{"report_id":"6d785954-924c-4a91-a8dc-9a1a001684cb","version":0,"status":"done","tags":[],"date":"2026-10-07T15:24:51Z","url":{"schema":"https","addr":"trump-ncaa.live/","fqdn":"trump-ncaa.live","domain":"trump-ncaa.live","tld":"live"},"ip":{"addr":"31.77.228.174","port":0,"asn":202226,"as":"Great Flower","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"trump-ncaa.live/","fqdn":"trump-ncaa.live","domain":"trump-ncaa.live","tld":"live"},"title":"User verification...","dom":{"size":142554,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8272)","md5":"17620f2a9720b6619b125878accdde76","sha1":"462f857ccf959ca0ed17cbf9336ce95ff4c7cd16","sha256":"1d2e2dc062fbe4947ea5e77e97dfbb04389c642717ea56ecb9e5a1d7f6f6108f","sha512":"56b1f068ead7f772c47a92659792c2c173a4998ade4c992f4bb677e6675cd5898bd6100b3340ef0672af9524f5d732010c0c90472a33f4cc3cb4958605e89db3","ssdeep":"1536:B6m+9MCukluT7fvluOuIu0nex4oL2YluT7fG6j78h9M39kaWIFC24TaTf:BRVk0T7fv0t3kn20T7fG6NTf","tlshash":"b7d3095d85a3243604373079ebbf764d35b180039406ce62fc5d8a65efd4a3a86f6be8","dom_hash":"domhash8047cb674cffaab0324a9b268e302016","first_seen":"2026-10-07T15:24:58.777245Z","last_seen":"2026-10-07T15:24:58.777245Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"trump-ncaa.live/","fqdn":"trump-ncaa.live","domain":"trump-ncaa.live","tld":"live"},"ip":{"addr":"31.77.228.174","port":0,"asn":202226,"as":"Great Flower","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T15:24:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r1.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r4.us.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r4.us.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"10052024.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-03-11","domain_rank":0,"first_seen":"2026-03-17T07:46:24.399337Z","last_seen":"2026-09-28T11:42:22.872528Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":458,"comment":"","tags":null,"fingerprints":null},{"fqdn":"data.killbot.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2017-03-10","domain_rank":1526997,"first_seen":"2017-05-11T22:19:46Z","last_seen":"2026-10-02T19:57:26.287599Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":462,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r6.sg.kill-bot.net","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-12-29","domain_rank":0,"first_seen":"2026-09-08T08:36:00.030681Z","last_seen":"2026-09-16T21:44:09.902674Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":465,"comment":"","tags":null,"fingerprints":null},{"fqdn":"trump-ncaa.live","ip":{"addr":"31.77.228.174","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-07T15:24:52.695539Z","last_seen":"2026-10-07T15:24:52.695539Z","alert_count":0,"request_count":2,"received_data":166493,"sent_data":1027,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"r1.kill-bot.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-12","domain_rank":0,"first_seen":"2025-09-04T11:27:28.257872Z","last_seen":"2026-09-16T21:44:09.857073Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":461,"comment":"","tags":null,"fingerprints":null},{"fqdn":"r3.nl.kill-bot.ru","ip":{"addr":"212.108.82.180","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-10-12","domain_rank":0,"first_seen":"2026-04-28T09:39:53.936063Z","last_seen":"2026-09-16T21:44:10.711098Z","alert_count":8,"request_count":4,"received_data":14048,"sent_data":2768,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"r4.us.kill-bot.