_available":true,"data":null}},"time_used":871,"timings":{"blocked":-1,"dns":137,"connect":145,"send":0,"wait":146,"receive":288,"ssl":155},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.159Z","timestamp":1790620102159,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/fraunces/v38/6NU78FyLNQOQZAnv9bYEvDiIdE9Ea92uemAk_WBq8U_9v0c2Wa0KxC9TeA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: http://getchatsupport.net\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 67304\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 28 Sep 2026 16:00:53 GMT\r\nexpires: Tue, 28 Sep 2027 16:00:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 8849\r\nlast-modified: Tue, 09 Sep 2025 18:43:20 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67304,"size_decoded":68115,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 67304, version 1.0","md5":"069cb90e11a337bf264eadfb15ad00f5","sha1":"48642176d960affe01a1a57fc8179e05c618793d","sha256":"7234ed860a9cc83045413c4faee63c960a8f2d1917adcf728119307d56e0d783","sha512":"1c076a1b528a83e283f57d408c8e4f0a629b8daa47e8e10e2607fa26e346b7ea5ad1d237f815be91b553adfe644227877cb4693d1db9568028b6c2c68ed3f1d2","ssdeep":"1536:suAREpsv3Xf8UR8UX2S6teGGD7BhviSVDQ2AV4QnsKBn3Fa9dT1G5w6:GdPXzeUX2S60GGD36uOZFATM","tlshash":"d663020d07b99b3c436f5c9319b2ede92e2ea41b2486f045feb7b891e4405c591bcc97","first_seen":"2025-01-24T12:50:21.10871Z","last_seen":"2026-09-29T05:38:40.488861Z","times_seen":7900,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":91,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"getchatsupport.net/favicon.ico","fqdn":"getchatsupport.net","domain":"getchatsupport.net","tld":"net"},"ip":{"addr":"204.11.59.216","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:22.884Z","timestamp":1790620102884,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: getchatsupport.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 28 Sep 2026 18:28:22 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 17 Mar 2022 05:11:33 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 355\r\nKeep-Alive: timeout=5, max=74\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":583,"size_decoded":650,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"59f6ae7c7f154ec74d418d4ed6fc5b0e","sha1":"674860108a41ab23ba5f73635749332bd8a46b7e","sha256":"50e0767f2731da7ddb56d719dc85a7f830c4a860d8f09d0f25401d3dc7097d7d","sha512":"501f35d5347bd1f20024a1c76172874e0026289f6dd60de6a1f83ef2deb0fff07cd75c45b4dcf693a7c2ff903528bedbd05c2b9f9bb439d294f5f904427173f7","ssdeep":"","tlshash":"fbf0eb671c62c4436521c68a33e1ee2c58983213d109ed6ab6de522ccb89bdc88d3a39","first_seen":"2023-03-10T19:53:58Z","last_seen":"2026-09-28T20:29:49.024112Z","times_seen":12380,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"getchatsupport.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.arslive.com/uploads/agent-photos/1777875721312-e08f277b0fc86de1.jpeg","fqdn":"chat.arslive.com","domain":"arslive.com","tld":"com"},"ip":{"addr":"66.116.239.177","port":443,"asn":394695,"as":"PUBLIC-DOMAIN-REGISTRY","country":"United Arab Emirates","country_code":"AE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://getchatsupport.net/","date":"2026-09-28T18:28:23.341Z","timestamp":1790620103341,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chat.arslive.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 01 Aug 2026 09:16:32 GMT","end":"Fri, 30 Oct 2026 09:16:31 GMT"},"fingerprint":{"sha1":"E0:F3:F5:45:36:97:3A:F4:CE:DD:9A:2D:3F:08:87:F9:8E:71:D9:FD","sha256":"69:93:C9:DD:A3:82:79:A3:E4:D3:C9:97:14:AC:65:6C:EB:A2:72:75:96:E3:E8:F2:4A:73:DC:02:D2:B5:43:16"}}},"request":{"raw":"GET /uploads/agent-photos/1777875721312-e08f277b0fc86de1.jpeg HTTP/1.1\r\nHost: chat.arslive.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: http://getchatsupport.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.1\r\nDate: Mon, 28 Sep 2026 18:28:23 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 17465\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=604800\r\nLast-Modified: Mon, 04 May 2026 06:22:01 GMT\r\nETag: W/\"4439-19df1a69c60\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17465,"size_decoded":17774,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 283x425, components 3","md5":"178f9afff921222df9c8f3d81c39db94","sha1":"2ae1f215f85c078084f2c0d516c98972338f9ff8","sha256":"0424fd29434c9a039ba665c779b383a89f7b18f5804fda7a1d68ef4b5c0c3977","sha512":"ae91e8f13fc80fa7b27a2d958a759debe609d4bd44679a46544c970be1d9c3c862274674742e7e7c730c9069bd55a0bc61b6f8b2600a620f3174ce48d955ccb9","ssdeep":"384:9w7IegdbFUV6FjkHIOgIiT6ehDotZplVQsGDAOKCg:C7ib06FjK2T6xzlVQsGTa","tlshash":"7e72aecbfa28fa1dec3c8271f55a53ceaa595b101cd7c01c4f1b2ad90488d4a4636bd6","first_seen":"2026-06-21T05:07:27.347449Z","last_seen":"2026-09-28T18:29:01.389237Z","times_seen":5,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"getchatsupport.net/","fqdn":"getchatsupport.net","domain":"getchatsupport.net","tld":"net"},"ip":{"addr":"204.11.59.216","port":80,"asn":46606,"as":"UNIFIEDLAYER-AS-1","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-28T18:28:21.574Z","timestamp":1790620101574,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: getchatsupport.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 28 Sep 2026 18:28:21 GMT\r\nServer: Apache\r\nUpgrade: h2,h2c\r\nConnection: Upgrade, Keep-Alive\r\nLast-Modified: Mon, 07 Sep 2026 09:14:47 GMT\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nContent-Length: 2218\r\nKeep-Alive: timeout=5, max=75\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4994,"size_decoded":2533,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"58aa6f13ead981092c069994bb65ac9e","sha1":"d22e05dac6df6d5edd5fc9640828cfd549448d52","sha256":"3beeb20ff9e33d84d58730b6b7369e17276904fc237610df077d5f7741265882","sha512":"080a37b552d799b65f56a5a7b3fc1b72c7e7237084ab7867e6866ddcbf90b65b69cf39872c420abae0c6861fbe4ee9382254d8203cc6cc23b616f2b78a0d82bb","ssdeep":"96:BvrILzXgZ8o65kmFVByxjRovbgcRgloAw4lGLmKTtfZycuZ:BvNr65kQV8Rovbg2wokktfQ","tlshash":"a1a1a8528612580c70b2e055ffb6168ee6a28007d6075794bfd4b346cff715eda2af8c","first_seen":"2026-09-28T18:28:55.185283Z","last_seen":"2026-09-28T18:29:01.396873Z","times_seen":2,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":-1,"dns":4,"connect":136,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-28","alert":"Sinkholed","trigger":"getchatsupport.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}