{"report_id":"80e78d88-df6f-460a-bb96-931df0364a5a","version":6,"status":"done","tags":[],"date":"2026-05-27T00:42:19Z","url":{"schema":"http","addr":"login-botty.com","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"104.21.93.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"login-botty.com/","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"title":"Botty","dom":{"size":147,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"1b89189e4dfeef4668d8e26260d69b15","sha1":"3a6f954572d65788041fdb2aface23a071b2915b","sha256":"e11f9db354e4478cfccefecf9655738aebb33c82c58bc3cbcaca2721985c9523","sha512":"2fd60196c45b0afc1cdae1a7da805d958e526134959f0ceb087622b600b99fedde755e69f9d25c89b771601c66ec0352ea5aab302bb8c0818716b45b820aac3c","ssdeep":"","tlshash":"13c02b22dc04484f3d005fd1cb8bf0c5c002dd3cec315c00b856b544e9ac231c012549","dom_hash":"domhash1b838b182bbc8c7be786b9f3c16bbd25","first_seen":"2024-12-19T00:00:05.397279Z","last_seen":"2026-07-26T12:47:21.166471Z","times_seen":83,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"login-botty.com","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"104.21.93.218","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-01T00:42:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"login-botty.com","ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-17","domain_rank":0,"first_seen":"2026-05-13T12:54:00.438209Z","last_seen":"2026-05-26T17:47:30.248022Z","alert_count":160,"request_count":80,"received_data":4959976,"sent_data":36622,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"botty.com","ip":{"addr":"172.67.73.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2001-08-30","domain_rank":0,"first_seen":"2026-05-13T12:54:00.436357Z","last_seen":"2026-05-26T17:47:30.160291Z","alert_count":0,"request_count":1,"received_data":181126,"sent_data":442,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"login-botty.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T01:44:02.28591Z","times_seen":417337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dcdbb5ae9ef2e70143eb0414b464afe8","sha1":"7fac09b3edd0766300c1f6074b30f4e4689ce3f2","sha256":"cf2c7af7d632b35110801e01e801156a312aa1f97489676e03bf906b3a79573b","sha512":"61727d488393f9e7f238c749d05818ae09b775383b2debc7e618aa0101146047b7551184c46d2ff7a029745d47d26c3a5117188a8f1e1ae12ec4ef2f394d83ba","ssdeep":"","tlshash":"eed05e1974201176c1ad68ee084f19497a368483a2050dc9d8dcd8456ff6fb84395e5c","size":247,"data":"","first_seen":"2026-05-13T12:54:05.803838Z","last_seen":"2026-05-27T00:42:22.327675Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-09T03:42:01.551155Z","times_seen":3239,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"login-botty.com/70f80dac3e85d51b88ba3f76e0c958f987186650.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /70f80dac3e85d51b88ba3f76e0c958f987186650.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EeMI87BNwhJaY%2B%2B2geeg%2BTwm9GGhuI5bLi03XknSeeXRK8NkGBRoU7YBya%2F2dQq5OxjXHRnglCSML8ZTU2t8RTCyakaPO91U8OXL61XsPbZAFrN8B0E0cuTieUvZsROBP38%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-4ee\"\r\ncf-ray: a020fa11ab1a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1262,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9317b9646661e6d270a351428e4a3328","sha1":"70f80dac3e85d51b88ba3f76e0c958f987186650","sha256":"974f65c6d265e64f764713109e84da340cf97801d1d25bb7c689868b1d72d320","sha512":"473696c8b67cd5e73fd61f2dbcb5e8e12add66d9a5696c4f4f2b965fe4241c3ca92122baeb4434016b9635ef4cc48326c76d029443a88dbc2571741212d4d2d5","ssdeep":"","tlshash":"762132f5b3d216b8e909dbeeda1098ac7931b07bb7b6b18042bb8f74f0401ec0018880","first_seen":"2026-05-13T12:54:05.743384Z","last_seen":"2026-05-27T00:42:22.268671Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/point-one-CsQThLNY.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /point-one-CsQThLNY.