{"report_id":"6a749a7b-7335-41ca-b178-8cf066f20635","version":6,"status":"done","tags":[],"date":"2026-01-09T17:49:30Z","url":{"schema":"https","addr":"bcmontipt.sbs/","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":0,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"final":{"url":{"schema":"https","addr":"bcmontipt.sbs/","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"title":"Full Gallery","dom":{"size":6435,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1215)","md5":"f671dd0350c24f7964c7311012b61173","sha1":"916672daa23accba5be17bb3edbfc7013a4789f6","sha256":"6965d641c51f60b9085034e5e54c7d1d6d656f7f7a43ba53cc0405ffb19cf42a","sha512":"51cdee97f3e707e8bacdf60ba759dfb4c54b5143195866ea334269dffbc30e4f0951186a21a819532bfe562354d8855c074135e2e7882674098ab4e0e083cb38","ssdeep":"192:NWSm5ktMhyvyzyWy6y1yly5yKy3Vtr6L4yXBp74wDuqzlFtT2vn:NWSm5ktMhyvyzyWy6y1yly5yKy3VtS4d","tlshash":"4cd15220458e1d2f42033199b005a76c30ff9f36fa264979f1ff0676a7cac859a178b2","dom_hash":"domhash06f0d6258cd388d4b73ebb8d59d1945e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bcmontipt.sbs/","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":0,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-13T17:49:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-01-04T22:14:09.841371Z","alert_count":0,"request_count":2,"received_data":63654,"sent_data":1202,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-04T22:17:15.216142Z","alert_count":0,"request_count":1,"received_data":7289,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"bcmontipt.sbs","ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"domain_registered":"2026-01-09","domain_rank":0,"first_seen":"2026-01-09T17:49:30.834327Z","last_seen":"2026-01-09T17:49:30.834327Z","alert_count":80,"request_count":20,"received_data":396835,"sent_data":8946,"comment":"","tags":null,"fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/jquery.poptrox.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dfba0ccc03b9fcf9886c4037996687d","sha1":"fbe37a44231e24bbc3050e664566c344039a9241","sha256":"0841b64d35bb922c573cb186dcbb14c888bbf0c96259de63d53aa568f41dc629","sha512":"f7d00ce8f12b2608fae25a5fb082f7f2a01ab24206045454b1e594051b4e0a302ba6406092a3df5ad64fea1d9347a10431679f0f6024154621a25777949556dc","ssdeep":"192:PkIEAHVaRmUC4aiJ5xYfgTeAuvJmFQMf/BJBQUhjrW:dEAHmmUC4aITeAy89Qr","tlshash":"3312c7952b857211476fe2b012ef1a0e896b006bfd035f70dc2c86a49f7495ae9f753c","size":9694,"data":"","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-05-26T18:31:23.42507Z","times_seen":621,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/skel.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"introduction_type":"scriptElement","is_inline":false,"md5":"93140e29fa68bab55ce6eae874ae674d","sha1":"763a8fc7504139cee50c453f87b5aa204965463a","sha256":"ddef8dbceabe0ffc9e272d6aad6a5890452be9294e08be661e97369d97d7ef81","sha512":"2e952de9f26e4cc9b7a34ab9c3cc9d317a46868dada80a1a46ee8c3fa4edd17d0a95cb7cc654e8bad064ed6879d512fd9fbfd04a99509eb500d54dd2e58ccc9e","ssdeep":"192:L0Jen8Uwku6z0UThJTA6z46mViUvBl9gU/gW8ck+F1cAfMfYcIy:tfwku6z0UvTz46mViUv1gU4W8Ujply","tlshash":"f412a5bc304374360a9e7171922fa11eba3b584af18744e4969cdd84fd74c1e823eead","size":9085,"data":"","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-07-19T07:44:13.290987Z","times_seen":332,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/jquery.scrolly.