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2024-10-12","domain_rank":0,"first_seen":"2026-04-28T09:39:53.93679Z","last_seen":"2026-10-04T11:54:55.019626Z","alert_count":2,"request_count":1,"received_data":0,"sent_data":464,"comment":"","tags":null,"fingerprints":null},{"fqdn":"sci-hub.ru","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2013-01-18","domain_rank":79648,"first_seen":"2015-04-08T07:26:12Z","last_seen":"2026-10-06T08:48:23.565976Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":455,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trump-ncaa.live/","fqdn":"trump-ncaa.live","domain":"trump-ncaa.live","tld":"live"},"ip":{"addr":"31.77.228.174","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"50afe9211d2209a79467d1526afae736","sha1":"aa98bca1fa7e978cbe969a03de1efe18afe8ca31","sha256":"55634d8405e7c9f7c7c3bd8ad94cd2ad2cd5eed155de3ab84dfd9b97c1146c97","sha512":"64826c0008efadcdd068bfcd825779aa2a7cac68e6a1f59ce9b534f22a94c49375be08661845707fe1d3be83d052170ee54d9976d0a3915f035aeefed5f3731b","ssdeep":"192:477jp2uJTf1Io8JxoB4tw+716ZHKk6yL3CLgkJIea/5HJvOsAxUDTMHUTiWhab6P:Mdf1G9jIHzSgCIF/7vOsikTM0Wha","tlshash":"ef421a6d63e324678837218fab4f510436658413345ac8a0394d4e256fc4eabedf9fec","size":12482,"data":"","first_seen":"2026-10-07T15:24:58.77948Z","last_seen":"2026-10-07T15:24:58.77948Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trump-ncaa.live/","fqdn":"trump-ncaa.live","domain":"trump-ncaa.live","tld":"live"},"ip":{"addr":"31.77.228.174","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e815c14ffba8b08296babfaf2140afe6","sha1":"5b2a0a283eda7d0e9859cfbe69126498d638342c","sha256":"93223f76998305299fc9aa896d91a5c9191f511d6b9c8465e30c028ca4e55483","sha512":"d3c86f56def1fa176b922d246a0457d5a437c59af49b1da2b90214b286be36d4dd9fa1680ab46c8eaa35669c56f02733b980af3dc28deaa898e7eddd0861dc9c","ssdeep":"192:EXA60qFw/83BIvv17xs1CBF3hBEQrkafZtoU72Oz6EQ93wjJ9DjDTVnG2tIWFSg/:4LFw2uv1N773PFFfkg19bbtIESzHjw","tlshash":"01621915ae131934853b322b8b6f5b45b472c8474843ca40f4aeddacbfe4a57427e7e8","size":15624,"data":"","first_seen":"2026-10-07T15:24:58.784569Z","last_seen":"2026-10-07T15:24:58.784569Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"10052024.ru/ping","fqdn":"10052024.ru","domain":"10052024.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.527Z","timestamp":1791386661527,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ping HTTP/1.1\r\nHost: 10052024.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r1.kill-bot.ru/ping","fqdn":"r1.kill-bot.ru","domain":"kill-bot.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.530Z","timestamp":1791386661530,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ping HTTP/1.1\r\nHost: r1.kill-bot.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r1.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"data.killbot.ru/ping","fqdn":"data.killbot.ru","domain":"killbot.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.544Z","timestamp":1791386661544,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ping HTTP/1.1\r\nHost: data.killbot.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r3.nl.kill-bot.ru/ping","fqdn":"r3.nl.kill-bot.ru","domain":"kill-bot.ru","tld":"ru"},"ip":{"addr":"212.108.82.180","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.546Z","timestamp":1791386661546,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /ping HTTP/1.1\r\nHost: r3.nl.kill-bot.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 07 Oct 2026 15:24:21 GMT\r\ncontent-length: 4\r\nlast-modified: Wed, 07 Oct 2026 15:24:01 GMT\r\netag: \"6ac66411-4\"\r\nContent-Type: text/plain,text/plain\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: *\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r6.sg.kill-bot.net/ping","fqdn":"r6.sg.kill-bot.net","domain":"kill-bot.net","tld":"net"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.552Z","timestamp":1791386661552,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ping HTTP/1.1\r\nHost: r6.sg.kill-bot.