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 165508\r\nlast-modified: Tue, 17 Mar 2026 14:54:37 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2d-28684\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2Fh6d97Zd5IWvHHW9WXpHS4bXS8%2FJ69lzwtYr9OpLfUTyBPdUIq3jJe1OFWgHci2R23Yyw7Ym6DUIUVGkiq%2Fju4eD8exjezLYn0%2BHZ46AgG%2FrHo6Bia6Ov6eP52juy8QeV0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab1b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20316764f06e5917baf1677e0501cdbc","sha1":"8ac6b3f86b5078b044287ae28d0a6de0426a7ef6","sha256":"d78d7c1abf2b69695f9b27594e7c2e97c5b09cf4b6708b628f3e5e83aabb3470","sha512":"6877200b4befdddb78f16afab5d49f90c2460510f5fc35a0b27602dce5234d6541bcad282f0980e1c923e0a3044da32a0fcd2d73c0443163173576a85d1fdf45","ssdeep":"3072:pXqY3E7gmeTOS3Ma3uB5lmqWLYotHgB5IfoL31pS/DlxZm0Z5tM8/F1:pXq2rmMOSr3uB5lrSe5771kLXZJXtz/L","tlshash":"7ef3238e13a8ae97f450d9b97959258bc9d37f88d1c7ef4f339da400432c2ea81bd415","first_seen":"2026-05-13T12:54:05.793705Z","last_seen":"2026-05-27T00:42:22.269498Z","times_seen":6,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/92b16292a27b89a1aaaac1261ef96cb16f3fbcbb.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /92b16292a27b89a1aaaac1261ef96cb16f3fbcbb.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aXNdv2O3DXlHZNdb7PGLASt%2BTzg5bOeDA2g3Vvz9M2QqCg%2FKGpelZ9M6QRCVJ0wr5kPpbmdVL68tuJQrr4qwACrYnFy076FMDtjs7kxzyW39QpmqmLs0gVCmXrBNRSLdToE%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-466\"\r\ncf-ray: a020fa11cb371a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1126,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b90c865995a877d5b2f8f8082cad8af","sha1":"92b16292a27b89a1aaaac1261ef96cb16f3fbcbb","sha256":"09f2c3de97a50c08d3c16cae1fe81d251f51938dfc8267b628bb1e26c7e8e40a","sha512":"f632214543c3f291999b1b997b1d54ed5ad5f80bc5508570e350b6d8e22da01cd32cbcf393380288e062b25d92ec0971347e1d38098bf6495dc1401bc570187e","ssdeep":"","tlshash":"4d2100fe22f421982b4bb7761220aa16103f30f9b3ed7225c20d2760e6ee45b96c8650","first_seen":"2026-05-13T12:54:05.667908Z","last_seen":"2026-05-27T00:42:22.270246Z","times_seen":6,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Fri, 29 May 2026 00:41:56 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PocSitsSF0eCJ740trvUMwdRHjxguYsxwBdmq72Yvp35hdl5DhbWT2zadfj8P%2BqyOCeGtzappmVdg988cQaIgZsxoruYlSoSrV4dfh%2BNwmGYBEfvNPgViXWfyZt%2Bb0VRu3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncf-ray: a020fa11db461a30-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T01:44:02.28591Z","times_seen":417337,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/vendor-ionic-dityfUQy.css","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /vendor-ionic-dityfUQy.css HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69b96b27-9efc\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DuVihb1na6A%2BCZOBO4qS2tH7FFVL8rpaXlkO7jIbyQXRopzbJYaWqBeDCMyTtStFQg%2FD33lzwXZmMgTAjo1I%2BL2LJERRsJcppdlpo%2BDwtBze35IweceeuV73N3J2RCiAQ%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa118af91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40700,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40699)","md5":"31c52cdb8f636f1671836ededdf1aff2","sha1":"75a2ea6ad79503891548cd998802ed1a2bc0ea4a","sha256":"f71f09fb518aebf04e9e47c122c7b3d8af6c060b8b58272b05493838a3415d34","sha512":"0227eebaf2907402fc1564d82556e004c6444957bbbcde379ac9e7123c9abed68f14454a7195a76c73876dce5e3d60b247e89aa0839af627a40ed5059e78ec56","ssdeep":"768:nPpZsOG40l4q7XCrqLMpJi7WaAyzVOn4D9KNSf7UNGKwZtuheVa7J87+lCz4RpVm:dXRo","tlshash":"36031082f0c11aa9beb78064499c7b3dbe7e94d0eb4b6dda1151b37807cf6d309a611c","first_seen":"2026-05-13T12:54:05.661406Z","last_seen":"2026-05-27T00:42:22.271615Z","times_seen":6,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/68ed7a1b4ec9c5f0ca5f301e5bb4613617d07913.