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ed5a78bde1476875a40f6b9ff44fc14","sha1":"91ee4deda8189fde4432a8f58cfe3b5f2aed9dcf","sha256":"8b6571ea2c3631ff50bb4b96e7f9081c6e33ebaadef9cb2ca5955d5e0b625a02","sha512":"8c1deaca425bd86a93a05624f9e80e803a2ece4673e012dfaf3ca79aa5dada7eb04ce5944b86346c125394ed5acb31f6e3f8d937237c77a2f109af0b0ba9c929","ssdeep":"","tlshash":"f00156c87545f14680f6e730081fd60b7126f637440c6895746bc9882db45279dade18","size":831,"data":"","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-07-21T08:18:50.714067Z","times_seen":988,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/main.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a35ee3c87481af498add7a03a32e4964","sha1":"6e76c90d1aa1dba4591097acf1211cddf4091b1c","sha256":"f0f8fe4b70486583c669e54eab436390c2211f8b9f93ad1e838236337766c0e1","sha512":"86183bf3cea5b9e00ff75376e137bc2134e330acb51b287dc6c639cf807144b2511d129f58c6623224b043224d2ae5b607c17b26e1620daccdf0d46a02328d58","ssdeep":"","tlshash":"bc41e2da702f756f0d77331ec67f5884073ee570a20903b6bca715bc52605c9567a88e","size":2165,"data":"","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-01-09T17:49:40.478964Z","times_seen":625,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/jquery.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"introduction_type":"scriptElement","is_inline":false,"md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","size":95957,"data":"","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-07-21T19:55:22.497652Z","times_seen":18280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/util.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd2716a7b68ce7748c9676787b61db43","sha1":"e32e958f74bd5edc4e1fbdd9fa6c30425d3c7954","sha256":"c2e1e72b0de356f6ce184e3af4fa8ab6590a2581162905a27d77886b2d960e00","sha512":"5b3750e70a8dc0745def9105669b96ae70affbbcf89478c755a8078e3354dce1258968cd55fa9dc9f7ea5ee57c1aef97f7dc675f1c266b879f25f6786d85e129","ssdeep":"384:8uuVLI9hkwbZo57c1VAcggOy3kDA8XiVD8bD:8LVLI9hkwbm9CVADgOy3kDA8XiVD8bD","tlshash":"2d4273d6b39f58df4d36325ac27ba448b23fcaf2410a1352f8a1ddbc706090d46354ae","size":12433,"data":"","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-07-21T08:18:50.703887Z","times_seen":1831,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/06.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/06.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"820891898cbdfc80382d385e240a9864","sha1":"accc32c0c34523e41bcbd618a08c919c51198f16","sha256":"33c565c3bd565a20bec627b7c63dcf4616bb2b87114aef9aab710e9c846502c6","sha512":"5243c034e48bf7ff8c225961ce925219d19b878cf210ee1a67107ab81fda37ff7278e9a51fa241f80998b1cc196278c6c0316f5e7c4565fb82bcba6f80c51526","ssdeep":"","tlshash":"8ec08099110111421620830029c271547597375d14d2c5047b89d027d8d4916c5c7184","first_seen":"2025-04-07T06:40:27.286212Z","last_seen":"2026-01-09T17:49:40.459455Z","times_seen":18,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/10.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/10.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8b760015611b55c0c4f0672f5031c1be","sha1":"5bac08d546bc447024505a3fe3220176f1c2e164","sha256":"c21663a7d62c1f9682b19f5fc40c53205879cc0126abc8c7fe9450692cda9d1d","sha512":"9986ddb5ea351c614e2d80983929d88c38ef5ba76974240cb9a466d6d12013038cf59f4c9d469349e695dadb85f638357d70b9f6d9b163eec465ba8fbf4c562e","ssdeep":"","tlshash":"2ac08c9a110121421b20d3002ac2229479973bad28e2c600bb8ae02be8d8a16cac7188","first_seen":"2025-04-07T06:40:27.296122Z","last_seen":"2026-01-09T17:49:40.485966Z","times_seen":18,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":141,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/jquery.poptrox.