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r3.nl.kill-bot.ru/js/cn.js?hash_str=dns\u0026p=MTk1LjY0LjExOC4xNTI=\u0026r=\u0026url=aHR0cHM6Ly90cnVtcC1uY2FhLmxpdmUv\u0026c=17913866616407706\u0026kbUserID=796318796\u0026lv=46972\u0026v=0\u0026rmd0.8999593157962277","fqdn":"r3.nl.kill-bot.ru","domain":"kill-bot.ru","tld":"ru"},"ip":{"addr":"212.108.82.180","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.673Z","timestamp":1791386661673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r3.nl.kill-bot.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 23:05:09 GMT","end":"Tue, 29 Dec 2026 23:05:08 GMT"},"fingerprint":{"sha1":"4D:47:74:D3:DE:DA:C0:60:58:7F:A1:F3:CF:FC:16:9D:A2:B9:0E:DB","sha256":"63:4D:AF:C3:83:93:1E:C4:19:79:2B:3E:24:41:61:D0:92:1F:1A:D8:AF:F8:DB:E4:CB:04:69:1A:8D:50:1C:9A"}}},"request":{"raw":"GET /js/cn.js?hash_str=dns\u0026p=MTk1LjY0LjExOC4xNTI=\u0026r=\u0026url=aHR0cHM6Ly90cnVtcC1uY2FhLmxpdmUv\u0026c=17913866616407706\u0026kbUserID=796318796\u0026lv=46972\u0026v=0\u0026rmd0.8999593157962277 HTTP/1.1\r\nHost: r3.nl.kill-bot.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 07 Oct 2026 15:24:21 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4370\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":12482,"size_decoded":4612,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1463)","md5":"50afe9211d2209a79467d1526afae736","sha1":"aa98bca1fa7e978cbe969a03de1efe18afe8ca31","sha256":"55634d8405e7c9f7c7c3bd8ad94cd2ad2cd5eed155de3ab84dfd9b97c1146c97","sha512":"64826c0008efadcdd068bfcd825779aa2a7cac68e6a1f59ce9b534f22a94c49375be08661845707fe1d3be83d052170ee54d9976d0a3915f035aeefed5f3731b","ssdeep":"192:477jp2uJTf1Io8JxoB4tw+716ZHKk6yL3CLgkJIea/5HJvOsAxUDTMHUTiWhab6P:Mdf1G9jIHzSgCIF/7vOsikTM0Wha","tlshash":"ef421a6d63e324678837218fab4f510436658413345ac8a0394d4e256fc4eabedf9fec","first_seen":"2026-10-07T15:24:58.77948Z","last_seen":"2026-10-07T15:24:58.77948Z","times_seen":1,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r4.us.kill-bot.ru/ping","fqdn":"r4.us.kill-bot.ru","domain":"kill-bot.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.548Z","timestamp":1791386661548,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /ping HTTP/1.1\r\nHost: r4.us.kill-bot.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r4.us.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r4.us.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"r3.nl.kill-bot.ru/cn.php?url=aHR0cHM6Ly90cnVtcC1uY2FhLmxpdmUv\u0026r=\u0026png=17\u0026raf=75\u0026lv=46972\u0026id=NDY5NzI=\u0026p=MTk1LjY0LjExOC4xNTI=\u0026rr=1791386662218\u0026u=eyJDIjp7Im1heFRvdWNoUG9pbnRzIjowLCJCIjpmYWxzZX0sIkQiOnsidmVuZG9yIjoiTWVzYSIsIkEiOiJsbHZtcGlwZSwgb3Igc2ltaWxhciIsIkExIjoibGx2bXBpcGUsIG9yIHNpbWlsYXIifSwiaCI6eyJtIjoxNiwibCI6MTYzODQsIm8iOjQwOTYsImkiOjE2Mzg0LCJqIjozMiwicyI6eyIwIjoxNjM4NCwiMSI6MTYzODR9fSwicGx1Z2lucyI6WyJQREYgVmlld2VyIiwiQ2hyb21lIFBERiBWaWV3ZXIiLCJDaHJvbWl1bSBQREYgVmlld2VyIiwiTWljcm9zb2Z0IEVkZ2UgUERGIFZpZXdlciIsIldlYktpdCBidWlsdC1pbiBQREYiXSwiZyI6eyJ0aW1lWm9uZSI6IlVUQyIsImxvY2FsZSI6ImVuLVVTIn0sInUiOm51bGwsInYiOjF9\u0026c=17913866616407706\u0026ng=0\u0026ybf=0","fqdn":"r3.nl.kill-bot.ru","domain":"kill-bot.ru","tld":"ru"},"ip":{"addr":"212.108.82.180","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:22.229Z","timestamp":1791386662229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r3.nl.kill-bot.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 23:05:09 GMT","end":"Tue, 29 Dec 2026 23:05:08 GMT"},"fingerprint":{"sha1":"4D:47:74:D3:DE:DA:C0:60:58:7F:A1:F3:CF:FC:16:9D:A2:B9:0E:DB","sha256":"63:4D:AF:C3:83:93:1E:C4:19:79:2B:3E:24:41:61:D0:92:1F:1A:D8:AF:F8:DB:E4:CB:04:69:1A:8D:50:1C:9A"}}},"request":{"raw":"POST /cn.php?url=aHR0cHM6Ly90cnVtcC1uY2FhLmxpdmUv\u0026r=\u0026png=17\u0026raf=75\u0026lv=46972\u0026id=NDY5NzI=\u0026p=MTk1LjY0LjExOC4xNTI=\u0026rr=1791386662218\u0026u=eyJDIjp7Im1heFRvdWNoUG9pbnRzIjowLCJCIjpmYWxzZX0sIkQiOnsidmVuZG9yIjoiTWVzYSIsIkEiOiJsbHZtcGlwZSwgb3Igc2ltaWxhciIsIkExIjoibGx2bXBpcGUsIG9yIHNpbWlsYXIifSwiaCI6eyJtIjoxNiwibCI6MTYzODQsIm8iOjQwOTYsImkiOjE2Mzg0LCJqIjozMiwicyI6eyIwIjoxNjM4NCwiMSI6MTYzODR9fSwicGx1Z2lucyI6WyJQREYgVmlld2VyIiwiQ2hyb21lIFBERiBWaWV3ZXIiLCJDaHJvbWl1bSBQREYgVmlld2VyIiwiTWljcm9zb2Z0IEVkZ2UgUERGIFZpZXdlciIsIldlYktpdCBidWlsdC1pbiBQREYiXSwiZyI6eyJ0aW1lWm9uZSI6IlVUQyIsImxvY2FsZSI6ImVuLVVTIn0sInUiOm51bGwsInYiOjF9\u0026c=17913866616407706\u0026ng=0\u0026ybf=0 HTTP/1.1\r\nHost: r3.nl.kill-bot.