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /68ed7a1b4ec9c5f0ca5f301e5bb4613617d07913.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3370\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b24-d2a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IyTZberPZlKqBsfrB%2F%2B%2BMqH8ie%2FWvHMzewfxgRgLj1GAmqKy1LRe0wgUzRimLESJ6adgNQXuxWx%2Bet6i8ZbQpn%2BZOGBhQlJ33ciG0PXZdsdMAaM6sLKjysACSQgtXQ4Y%2Fac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b061a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3370,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"49fcfd2bafcb87260938cf4694fcee63","sha1":"68ed7a1b4ec9c5f0ca5f301e5bb4613617d07913","sha256":"a993ec344a252d9ea7b3898fd8ff0e10aadf6a2702c617fa99e26bbcd763c84f","sha512":"a0036daf55662b295b882e248ec1ef216e7c0afa55bee3d332f6bdf354852b2869f6ddc57b1bdcf22fe6b2679a748b64b9db13735a487e4ec15606d4359a2826","ssdeep":"","tlshash":"d4614b361b48077de56e6e753295df05b72eb8aa93724a10f4614e38136cccb680a083","first_seen":"2026-05-13T12:54:05.776086Z","last_seen":"2026-05-27T00:42:22.272189Z","times_seen":6,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/0bef727e68579a93e1cb44cc1272b2aa7054abf3.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /0bef727e68579a93e1cb44cc1272b2aa7054abf3.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3QZRp78%2F0gRJn%2B6yAw%2B6NCgpF9zObuojoyfR5TZbk4wl0W7QgVGkoFgzfdvyuyCS7FofJrkgiKFeccFmZ4s6%2F66BF1w0eQbCcIKl%2BbE8KkS49Wjx5qbK1VDb9hgMXOtT%2BFE%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b26-468\"\r\ncf-ray: a020fa11ab181a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"515690f5f1afa468c495c3769457cb2d","sha1":"0bef727e68579a93e1cb44cc1272b2aa7054abf3","sha256":"8d3d1242de9b127020de06bb6a77859a31426d45a33f1843c2098f64d50df72b","sha512":"37a697262d8ae126604188a78dceed2346469900f63a66d105625022372d492152e3fac8dcb7ed11aeb41b688088a254c73f7c2ecbffb69f7760560c1e48b4c8","ssdeep":"","tlshash":"ca2133ed0ae14fb6ccca4bcdbb3898d5a32b64fa2bd46454c6780b1110d01f20d29f9c","first_seen":"2026-05-13T12:54:05.759354Z","last_seen":"2026-05-27T00:42:22.272833Z","times_seen":6,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/point-six-CSreE-Gw.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /point-six-CSreE-Gw.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 120132\r\nlast-modified: Tue, 17 Mar 2026 14:54:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2b-1d544\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CR7taJgcpui7s9U912g3cVakjueFQ5zhB%2Btj3M35mmXI4u4X5%2BnpIDCwPif3EJI%2FIm9Y4DmA6Wbk%2BB2FWIpePgmHPllftp7%2B4cRkng1wUlW4BjqAspSDX5XQQMTze4ygJ58%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11bb201a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3e8bfc129b2c0b334f81c5d350af244","sha1":"a0f7e6c61883c3eb2c84c09c124ce04e45df3d3e","sha256":"3218246803f94f6018a840916818db209814785406976da8120c475b14ac2345","sha512":"9ff6a864fa41fda48f80c1b26d2093134044b710ad487d8b334069a7c462098070cb22295a4bdb55ca83db58df9352bed74f4468611c5c78c33300ce98117fcf","ssdeep":"3072:GXOKytrMpybFFbJfh3ToCICvOgN2P0e7nUvIvtI:GXKw+FFbJ53j1Nin+Ii","tlshash":"29c312b0acce6e488c4585d5ec28bb9f360747fb993144716988f213295d9f837bb342","first_seen":"2026-05-13T12:54:05.788252Z","last_seen":"2026-05-27T00:42:22.2736Z","times_seen":6,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":107,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/botAvatarSol-E0x1aKaF.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /botAvatarSol-E0x1aKaF.