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/js/jquery.poptrox.min.js HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:37 GMT\r\nETag: W/\"25de-19ab6d13c93\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":9694,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9628), with CRLF line terminators","md5":"3dfba0ccc03b9fcf9886c4037996687d","sha1":"fbe37a44231e24bbc3050e664566c344039a9241","sha256":"0841b64d35bb922c573cb186dcbb14c888bbf0c96259de63d53aa568f41dc629","sha512":"f7d00ce8f12b2608fae25a5fb082f7f2a01ab24206045454b1e594051b4e0a302ba6406092a3df5ad64fea1d9347a10431679f0f6024154621a25777949556dc","ssdeep":"192:PkIEAHVaRmUC4aiJ5xYfgTeAuvJmFQMf/BJBQUhjrW:dEAHmmUC4aITeAy89Qr","tlshash":"3312c7952b857211476fe2b012ef1a0e896b006bfd035f70dc2c86a49f7495ae9f753c","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-05-26T18:31:23.42507Z","times_seen":621,"resource_available":true,"data":null}},"time_used":153,"timings":{"blocked":48,"dns":1,"connect":30,"send":0,"wait":32,"receive":1,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bcmontipt.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:44:44 GMT\r\nexpires: Sun, 03 Jan 2027 10:44:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 543863\r\nlast-modified: Tue, 16 Sep 2025 13:31:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30992, version 1.0","md5":"7dc7d01533c963a285fd36c5abbb58a2","sha1":"73ee042eb471294fba713f6ab9f91a93fe464583","sha256":"4608fe39fa0f9651ce629e11e99708914f569823ab37bd9d564fccbec7e1a4a4","sha512":"436bd20867d1a283d586d6911e8c6aa40a1a331ee5a54245c72726497346042843de95ef6d562c755f793e3883aabbb81bc41786a24311015592f1eb0a9be1dd","ssdeep":"768:v0hv0VMEt1jVDpK36ZjTSVKGCz8VfDrJkNuIBvkxyw:v0VEvjnKKZSVY8VfDlafE","tlshash":"04d2f1954aef7208f02917fda3ca015a550610eccbdc5aa5bbe2dca885148614e8f6ed","first_seen":"2025-09-17T00:11:12.784576Z","last_seen":"2026-07-21T22:28:46.125554Z","times_seen":20612,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":105,"dns":1,"connect":7,"send":0,"wait":17,"receive":3,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/fonts/fontawesome-webfont.woff2?v=4.6.3","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/fonts/fontawesome-webfont.woff2?v=4.6.3 HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/temp/assets/css/font-awesome.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 71896\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:42 GMT\r\nETag: W/\"118d8-19ab6d14fab\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":71896,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 71896, version 4.393","md5":"e6cf7c6ec7c2d6f670ae9d762604cb0b","sha1":"97e438cc545714309882fbceadbf344fcaddcec5","sha256":"7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73","sha512":"dd945face918edf20b7283b7416ae7b3735269945e3f3e379e770425024c1de1fcdc7cfb952381d295d0d1f58c8ab191fd29030f2051d10501557bd7bfbe3658","ssdeep":"1536:tA4xrPyfyECsyz2wCjYfhO/ORzc7erabg5Z06GEQMo:t3jayEC/2/OI/gcq+bg5C6G7","tlshash":"756302f87e71b01d5a306f74e56730e2491c9283e79593f8a8297cb681b2f493742c7a","first_seen":"2023-04-05T09:22:06Z","last_seen":"2026-07-21T22:28:00.175321Z","times_seen":41452,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/css/main.css","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/css/main.css HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:47 