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Length: 7788\r\nOrigin: https://trump-ncaa.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trump-ncaa.live/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":11800,"data":"\u001f‹\b\u0000\u0000\u0000\u0000\u0000\u0000\u0003í}Ys«º¶î_¢\t¹Ë\u000fûa:\u0006l\u0012ä‰@\u0012è\ro0\bŒ;Lí\u001f†°Ó̹¼nªƒÙçá\u003e¤’\u0018¬f´ß††6gïW\u0012ó\u00023«HêNò§Õãj»Ú­j!…-ŠŒÑSÂp¿*߶«íi›×´\u0013ŒöÂÖ=lËyb ™›þv\rO_ž¼}f¶K\u001ecš\u001bô\u001c1Z¥ÌþxÖsfUAM‹Ä˜\u001dn´'¹+‹Ð \u00161e/\\º\u000f\u0018*yŒ\u003eûæ\u0006Ղ˜j™9ß%±\f2£k\u0013³úhÿ̙hs\u0013Ë\\Îϙ‰ÐÏ.t\u0003w;™o¯ójp‘2KûÛ|›¹Ìk\u001d¾ÚÌ°\u003eû̘ÜsŠ­Ü¥_4p;\u001bòŸ?¿[qÉ[\u001e\u000b™Wô0oÇY°]7ø,\u0018\u0001ZâcTÏ4ºô`î;\u0018¯§g\r:q†Z^K5\u0006xG/6\u000e\u003e\n†Þˆ;k³f ùIє3Ü\u0026\u0004\u0015¹ëlSֵ•ò³ïzÖ'æ\\Wc‹\\y\u0010ñëëfñjÄ}¢©±ŠšÂüg珱üOLºýœÏÒ;ò%-…ƒôDÑ©\\üè‡úéÔs ã15¤üN3±ôt\u001e³†¶™‹=üôñ½×Î_üP?'õs¡¡’\u0003Çæ1o\u0013ã\u001b\u001dAFD-KNÅ1¯÷_\u003cª\u0011ð\u0012K A›°îóý\u0004ø»Þ1‰½ê‹?Cۑ’“”}ɕˆA.+§\u0004Z\u0019IŒ§\u000f\u001frb\u0026l/#wV¦Ÿ4쎊Ÿ_rÖ\u001d“Úّ¥×ŠÚ)7\u0004\u001da,çÌ8}ñ´\u00112©ñ9ù0n\u000eïç†âuQä56aŒ2\u00009OLz\u0006\u0019?\frZ¾\u000ez•©ö\rGû\u003eÞ$žŸàýŠ\u0013\u000btŽ(\u0019A K@Û®øx\u001eÕΞ‡0æʒb‰JøL~\u003c£5ôcÈc6ð\u001cü§\u001folawÏá Ÿ /¸ÎLoÿrr¡W\u0003:ª\rï°Ù#ÈÚ.\tÿÒ_Ê\u001f¯ÏŽh3caú¯‘\f^A6\u000eþb÷Jn¨\fþÏjùj ø?o’G?ò5øN»²FÆþøÒ“'›·@\u000f\u0018ËëñúžâÉ)¯g\u0015ÈþÐ76h™\u001a©Ïw\t³\u001aÁ`\\jÞ@Ç\u0017J£ïJ¯MZðoò”)ž~Ù¢cVu0fòg\bl‡\u0007ß!Ã;ÿ7ø׿þ\rƒxðŸ\u001ez?\u0002S\u0016ýè×Ñ\u000fÃ/É#ꃃß\u000fBÜû\u000bÒ¡ž˜ë…ý¯oÎ^\u0001RÑf@\u0011¾ÄoÐ{痯JS/ŸÛ…L™x\u0013 \u00110ã3z\u0002ê\u001a²\u0012î+H€}^/~()ùÛ;ÊZÁè@KæZª\u003e/\u0003ŹvãÒ\u001dvééòý•\u0006ýÀ,~Àߪ\u001dÐÆ\u0026¸þí\u0018\t“;êÎNWËq\u001dÏ÷wô㦚SF\u000fÂý’ÀšW‰z‰çð\\/ò¦ºPQ}§þý;‰Q\u0014\u0019Hòªl\u000f\u0002¤D½—ƒ%\u0003-)@ã\u0006)ܘúL\u0011«\u0004¶ôWöYa‰ÊŒNŒŠç\\o£0âUh¿uL\"3¥mŒ\"gKunÝ~^×1M3Ö\u001d¸S\u003c§ŽÜoÜÎK›\u001f§Ä°Xærü3Ò\u0006W#.DØòX\u003eû\u0006Úg‹9§ZÛC;\u001eªñ*,”˜¢e2×}æÅ´‘·ŸG+KÐvŸ¹VÅìö1ý!³å¯|1/3Éw\\Ú³ŸJÅj~\u0004Uï§íÓۉx¥L…ܐ·\u003e1ôïÈ8lPJ´ÊàvñìÓ6\u0002áKiOºD\n¶¡7Ÿs¿”:«õ\u001d¨x\u0012Ö\u0005Ïâb\u0017²öä»è@ë®\u0026‘6\u001bT̜ËÁÄLÇË\"sÁM\u003cMÚg\t\u0010 N㋹œŒŸ\rÀ\u0016C?M\u003cW0½à\u000e\u0026î33‘\u0006ð°ÏOÓ\u003e\u0019oÁÈi\u0002Ü3\u0006×}…Y\u0013òؓ Ï\u0005@\u001fGA1±ô'Õ_\u0005¡‰A\u0001ž¢Oã?½R!\u0005@©x®\u0003¼¯ˆ‰­Ì%ÓÚ/æhà¼Ð\u0000©§•;\b¸¤î_\u0013ÏwfpâYSË8@ÑG\b›Žÿ‘~'Ÿ/*\u0001¾î²im(„}\u0000Î܎dçÿH¿O›iõ§á1¶9ã\u0005\u0000N\rB¥}¾¤\u001aèq$–r75¾ü¤\u0001Q!ÆĸïCÞlÏ\".øÏxZ\u001f\"ây\u0005á¤\no÷`O!p˜Ø‡\u0001^áÓê\u001a„¦ú´ñDƒ¤p.ölXNšV¾Ï\u003cvt\u001e#-dxÇ\t\u0002\fÞm\u0013†Þ§Å\u000bÐo$\u003c«\u00003-\u0012µ\u001cQ;—e›ÿ\u0000-\u0002fµ\n?(܄\u001bïc™f2¹O\f\u0007\u0002oºûO#¯)àwOñwÎÌiãϤÁljq[!ÜÙvzÝÇÀcz\u0014q0±Œu2‰=’2]f\u0026Õ\u0026Ÿ·\r±¨Š÷kg7±­˜È9‡ÌÒxì\u0019\t;M«S1…V(J\u0019R[\u0017\u0010\u001fî¦å»éIåÓC¦«%Õ§4Æû$þ1-\rLµL‹†ØœÛh—\u0019–œx\rO\n\u0017½M-ó™›\\é܂³˜pÚ[tò\u0003­ý•”+\u001dlÌ\u0017N™\u0011Þ\u0026• )™\u001dH#+ª'Ö\u0010ó}l\u0013(\u001bYw[èOcò†³»EX·[¿¤û„ŠÊghk¹Å:0ΰÂ\rÃ1-‡Eà·4\u001e–Î?ãªÌõ\u000e´Áé­¹E6zNëÕ\u0019,Q#è@vܔyKÊäÏLz\u0016w\u0004[\u000fô¶\nQËæk{f\u003c\u001a¨µX°Û{Ì:™±ïë,#Ñ؝•—q[Ûäs\rv¤¶Õx™WäÛQyx\u0002»ÖÃx\u0001ˍÞöG\u003c\u0004´ðúQe¤A\u001aÐYύÑǬeÆLáÉó]Æ{\u001eu¬—=\u0014µ¥\\ó\"[\"\tŸÉaýðiÔ~ê\\َxl]¡\u0007n\u000e\u001be§a£Hý?²Îä®sþغ\u001cÏ\u003eñs\u00028èӆŒKëC\u0012ó–\u001bŽö…¡G²}F×*Z\u0000–\u0019¶|ïa_y\\(œtøÂI#ñÑP[ÿô0.\u001få!«é™þm\u0013öòyèRàC¡\r\u001b¹‹aƒõÞ%W™=%LHfÏj®0ªÚœ}ºŒ53º\u001d\u000b¯ÿ«µ\u0018*òš÷\u003c¾n¸\u000ek5TfÕ·M؏Ï$\u003eæßÚRófþm[aq wœ2|Ù\u001cŽV\u000fß\u003e_q\u0026›t©Ú·O׍c™×ü˜×ú\u0010CKOµ‰|¡\u001dùcÜ\u0019›=‚܁~{‘” ‡üJÃêšþ\u0011¤q!3Ç\u001b6Š\u0015Í¿Ñ\u001b%qñAóïŸ}´Q«Ífò)#­–7T^6©±\u001cRI˜~ü؀\u001eQW¿µÿ÷Íóñè:;p—\u001a\u0010\u0003@ìå\r:|Å\u0018EÒ c¦Ö;ÇÅu^¦ü\u0015Д.¡?Cȑ}¬\u0001¸Q‡ö\u0019ÐÌÌÝÙyd\u001bZ‚\u000f‡¶#Àzç‘i£\u0012\u001aš”Ysˆ‡\u000e\u0002â\u0011\u0001\u0018xð[_\u003e¸Ì\u001by\u0012Ÿ{:#ùKÅïztZ\fÏ\u0017\u0018m¬uf ±ñ\u000eŒõºö7:\r\u001c}ã¢]úm-s,ÝM†´\u0026O‚Ìœ¾ÖmF£ó–3eÏ©òçe:¾lH\u000e2Çc|\u0004;°\u001b[—\u0006~\u000eihÕØt)\u0013 wæ:–p‹3øÃf|Ú 7•†v\u0007šÜG\u000eî˜\u001bdt:Ϧ|\u0012øÁ\u001eún3Wj\u001bæè`{{å\u000f9»\u001bTú¥Ü,ñN卌O¯™Zs|\u0010®.³æ\u001etÓ÷@—ênã^z27±²\r÷èã´\u0019ŸŸú\u001deE\u001fßobˆa|é\u0015|t߉Ï*^ÉêÑ}P•×—\u0014á±ã÷϶㢽\u0003ÿ\u0014=Ôú¾1¾¼\rm\u001f\u0005ÄBw‘\rS­'y£Û\u003ch{ˆ=G¦…\u000e\u003cü#Axäq3ý¤Ž?ðÑÇ®ŽEŒo?\u0015¦Ê˜JŠ¶Ç֗\u0016ðÔ\u001dl\u003c¨½·”n;ށ®UfŠÑcæÔ V\u003eøÀ‘×-/cÖÇדOß]f8\u0015gXåæ\u0014cÓ8sg…ҏŒQ-¹\u003c\u000fãÏÕÞg3:mö\u0010\u0017ô@›£\u0018y\u001dô«m:ì[Nw6Óó!_÷\u001e¾K?ªc?CŽè½Úþ–C02Mîâs¯m¯óx\u0003\u0019ٍ=ÞÜu ö\u001a=f9%1íG—‰ûÄÿCìŸB,1:mÕ±Hó.~å¬r- \u000e¼ì?Œ\u003cf\u001e£vS.k×uþq÷‘¾Úíî\u0011\u0007½G€u¥¶‰çЇ,71o3£+î²÷Ð ÉÙ~|Ì{i·Íêü\u000eôédbŽOwÀ!ÚÝô\u0006°‡’—;ÐYOj}ü¸\u0016ÚÍÕy¼ñå[Sù\u001fyÞcÓYÔ³€öïÅGa8êˆüaôu•!W‹–byŸ˜\u003cÿv.ën´qg\r7ºñuçR²@æ÷Ú·iæÇô’›y—\u0018òsü\r=ݏ6€‰Ç÷Ÿ§Ì¸äÌÞ\u0003k\u001db„ñ×ü\u003eÇ~§5Å/Ú¸´¸'íóÚ1ïe/¹1Ó¾ëW¾Tël£ÏeØ[™ \u001fU\"fÈãøÈq¹—­S¹(¼¡»lyÍ·Q%2êÙè1còí\u003cÆÇ\u0019{öÁﱗô­ý4Vü¿O~Ë÷~î´Ö£ÁØÁ—Ê»òC,½\u0002ð@;à}µv\u003cº¿Sû\nVŸ^ò΂¾nõ\u001bîÄ\u000b“3ï\u001dæ\u0000ú-¯yˆÖ=ðê­~Ze—ï‘ûø\u000fý©=ðñsv†2CûV,“‡{Ð\u0010°w\u001c;/\u003cw©ÂùÑ\u0006ü{êR\u0018ÿèk)\u0005\u001fp›*Z3vþïWNO¾ôÀ/Þ-§G¿ÓžÀ[\u0012£·»ùׯ\u0012Leªþ\u001e?çd¯Êz©½ìñ±Áµö\b»\u000f\u0026È\f^g*\u0006\u001d}]]Ñý\u000eí6sÅÇ·”_‡¼hÃÌ\u001c}é”™óKîÑèôðdZÓòâߕþàKI¿‘׳TÞê=ä[0KåרsÓ\u0015ؗ_Ö{\u0019±Ÿaßnü˜GC\u0001™t\u0011Ðߒ‰‰ï°çÿYÞ²Jc¤òÛ\u000eŠN£óY\u0015c]t'^ƒß\u0013íÈkΪ¾DŸk׶+Ù_Ö¶U~D[«’Œªô#Ð,º¬ƒÓŐ\u001b\u0018«3\u0014Ÿ9ùª\\ ÜÀw°=öù\u0016§L]:ö93Õf\u0005qéØ9ðŠ\u001eªœiE—ò4öÙªÜP~\fl”ü^Úp¼ö…!U¹PóLkÚ¾%U±þ^SC协s®JOS×[Eßë\u001e}žÏü\u001fcÿ=«‹mh[ßÎìâ\u0011r§þ\u003eæÔðœ\u0001ƒ7ŸõTΌŠ\u0007uŽ:Œ@r¢y\u001f‚Mß0'!·ç0\nÏa\u001c$Õ_¿•ÍÄ\u0010Ku26½¡Ìlr-Ë\u001b\u001b\u0018âkùÚë;Ÿg§¥Œ7\u000bg8\u000b\u001e²Žm$Œ‰‰*£Ü\u0002Z¤¹Sq9/h/õÈ­4Ad«ŠdúZ{â¶øSGi®É=m@‡zgwC‡‡çQ÷ g'V¢[gÑ\u00131ȝ\u00061ԎÓÙã%OÜ)UIÚ\\ŸUœY­²ýðÎ{R·ï›¦õ`~ZÀºÝ€]\u003eËùî·\\k%þ¬Câqj¾vÃ\u0019ð\nÆ\u0019!äWäÄ\"oÚ3’ö\u001eÂz\u0005Ï\u0005öõöW\u0010a„5ù\u0018Օž+:¹EŠ5ªöˆ˜oߏ\u000e¬ÖÝÜðÏW»ôžHÏĦ­ÎŒ™ëÈî׋Ä@¥Ýù¥?Ì1$Áù6?[ìW3’˜ÒKcÑò\u0005zÎ]¼ü›ý‹‘\u0007üÖ¹“w™{Ã\u003eªçÄ2`Þ \u000foýogée»Ç`“}ù)“v$ýßx\u0010©˜ãŸxÐÐ)Ç\u0016\u0013§º¥³^Z9­²‹w©%àê0çâ‘É×Ó¥~Á~«Ê\u0000§L³»¬±QUkP•í5,ûROá›ÿ6¼2¨ƒä?·gGlï‡Z Ê'ú×¹f•ö\u001b\u001frƒÓŒ¾ÞœÆ^AŽ‹§M5k×K^ú•uŠ\u001cñæSÙ¢XV¤—{F‹Á\u001e¬cêg¬û•4oֆÎI\u0010Ó5µõLj`Ï×f6ÛŸØ\u0026]T·t3¥žTÝ6øÜËþƒ¿DÞË\u0026ÿÝï\u0000­\u0003MÄÑm™oC%³5\u0006ûZ„·}Ѩ¾ê1´u[ûBª´óÓðY¤j§À\u000f%Õé¿%\u000fi¥+»g\nfŸ³%Ú\u0006=\u0010ªDX0 \u000f“@ŸûÔ\u001eÉàýͲMÙâÇÇ|\u003còt“®¿pDפ\u000fÎ\u0011HÛÆÖ\t7)¢\u000e¼Ç¤™² \u000f›y…µ?})\u0005¹Ð™\u0000[â³î†¯\u001dž¯EííY3Oýßë\u0014¥ð~ŸôÞ\u0015ロSçA5u\u000e\u0006~\\êü¶Vw—:Hó½â›òÛW¿ùž4ü-ü­Ôù~KÌy«â³\\\u000eçs\u001c\u0018Ûþû9üï~ƒGþ\tôîÀ—²`Žw\u0013?Žˆ/Á‡;Ïb;\u0014Ø\u001eƚÖûÇÍö…î€/CD\u0015ؾ\u0014å\u0006_«¡ŸâöØöéb\u000eüò\u001e#£z\u00105ú\u0015Åt›ÅBO\"\u000føà-|\u0026·¾îè0\u0016\nÏÛ5ScõÀî, 'ØY±Í\u0018šÔ\u000f…\u0015jþ\u0001;À\u001f@¯©d¶Âm~¹.â%©.k}¹\u003eÔÖ:_ϞƒœìWøÎ5\fo؛·¼êÎÑ\u001fú4Èh%\u000fiü[­\u000f¥{¹Â\u0018ß?“Hæ\r\u0007Ý£a4Ô\nTu³¾Î0üNwéMª{\u0015\n£»Öé»Ák9O\u0015\u0026¿ú¢÷ÐÆ=©ÏØu*Ù'ßë~ãÂ\u0001J_§Ã-²\u0007\u003cK¿Ö/qÈY«ÖÒ.qñwYªöò«žëïö‡4´ÜLŒs\bã\u00117þ\u0001SB\\O\"ï-\u0003̘\u001b“b\u00043¯V¿a_ì:ZB=\t1d«tº\u0012üßL¿\\ì`_laMM|›¶Sû01Ä¯à–Ÿ‘Â\nëY\u0015:ž™˜íQTÝ#Ž\u0005€s\u0006ümw\u0007Ѕ!¦JH\u0011\u0002_WQÄýM$­ˆúêÜ\u0017Ð\nù ;@[_‡\u0018*\u001aæö;ރ87\u0001;ðù\u003eÏ¢ê\u0014¹Ö³‰ÿ‹ÐY\u0012­@¨ê¬u,Ñ\u0026‚¸¸úo·_¦Ò˜®@ÿŒ'Û#¼\u001f\n\u0003=f\u0026÷}­:Cÿë¬êöb9ßbShŒi\u0016ÌwXWÁûÕ¤~“ÜŽ3²HÂø»µp¼Ç‰qq\u0013i·±|ZÑicۊ†ÿ€)\u003cAôÅĺôSÕ\u0007QWüäÆlÇ©€8ûaj\fá¤îŒ(?