GMT\r\nETag: W/\"698c-19ab6d16527\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":27020,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (493)","md5":"916a29bd27cd10f6e2c8e577d974dcfb","sha1":"8fe917d4be19c7db466255aadc38d75828010be5","sha256":"cfea5bbce70f852aa560552e8b0e588b762c97aa75f0f5f90cbda54aa681907f","sha512":"72f96c1024393be895c4fa1f8050328473e790fa9fe4269bd6056865253d465240477179b94f25775e30ea48809afe106c1a1a5fce141add0575f03d602eff7c","ssdeep":"384:2afzBlJHr9ckMGvyXhKngG0ILhDfATaDWjX5eapk60VdQ2cOsKQH99vjo:2azVsKQM","tlshash":"f4c20fa49f0d1149870e81d9aaad77f0463c90315e0b2cffec426679a7cd15c07aafe9","first_seen":"2023-04-08T02:37:02Z","last_seen":"2026-01-09T17:49:40.469186Z","times_seen":69,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/09.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/09.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"d6a200380309f85d27c446ccbe61b9c4","sha1":"f82466c32838e12650c87b957966e78a6e5243d7","sha256":"0b8adcfab437e5f9416098242ac75f094aa3ba8585d382d1d0c4ead4f1253803","sha512":"a5d9c7e12db5c1448abccef64f2807176069f1dc177ff8d2d5f9b63f60df0ab7b92f78921395c90a6bcf41a75b882f5c6cc147ad31234f9e3ed3b9951f3dc584","ssdeep":"","tlshash":"e4c08099110111431620830429c271547597375d14d3c5007789e027d8d4916c5c7184","first_seen":"2025-04-07T06:40:27.285365Z","last_seen":"2026-01-09T17:49:40.477057Z","times_seen":18,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/02.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/02.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"0da1e4bc56f168b77a305a3b23d21e3f","sha1":"7b9beb2cf01d5a91217f1242b4a4df2bbcd81e09","sha256":"ac153c087b9f8500e8c35987d684ee3bdb36991438c9195baa907d3c09db411f","sha512":"31bfd587fe5b559653489515d66f783f24eca7adaea5f7b9013133cb5610be02aa305bddec6089d1a5058343e1a5101d73293ece4f67fa51f19ca76abc84ebd9","ssdeep":"","tlshash":"19c08099110111421620870029c2725475d7375d14d2c5047789d027d8d4a16c5c7184","first_seen":"2025-04-07T06:40:27.29521Z","last_seen":"2026-01-09T17:49:40.485231Z","times_seen":18,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":176,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/03.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/03.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"459a15ae13fe523a83ab19dcbe05fedb","sha1":"bdd5febbf7f8395a9830af9bec9be1f191792fac","sha256":"f729793a4063940445426ebbe048e44f9a057d1454bed9eaee243eeff055dfab","sha512":"9c11bd6649ce9f2c3d79c7ca3d50479b5d9c41bccf9ce9ec4660c8d59f4b53f2b784b0477be1ab2a0e3056dd7ad10c9257b54c82338312afa4652c2d29815d12","ssdeep":"","tlshash":"f1c08c9a210121461e2083002ec2b29476973bae28e2c600bb8ae02be8d4a16cac7188","first_seen":"2025-04-07T06:40:27.28979Z","last_seen":"2026-01-09T17:49:40.478147Z","times_seen":18,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":140,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/jquery.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/js/jquery.min.js HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:38 GMT\r\nETag: W/\"176d5-19ab6d141df\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":95957,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32038)","md5":"895323ed2f7258af4fae2c738c8aea49","sha1":"276c87ff3e1e3155679c318938e74e5c1b76d809","sha256":"ecb916133a9376911f10bc5c659952eb0031e457f5df367cde560edbfba38fb8","sha512":"c40111c3cc0754e90cf71f72f7f16f43b835b7e808423dfd99f90dd5177538b702e64ff1d9ee8d3bc86aeaa11b6f7a0ef826184e354b162158839ffb75d174cc","ssdeep":"1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmc:R+41ZqLTW8xRrqSb8qGH77da98Hrf","tlshash":"3b93d8d9b7d67162977730b850bf510bb13a98eab80c4ca0f0a4d8e47d74a89507bf2d","first_seen":"2023-03-07T01:02:25Z","last_seen":"2026-07-21T19:55:22.497652Z","times_seen":18280,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":41,"dns":0,"connect":26,"send":0,"wait":62,"receive":4,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Nunito+Sans:300,400,600","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Nunito+Sans:300,400,600 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 09 Jan 2026 17:49:07 GMT\r\ndate: Fri, 09 Jan 2026 17:49:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6603,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a1b25353f061e7b017e0189151b4dcb","sha1":"f2f12cdd8b8757bc19717c9b948955d65d5723ed","sha256":"978f74abe0061312cb5956513a6228cb3520cb5e8d4c527b60cfc156b55c4436","sha512":"caee2e85b3f1b62fba136497865bf791997218b493943c4bce8500f741b37178d9cdb7c4e51a0279fd0a6c4d6dc0f4cfb7eca01fca91b87c3f19fcdf640c69db","ssdeep":"192:8vc3svcKhvcFvct+vcvTvc3xvcKcvcIvctnvcvJvc3bvcK6vc2vcttvcvF:n33KiWjvw3SKHjWva3oKRNsvF","tlshash":"79d10f90043aa494a6037cc233dfbe359f5fe0513016d43dbafc9859dca6c6a5366b4e","first_seen":"2025-10-18T01:18:44.275327Z","last_seen":"2026-07-19T07:44:13.370986Z","times_seen":24,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":93,"dns":0,"connect":7,"send":0,"wait":21,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/skel.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/js/skel.min.js HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:34 GMT\r\nETag: W/\"237d-19ab6d1314f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":9085,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (9033), with CRLF, LF line terminators","md5":"93140e29fa68bab55ce6eae874ae674d","sha1":"763a8fc7504139cee50c453f87b5aa204965463a","sha256":"ddef8dbceabe0ffc9e272d6aad6a5890452be9294e08be661e97369d97d7ef81","sha512":"2e952de9f26e4cc9b7a34ab9c3cc9d317a46868dada80a1a46ee8c3fa4edd17d0a95cb7cc654e8bad064ed6879d512fd9fbfd04a99509eb500d54dd2e58ccc9e","ssdeep":"192:L0Jen8Uwku6z0UThJTA6z46mViUvBl9gU/gW8ck+F1cAfMfYcIy:tfwku6z0UvTz46mViUv1gU4W8Ujply","tlshash":"f412a5bc304374360a9e7171922fa11eba3b584af18744e4969cdd84fd74c1e823eead","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-07-19T07:44:13.290987Z","times_seen":332,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":52,"dns":1,"connect":29,"send":0,"wait":33,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/05.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/05.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a6f5ac01a078a3750432d6c5b03bc613","sha1":"72173a26c78529a2c17ddb1742f133ae31c8a26a","sha256":"5c8261c6aa060dcab9dfb00cd859745437b24b6d8b7c780d555ff4a655089d36","sha512":"19cf09401aa6b59fb0fcd80d43c3800316c7b5e607a44b21a8636600585d7de868e729e97ba35dfe8b44a7ae76f7ba663fe4f657e8e2421e0d8aea48c2d5366f","ssdeep":"","tlshash":"ebc08c9a110121421a2083403ac2b29476973bae28e2c644bb8ee02becd4a16cad7188","first_seen":"2025-04-07T06:40:27.284331Z","last_seen":"2026-01-09T17:49:40.479694Z","times_seen":18,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/07.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/07.