û\u001b†p\u0005\u0017uò¿\"^e6¥¬9\\×8‘Ÿ\u0019ù'þýú©iizJ›¢\u001a3`Wö¹Û\u0015\u001b\u0002\u000fuu½ûÖ\u0014¿5\u0006ƒj\u00176W×Z\u0015‰)i^ß·\u000eê\rú«ëãlu†ñóú-ªbËûÖÁ½1Ž§kn\u0006`0«Í¿°Èdº-Ü·©û”Aì̧–»$¦?ñg\rÔIåŒñØSWð}Ôò$—=Ìiç\u001fÅE\u0014Þµ¦õ­X©vߺá7h®E\u0015 ã‰é»©Š’\u0013{ê¹rf‹ˆO\u001d\u0003W’eÕäºÔçÕ}ïµ¹ÑgŠ?Ï­MÖg\u0015\u00193;œœ§³\u0003¶g(¸Ôû9\b[å\n~ˇ™j\u001cµ·N\u0026_sžÓÉm#ľYݹSÛ)¾\u0014Á´}^×\u0019§Õ¡2£\u0005¹ï}s·x*\u0016Só3Ô½2œvžVÆ\u0026_Çö3³šºÏ\u0015®f\u0016›Z†$Ú\r÷N¹\u0014w¾·îƜ\u0017ênÈÌýV\u0003v2»oÁD\u0026ÇO‘:çôŸŠ…\tÙÕ4Ì×I\u003c9o‡Ü\u0006\u003cä9MMã\\\u0013\u003e7§«3³x¹ïy·èŒ\u0026«‰[èS÷\trtΧ¶Ë\rÓ©q©ôN“cá\u001a­£É×\txÊlô\u003c¹ìjí™7“ûX¾‰§ï“ºÚÔ}Ò¼îâ4Æoªf@è:}:9\u001ewN€£¬èë\u001e•:«\u00160\u003eÜs jëLï\u000bå|sï»coÈzjÈäÖ¾\u00165å3’hO«®Èêb™Àxi5쓖¾lßhä\u003c¥Œ:ÂÕ1ÑÔ¾Žf\u0011cÕqg\u001ee••’Ò)‡\\\u001b‰B*½wRë)bÔÍÜvØÇUûi\u001b*vLz\u0004C[\tE*Gd ÔsI? Ìq®û¦\u0006gݓ/]Pq\u000e2ÇBàÉÝrJ~;ã\u0002öà’ÛrÎoå\u003eþÿ½ëé÷®ÿvwšâÑïw·üq\u0006 \u0004™Ú…%§~ÅuªÑò~y`»ÃQåE·Ç¥»¡kw´.Jæ´\u0005‹¼iÇ%ÑÍ\\ÉíºœÒCÐPîÛ\u000f'Z\u0015w̛»9®S:Ü㲺µ¬öÑ{À´÷ʽŽùj#\u001b¹Ÿø\u001eÀ6o¦ä9çÓç²þq.mȽ?«û…†\u001a‡\u001d‚¿7Ì«¯wâ(^áéq!êU|îOŽ»‘\u0004|óqNê\u003cùš^}ç»`oaa\tß\u0003:£^åw8\u0015·©¡r¬#Wªs…\u001f:Zў¾3)ÒÜõö´Þ]î.V÷!Հ\u0011êaß ÍM\u003cÔÁ\u0019æàäzª·1èß6£ü}¸×kÈCpT=çë~9\u001c#¶O©ÞžÔ\u0019¥ôìÍþRþ\u0014éžéÛû%7fó€\u0000ꐈ¦6¥\\sà9|\u0016TÎ\" Ãß6éÃ:\u001cÞ]\u0012c¿ÃÔa¤Ä‰ˆ¼*u8Jtô€mA|mՃbIdÿuÜØÜLb\u0006U+Õï̘\u0011´\u000422‘pY\u001cèòUÛ\u0010}%â¶ÏLTn˜ÞešõK„3#g«þEÇ?CW\u001e\bs~\u0011ÃayäÄy8; h'*‹­¨ÛV”É1©\u0013m\u001dÉsjÎkaç§ âs¡YKQ\u0016\u000f\u0001w‘æ=æ\fÛ*\u0011ŸÛÂô+\u003c´™¿¶g@‡.Ü°6È\u0016Bg•Ç!\u0010NÀh/Yžr2Û\tùÚÓR.քZÄI\fâ8O$ÂIÐ\u000b\riE\u001f\u0019\u0005E\u000eµaN‹€P3Š[„m\u0007å\rÞû\u0014ãlé='µc‡vuÚ°ÎaqÐ\u0003]\u001bjÛ}Ԉ2 ª8§c‘˜ÿb‘­¯—?4bÊ\u001d?Ϻ€:O¹Ö-„âK\u0005\u0002Õ\u0000Ðs” 8«À\u0010œÙÎ)`ú\u0013üSÍÙ©\u00036þ‚/ ¿ˆº{\fsÄ\u0011\u0013$ˆeŸiûy`Tg\u0000è?)Й\u001a…ɈØg\u0006¥!\u0013\u003eí5!\u001ef\u0015§¹,V‰Áõg\u0003?òšcbx¿‚žÚ‘KWT\"\u0003\u000bÆêÍ1AoLÚg\u0014\tW˜²%\u0014­Scg\u0026zñsSÿõNá'u‹=—s¾!3-ZxEºPàÖñ“ÈÓ¸†çA­xmí\u0001üÕ\\\u00175\u0018Vʖ\u001eÈ¢WùNKC _ã\u0003#Ž\u0019.½GÚã#å;ÑÞ´µ«T÷zR9+±\u0010Rh^£\u0012‘¢\u001aEy\u0005Jêˆ7\u001cÍQÐ \u001dU\u000fçL\u0007Y×pƒl g³²¨‹ß™ƒNT/ÜL{5³óL¦•3GöìW¦¡96ƒ“\u001f\u00014jÄK¾,ªLÃï4*$¶u–C[\u000ea#ž¸‰kƜԷiϵD\u000bíâˆ\fÜrÍÖ\"³íA\u001e^ò~ΞUñ\u001e·5²\u0005?ø\u0000ÿ£e\u0011§e‘\nÇ1ƒ\u001a%¸\u0011s®µ±p¸I\u0018\u0004\u0002Ì:\u0026\u0006µ7OûŸ¾-›Ð¤çЄ™\u001a3\u001d‚Œ42m=‘ÔÄ\u0015\u0018_£+}×6\bÛ=d‘p\u0002¢ä«\u0005ù’v¶ä֚´l\u001d94\u0004ZR“\u001c£^¤‰13Iå™Tb‹74\f\b.}#8\u0005µXÒóÌÏÌ9I\u0019zÉ\r/Œª½A+[µ#Û©ñ2Pv\"[\u0026ÆÚq~b‰Pbœ\u001eB§hž\rJ\u0012Í×\"Ã:\u0005@§ü¼O°A·\u0000¬í¬*N¾!›@⧐Š‚ب$\ruüí~\u001fÙr\u0005¤½‰Š\u0026$Ž›•¯Ç°œ7Bó¤ê\u001aVc\u0002\u0000Ý\u000b\"¤!ƒÎ#Н¤ô*Ă\u0013^Ê\u00151=\t€µ\u0001\u001ašÜ¥„/é\nôÿ\u0017zÚ+Ûµ@ç½DN\u001b\u0005q(èCÈ8È\u0003J@F+\u0012Ñ$=Ïê´\u00116¼o(þ\u00071yÏ*¯\u0000^‡˜t/y-|A½uHíwЉ%a\b\u0007$xxÑçÀ¿ü\b ‰\u0000 “\"¦A^û}^y\u0010Ð\u0015 gÊVÌ\u0002гù³\u003e7æ˜xÙ\u0006ùâÇ\tSj§Õ\u003e]\u0013ñÈíöiMr\bí%\u0026LxÁ`Û_¨/8)t\u00108Æ\t\u0003žš\u0004„Ã7±ÓÚà\u0004À‘´¨Òç`/–À;/`è\u0011¹è\u0019‘YÊjº\u0002Û\u00046Ü?òíìôl´À\u00034\u0007½r\u0003逜è\u000fÏF¢m\"Q†’/×v{\u0004›Ün˜tÈÒ?nê·s\bã ¤x\u0012š\u003eÏûJã6OC}¾\rÀNåËÊâ\u0011^‘F\u003cöb²x=!£h\u0002¾A\u001f0~\u001cðªhq/ÚÐn\u000fi_œÂ†Ö¢ÞÇ0žÇ\u0017m\u0006Q®³LÝÙ\u000bðÈD‹×.u­.sdŒ\u0019Z\u0011š‰˜ßƒÓ\u0004ã\u001b°bN5ހ= ᢲˆ6³\u0012ÒùÏ\u001a¼ëVÆÚ\u0006žhô\t¹\u0014콇x„\u0012a´›jOÒJ‰XÇ\"mÏ6ÌzÌkì‚^/\u0002ˆ¤¹\u0026çXÃÝ\u0026\u0016ëM\u0004 r·\\æVÎx¸Ž@O5êa[Z\u0018ì\u003c‹Š}xž™©KŸ6Œ\u001aTsBd¿öéBú›\u001a|\u0026¥\fK\u000fä\u0013¿£pÖ£’Ê\u0004`\u0017XÉÈwi\u0010Äo\u0006­-p¢øˆ*р?X‡\u0026\u0004™\u0012\u001d£’ïiD\u001f2\u0002\u0000*â­_{O¼©\u001eP/÷„\u0004Ö³é%9Á8¨ô:Z:+Ä\u001e´9Œ×Ò`%\u003eøvpB‹â  OB\u0026¬%Ç\u0000d€\u0026ÏÈ\u0004pKeûbÈ÷ ž\u001b¢çk %Ê©o\u0011\u0013øªÉ\u0005\u0026Þ\u0010 \u0004š^#³ð!~=Càû.zrŠ–ž\u00052ì\u0011Â\u001f `ž‡ñ«)lŽ²øU\u0007ŸX‰%Þ\nÇ¼š-\"cõ\u000etî\u0005›a¥o \u0003à“½_áÓNãzq\u0004\u003e€Þ?ápV¥‘yÕ©¾\u0017ƒÜ\u0013ýgR­¬\u003c\u0012ŠO.