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"aab09569e5b8b2a4eb10ae952e1795f3","sha1":"082c69eb2ff10553dd7511ff992d8e3f01e1b878","sha256":"1a3f171484e384903fe4c37e99e5e05e4f39ebf8d7cb88ade82bf6ac3a355131","sha512":"beb866ade4a6efd36aaab63ade84e4cb14f5e83f2ae8c6dee39d4e98278ef12ed777736a4add416f9ccde5edcfae9ea4c8d0beaa9b6314604c294ef446708332","ssdeep":"","tlshash":"bac08099110111421620830029c271547597375d18e3c500778ad067d8d4916c5c7184","first_seen":"2025-04-07T06:40:27.290551Z","last_seen":"2026-01-09T17:49:40.460262Z","times_seen":18,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/jquery.scrolly.min.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/js/jquery.scrolly.min.js HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 831\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:35 GMT\r\nETag: W/\"33f-19ab6d136ef\"\r\nVary: Accept-Encoding\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":831,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (770), with CRLF line terminators","md5":"1ed5a78bde1476875a40f6b9ff44fc14","sha1":"91ee4deda8189fde4432a8f58cfe3b5f2aed9dcf","sha256":"8b6571ea2c3631ff50bb4b96e7f9081c6e33ebaadef9cb2ca5955d5e0b625a02","sha512":"8c1deaca425bd86a93a05624f9e80e803a2ece4673e012dfaf3ca79aa5dada7eb04ce5944b86346c125394ed5acb31f6e3f8d937237c77a2f109af0b0ba9c929","ssdeep":"","tlshash":"f00156c87545f14680f6e730081fd60b7126f637440c6895746bc9882db45279dade18","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-07-21T08:18:50.714067Z","times_seen":988,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":49,"dns":0,"connect":29,"send":0,"wait":30,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/main.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/js/main.js HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:35 GMT\r\nETag: W/\"875-19ab6d13427\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2165,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a35ee3c87481af498add7a03a32e4964","sha1":"6e76c90d1aa1dba4591097acf1211cddf4091b1c","sha256":"f0f8fe4b70486583c669e54eab436390c2211f8b9f93ad1e838236337766c0e1","sha512":"86183bf3cea5b9e00ff75376e137bc2134e330acb51b287dc6c639cf807144b2511d129f58c6623224b043224d2ae5b607c17b26e1620daccdf0d46a02328d58","ssdeep":"","tlshash":"bc41e2da702f756f0d77331ec67f5884073ee570a20903b6bca715bc52605c9567a88e","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-01-09T17:49:40.478964Z","times_seen":625,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":51,"dns":1,"connect":34,"send":0,"wait":32,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/nunitosans/v19/pe0TMImSLYBIv1o4X1M8ce2xCx3yop4tQpF_MeTm0lfGWVpNn64CL7U8upHZIbMV51Q42ptCp7t1R-tQLL50tE8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bcmontipt.sbs\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30992\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 03 Jan 2026 10:44:44 GMT\r\nexpires: Sun, 03 Jan 2027 10:44:44 GMT\r\ncache-control: public, max-age=31536000\r\nage: 543863\r\nlast-modified: Tue, 16 Sep 2025 13:31:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30992,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30992, version 1.0","md5":"7dc7d01533c963a285fd36c5abbb58a2","sha1":"73ee042eb471294fba713f6ab9f91a93fe464583","sha256":"4608fe39fa0f9651ce629e11e99708914f569823ab37bd9d564fccbec7e1a4a4","sha512":"436bd20867d1a283d586d6911e8c6aa40a1a331ee5a54245c72726497346042843de95ef6d562c755f793e3883aabbb81bc41786a24311015592f1eb0a9be1dd","ssdeep":"768:v0hv0VMEt1jVDpK36ZjTSVKGCz8VfDrJkNuIBvkxyw:v0VEvjnKKZSVY8VfDlafE","tlshash":"04d2f1954aef7208f02917fda3ca015a550610eccbdc5aa5bbe2dca885148614e8f6ed","first_seen":"2025-09-17T00:11:12.784576Z","last_seen":"2026-07-21T22:28:46.125554Z","times_seen":20612,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":106,"dns":0,"connect":9,"send":0,"wait":9,"receive":8,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/favicon.ico","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Thu, 