^þ8\u0013Š­\u0004èÀMtÎKg·±=ð‰’àX,ƒh^\u0003Ÿ\u00174ö\u003cnÒÝ\u0006ÌÉKï½pm3»Å˜8\u001eÐRCTèØm»œuI¶t,lÓcê \u000b|Ù6_zª+1ZÕ\u0010-©›’W\u001dW`û\\½!\u0026}ómÇ¥ºp\u0003C\u001aY™\u0018Â(怇Ž \u001f6våcF+#³ùόR=u÷NÐxu\u0026“\u0013Õò3rÅ\u003c4ôSN\u001d;ˆŠŸ¬²V`Ëwàñzäv˄\u0016\u000e؊ynòyFÀ¯ëbÇuI»Ó×lOSWî2\u001d\u0005A$}.ÛN%œ¦„Î\u0011€½\u001cð\u0006vœS\u001eÏnb\nøÈ)ðb\u001eŠªM“z¿K\u0019}K¥ßåzÁ”n`ÝSúƒBÀm€™JUð\u001fQψ(23ð_H—nTË'ðïÊO¥\u0019m•=n6KÔqöÚG¤{£6žSC?d‹U—C\u001cŽ*Gù¦\u003e â‰0¾Mu™0ønÚÿ8E,6\rPÁ\u0006°«¯N±\u0006Ÿn\u0013\u0018C^!:¯:•r\u0001^Ëð!Àâڛ•ÑW˜£\u003etÐ!x/ÐìsfwOë\u0018¯}Ãy¢.B¹¤Ï¡Ž\t\u0001Ýtý^ùOðãVT¡-³­\u0017\\Û Ó«\u0013`¿÷gm¶cÑ\u001cd7Ñ9)\u001a¼\u0004¼ªC`\\\u0001H6eñ¢çHVÃû}ÒQ‡¿\u0005ƒþîKðß+ßЏkZà\u003c\"FÊxϞöÍ:Âʆ²5\u0001}¡-Çnòž/\u001c\u001d|\u0011Ïk”’E±Hd[$Qñ\u0004Ò\u0002ö„^°5E”V³0ìé‚\u0011éý\fþõ¯ÿ\u0002æ\u00170ÊЙ\u0000\u0000"}},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 07 Oct 2026 15:24:22 GMT\r\ncontent-type: text/html;charset=UTF-8\r\ncontent-length: 213\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, OPTIONS\r\naccess-control-allow-headers: Content-Type, Content-Encoding\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":294,"size_decoded":598,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"580f793cf66f87c8af78180366290ab2","sha1":"243a27b42fbe0f04db533ddb86d8a8f0e7024367","sha256":"22552b5c26cf863d90e78a73d60ab0373e3a682c43f25254c8d10e4e4a0e2ab4","sha512":"2f98cdcb71738e14ea1a78f3fc044b088a3ef0af6e6d87c61f8e6384db77bcef9cb092f017e13cc4062f2e4171a76e7b26a0ed38b6104f80a4e9cfe65d37c648","ssdeep":"","tlshash":"41e0c21c52646ebfc0829284445d2db06eec2273708a9d1ca58d2d1425eb2c351200f7","first_seen":"2026-10-07T15:24:58.780573Z","last_seen":"2026-10-07T15:24:58.780573Z","times_seen":1,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trump-ncaa.live/","fqdn":"trump-ncaa.live","domain":"trump-ncaa.live","tld":"live"},"ip":{"addr":"31.77.228.174","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T15:24:20.339Z","timestamp":1791386660339,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"trump-ncaa.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:52:12 GMT","end":"Thu, 31 Dec 2026 06:52:11 GMT"},"fingerprint":{"sha1":"B4:75:D1:29:10:E2:C2:C7:63:0E:0D:D2:2B:F9:3D:FD:44:89:67:C0","sha256":"4B:E0:B2:4E:EF:0C:30:57:61:A6:AA:62:85:F8:DA:96:C2:B7:56:ED:59:87:36:95:35:9D:B6:3B:18:D9:FB:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trump-ncaa.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 07 Oct 2026 15:24:20 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":98406,"size_decoded":32085,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2591)","md5":"e6c2e95c827218920f36f3242ab62973","sha1":"f83f51bd2f5826e51896fc5dd80312f1276853c4","sha256":"0c571e9422306d0388bda252dbb5ccc6b25819fc6d79a44cc17bcafa90dd5630","sha512":"af01c1a24413831c2c04e1af4108910ce1b722904d54de85c3b73d1c3c804daae680a663ed3974661001841f69c964c18457fc8b49f3bb3653bf9c127ce6bf2a","ssdeep":"1536:dnoL2YluT7fG6j78h9M39kaWIFC24TaTp:dn20T7fG6NTp","tlshash":"5aa3c79985b3243605773079ebbf754d36b180039505cf23bc5d8aa6ef90a358af1be8","first_seen":"2026-10-07T15:24:58.781695Z","last_seen":"2026-10-07T15:24:58.781695Z","times_seen":1,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":74,"connect":33,"send":0,"wait":306,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"sci-hub.ru/favicon.ico?r=0.533027853815651","fqdn":"sci-hub.ru","domain":"sci-hub.ru","tld":"ru"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.675Z","timestamp":1791386661675,"http_version":"","security_state":"","security_info":null,"request":{"raw":"HEAD /favicon.ico?r=0.533027853815651 HTTP/1.1\r\nHost: sci-hub.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trump-ncaa.