16 Sep 2021 21:47:28 GMT\r\nETag: W/\"e36-17bf0942d80\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3638,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 16x16, 32x32","md5":"43c1602b1137e4d1c19eb729b8459fb0","sha1":"1d619b77a64aea2935b01ee3b6c0e8f22e1984f2","sha256":"21f540a884a6e01767a0f8102f9f5023da01aa945bae6becfbe3a44f1eeb461c","sha512":"ed9441fedbcd94f933db07e24e25b51163026bc4577d6794c6f3b71fb724b1374a6fd3b3ac68190ae092f515f53aaf0ca9b3362074629783f9654c90b25e5c36","ssdeep":"","tlshash":"5671d8c07580e054df6e4a70262b5ea2af2620d2b8e164db50b51e8ffdb91c3702bcc8","first_seen":"2023-05-09T19:50:14Z","last_seen":"2026-01-09T17:49:40.474091Z","times_seen":56,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/js/util.js","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/js/util.js HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:33 GMT\r\nETag: W/\"3091-19ab6d12e6f\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":12433,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"fd2716a7b68ce7748c9676787b61db43","sha1":"e32e958f74bd5edc4e1fbdd9fa6c30425d3c7954","sha256":"c2e1e72b0de356f6ce184e3af4fa8ab6590a2581162905a27d77886b2d960e00","sha512":"5b3750e70a8dc0745def9105669b96ae70affbbcf89478c755a8078e3354dce1258968cd55fa9dc9f7ea5ee57c1aef97f7dc675f1c266b879f25f6786d85e129","ssdeep":"384:8uuVLI9hkwbZo57c1VAcggOy3kDA8XiVD8bD:8LVLI9hkwbm9CVADgOy3kDA8XiVD8bD","tlshash":"2d4273d6b39f58df4d36325ac27ba448b23fcaf2410a1352f8a1ddbc706090d46354ae","first_seen":"2023-03-07T12:26:00Z","last_seen":"2026-07-21T08:18:50.703887Z","times_seen":1831,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/assets/css/font-awesome.min.css","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/assets/css/font-awesome.min.css HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/temp/assets/css/main.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:48 GMT\r\nETag: W/\"7187-19ab6d169bb\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":29063,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (28900)","md5":"4083f5d376eb849a458cc790b53ba080","sha1":"fb5b49426dee7f1508500e698d1b3c6b04c8fcce","sha256":"008a1d103902f15fdb1c191fcb1ce8954330e7b8de43d09abb08555ba609f420","sha512":"e2e1991e96c3962371880bff43364da3fc9bd85b405feaa20dbef2a415a211d2505fc3ee829f0cea297949190df2342b0cb5ac877aeb3c349745fdc3c0560cea","ssdeep":"384:Uu5yWeTUKW+KlkJ5de2UYDyVfwYUas8l8yQ/8dwwdG:flr+Klk3Yi+fwYUf8l8yQ/eC","tlshash":"a4d250e8e54c01d66731c48bff81b36862b6f73dd5844d99f01f690c29d22a522c5fba","first_seen":"2023-04-05T09:56:39Z","last_seen":"2026-07-21T21:39:14.604052Z","times_seen":21407,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/temp/images/banner.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /temp/images/banner.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/temp/assets/css/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 121236\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=7200\r\nLast-Modified: Mon, 24 Nov 2025 17:02:32 GMT\r\nETag: W/\"1d994-19ab6d12b9f\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":121236,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x1080, components 3","md5":"272dc25d47760f2272090b643419b5e1","sha1":"26faf56863a541fd48a126724e54943deb6e751c","sha256":"f4c1a2bc4743bd36cb15d9454347dc45c86e5446da11d73215e0edc6c0139951","sha512":"7c110de86c4b3c4ed3de8a86ca40085927340ffcb49732ed0727acba369e9f5b3119a82e5f8ed00f8958fbd789a4e21020a453a17f0e3797109bc89fc9c820d4","ssdeep":"3072:sznC3nsk26oHcNzADumpO1kVGbFKRoqdpt+8vHkB1oAflmVp3:r3McNzADVp3VDhtzEB1oAS","tlshash":"b4c312aa5768a321c068e53dc57ded2c3cbc190ed0c46a6a269bfd1c21172cfd853a72","first_seen":"2025-03-17T06:04:08.975965Z","last_seen":"2026-01-09T17:49:40.488538Z","times_seen":46,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-09T17:49:07.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nETag: W/\"1564-sh4J02wDQ6vM3CY0a1fqcUFaxHI\"\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5476,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (553)","md5":"44a7764850c780496e2fbe31667ccb51","sha1":"b21e09d36c0343abccdc26346b57ea71415ac472","sha256":"0f27bcca4ccb775f0482a74211f76a96774a542d40f40e6cef854e0e4be194c9","sha512":"a5b58a3e4821f786982a612c262e95f4ac44dd57c1dfb7699839cd74a38bed6844d5636e041bd28a1aceb163f7476dd3cad2b8df2cf28002f3639c13188ed8cc","ssdeep":"96:uJyhzd6U/35UBtMYse0eseQegeUeUe8Ky3VtrIf+MkBfc2om/gN+0KGXQHBEWmUt:uJ1m5ktMRDjfnrrrKy3Vtr6L4yXBp74L","tlshash":"32b145145d8e2c3b0313129bb10fb6ac60ffae32e6335865f1bf05aa5792d459717871","first_seen":"2025-04-07T06:40:27.293451Z","last_seen":"2026-01-09T17:49:40.475596Z","times_seen":25,"resource_available":false,"data":null}},"time_used":447,"timings":{"blocked":184,"dns":122,"connect":29,"send":0,"wait":76,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bcmontipt.sbs/images/thumbs/01.jpg","fqdn":"bcmontipt.sbs","domain":"bcmontipt.sbs","tld":"sbs"},"ip":{"addr":"196.251.100.147","port":443,"asn":37684,"as":"ANGANI-AS","country":"Kenya","country_code":"KE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bcmontipt.sbs/","date":"2026-01-09T17:49:07.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bcmontipt.sbs","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Jan 2026 06:17:07 GMT","end":"Thu, 09 Apr 2026 06:17:06 GMT"},"fingerprint":{"sha1":"EC:41:2F:33:F9:1C:3A:78:20:42:21:AE:17:17:B2:A5:47:37:64:DC","sha256":"B6:8F:6A:7E:96:B7:CF:79:73:A0:B7:21:04:9C:8B:6B:7B:E5:8B:5A:84:0B:35:57:0B:52:4F:D9:67:B3:0E:AB"}}},"request":{"raw":"GET /images/thumbs/01.jpg HTTP/1.1\r\nHost: bcmontipt.sbs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bcmontipt.sbs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Fri, 09 Jan 2026 17:49:07 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nX-Powered-By: Express\r\nContent-Security-Policy: default-src 'none'\r\nX-Content-Type-Options: nosniff\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"4aef7094f536be68e9d3302e9cf4ff16","sha1":"0e53c38c61ee8fcb318c5e32f6913e9b0a30b63f","sha256":"60721c6be1751a23b511648ee4839b714f3ce3c816151cebeea94beea86a3ff2","sha512":"51cd6e8d5a60f7fb0f38b1ffa2d6f788ded5098742cd89db93afd9344345aa161d37d0c6b89e14d320f052c3c55b9ed631f70b56b3958196d539e7be8eb07946","ssdeep":"","tlshash":"edc08099110111421620830029c271547597379f14d2c5007789d027d8d4916c5c7184","first_seen":"2025-04-07T06:40:27.289037Z","last_seen":"2026-01-09T17:49:40.470422Z","times_seen":18,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-09","alert":"Sinkholed","trigger":"bcmontipt.sbs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-01-09","alert":"Phishing Block","trigger":"bcmontipt.sbs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}