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-13T10:42:36.935739Z","times_seen":19078671,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"r3.nl.kill-bot.ru/r/in.php?png=17\u0026rr=1791386661770\u0026c=17913866616407706","fqdn":"r3.nl.kill-bot.ru","domain":"kill-bot.ru","tld":"ru"},"ip":{"addr":"212.108.82.180","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.773Z","timestamp":1791386661773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"r3.nl.kill-bot.ru","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 30 Sep 2026 23:05:09 GMT","end":"Tue, 29 Dec 2026 23:05:08 GMT"},"fingerprint":{"sha1":"4D:47:74:D3:DE:DA:C0:60:58:7F:A1:F3:CF:FC:16:9D:A2:B9:0E:DB","sha256":"63:4D:AF:C3:83:93:1E:C4:19:79:2B:3E:24:41:61:D0:92:1F:1A:D8:AF:F8:DB:E4:CB:04:69:1A:8D:50:1C:9A"}}},"request":{"raw":"GET /r/in.php?png=17\u0026rr=1791386661770\u0026c=17913866616407706 HTTP/1.1\r\nHost: r3.nl.kill-bot.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trump-ncaa.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 07 Oct 2026 15:24:21 GMT\r\ncontent-type: image/png\r\ncontent-length: 68\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68,"size_decoded":283,"mime_type":"image/png","magic":"PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced","md5":"e2a9cbd85e98c54748ca864b2231414c","sha1":"71e9cf34a9aff762dea7e7f436ec5b01692d63ec","sha256":"674f0b32d2ef93e28328748ae2b839bc07ac1c9e76bfc62aa71b748067335c4f","sha512":"5438a07cdd88eff3e175be93e02e2a8feb79be8e2cda64eac8103de216f676c83e1f773a4eb2005360fc20a4ba0a28adcd2fdb2af56e9ff443bb0205330bdc32","ssdeep":"","tlshash":"0da002f2a3d0dd7cc6ae6133c1148228f9314177091105980157e475aeb76ba558c792","first_seen":"2025-10-11T07:50:06.553398Z","last_seen":"2026-10-13T09:45:08.447459Z","times_seen":241,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"r3.nl.kill-bot.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trump-ncaa.live/favicon.ico","fqdn":"trump-ncaa.live","domain":"trump-ncaa.live","tld":"live"},"ip":{"addr":"31.77.228.174","port":443,"asn":0,"as":"","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trump-ncaa.live/","date":"2026-10-07T15:24:21.953Z","timestamp":1791386661953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"trump-ncaa.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 02 Oct 2026 06:52:12 GMT","end":"Thu, 31 Dec 2026 06:52:11 GMT"},"fingerprint":{"sha1":"B4:75:D1:29:10:E2:C2:C7:63:0E:0D:D2:2B:F9:3D:FD:44:89:67:C0","sha256":"4B:E0:B2:4E:EF:0C:30:57:61:A6:AA:62:85:F8:DA:96:C2:B7:56:ED:59:87:36:95:35:9D:B6:3B:18:D9:FB:FA"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: trump-ncaa.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trump-ncaa.live/\r\nCookie: kbSession=17913866616407706\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"kbSession","value":"17913866616407706"}],"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.18.0 (Ubuntu)\r\ndate: Wed, 07 Oct 2026 15:24:21 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"JivoChat","description":"JivoChat is a live chat solution for websites offering customizable web and mobile chat widgets.","website":"https://www.jivosite.com","common_platform_enumeration":"","icon":"JivoChat.png","categories":["Live chat"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":67768,"size_decoded":17596,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (320), with CRLF line terminators","md5":"199d31acab351b3898aea37b3bcc38a7","sha1":"58f14ce514c4ac938f616497a2b2ac7794f7a520","sha256":"3b5c56006c28c167a4ef7781741b5b1e3dd4125724060713e23dd40cf6b475db","sha512":"e5ffd7f0d32726e83049a3328994521a6c6279715fdd0ac9fd9c896805b7f1a87c9b8381cb9024f2481ec8ff8552ede0278dd1cf8ac7e0ca203f7c2d6b38ef00","ssdeep":"384:qEheKIzS71fZDZL7wV54zoSPRlRz7fFGYqciTisWfigEFEkimiLlwX5I2YmsnMvQ:q3KIzS7h7dA2sRzeZ3mN+3Yr8D","tlshash":"3e63a365a1d46823427392a66fb7670dffa86107d14642823ffc979b0ff2c50c823a9d","first_seen":"2026-10-07T15:24:58.783401Z","last_seen":"2026-10-07T15:24:58.783401Z","times_seen":1,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}