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13170\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-3372\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Y3jOQG4BfFxe5lr081DgYJXMCol7edv9%2BWXW4IDCm2NGXRU7cAmXWTVbe7LYP3UyEyvEZVTZAX%2B0FtxEfu%2Fsjo1iAs9W2UatgMrEEd6GmQK9i13CLWkwnaNOofN9ASxvPQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb3b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa8e076f8945a0882eb40e4f82a199df","sha1":"0a741a51ca7d7aaaefeb29c34e082e2fff3a2c80","sha256":"f20dcfc94abef109376f9313174aa409953d21f5d840585cc960b464cb9657dc","sha512":"aa9418a3033d7a425b4f76dfd2d55452b1943cde1d612ad099b35279677b1bc41ddbc72d2075b383c51dfe901f8c5bd3fd59a4b62bb0ec94eb69a19a74d2b7e9","ssdeep":"192:zwTDWP6340IOK8aJsIlZGwbAtGPZQCNAyL+lpYv3KMhLRRV8fWsZ:zwT4G4GK8GB9AoLrNvaMVRRVQZ","tlshash":"7b42afb26342d764f9a037746dc94bb6d286a198dbdc060ed3180db1c489d3f687e73a","first_seen":"2026-05-13T12:54:05.790066Z","last_seen":"2026-05-27T00:42:22.274377Z","times_seen":6,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/ball-qMIY5HQS.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /ball-qMIY5HQS.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19526\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b26-4c46\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gJh8rSSJQQI9UW5yOD1OVhpP2F7hyoPsPBmEFJ0qDvkIfdCMRSeVaR%2F6TV8fvJAtEz17wpDvlZ%2B2dvpGOOBC1jXBpjdmxEN4N%2FzlJQgmJC2z%2FH0HOVZvJ0NlmPIkF1lmkjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab121a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19526,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b4b07d0d2ba1aa848bcf26872fa52212","sha1":"9d9fba50a1a47743a394e56ace19780ea9130ea5","sha256":"ca64d65c8044bde960082e9f7979f792e18abcb34e4d4757d20c3b0134d01400","sha512":"501723be4e5299dfe274511ffb8ff1d268a3ed0f626ec8d01dec90a4eb89368a48485e41723633ff590255bdd9fd6e5e551b45f9f0dedc745da2b851606e13fe","ssdeep":"384:2wTryfva6zy0GjtanC9yOYhnUcKuztKDyDY9PlIj2pPJrz/alup:PTryfSx05rOYicKuAD646j2pPJrxp","tlshash":"5192d125b3495c97f821a3fd67d987ed4777c223a8bb4054e616810f8720484f9ee397","first_seen":"2026-05-13T12:54:05.77698Z","last_seen":"2026-05-27T00:42:22.275043Z","times_seen":6,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/a92d49343f5dcb9f68c50d842b8da3df40c8b2c0.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.784Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /a92d49343f5dcb9f68c50d842b8da3df40c8b2c0.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vUlTrgOPo%2BuDluUHwPbSJHrbMHRtrM4QOAO74IGpgoVZLhdK%2BN3mVC8l4BtqfYBXfwXg4Bx2%2BrxFg0tgOUhCjgU71E4ug5mzBV3oFYYM%2BVJMa1GGASswVXu29RfdRGL%2F2Mk%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-530\"\r\ncf-ray: a020fa119b001a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1328,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eada6dec2f6986e05f3bbbf9575ff0ba","sha1":"a92d49343f5dcb9f68c50d842b8da3df40c8b2c0","sha256":"2a4dd4e9013b9d8eaa017829052ceb1163445e95fdc85a066d71108b89e49d2b","sha512":"108208883dbec59858fb7c9d5f117727883176cc311698e37978beef316cc112b999888484e8a0f17caf484f7ad428df40d2314bc058547d02e94dfcdb2587e1","ssdeep":"","tlshash":"3021f3f95640402d681b03b2fb7cbd29e03ba7d073de588401531b15662d32f2eb75ea","first_seen":"2026-05-13T12:54:05.774236Z","last_seen":"2026-05-27T00:42:22.276765Z","times_seen":6,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/58b8114b8800b3c26f28365fd591f7d5c1c5678b.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /58b8114b8800b3c26f28365fd591f7d5c1c5678b.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTO1IhxeGvnlh6Rawtc%2FIPMZ3R1ZVObb16Jn8n9Wlsy%2Fmo3ceXTPGJ70GMoqQuLn0IV%2Bqf7cXAuFg%2Bvj0XQPr8RFTxYS5wfelCpCbyD%2Fgy3vXiAmGkKWW5JzQ9zhz8BSMB4%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-14f\"\r\ncf-ray: a020fa119b021a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36b0b1fedce14ea2c2bb053f6810fd27","sha1":"58b8114b8800b3c26f28365fd591f7d5c1c5678b","sha256":"96b96e3a9593c3ef773b2c410b09d4af2181b354e6d1e06075c299255afd305d","sha512":"e7b7c841b7e71aa29b3b151511f02e4ba780013d489f4c849e6904465d8eb3e255e024df59914fec1bb7d50d0043a01428d577cf6dc671e3b6f6dd2af2640d43","ssdeep":"","tlshash":"39e04fd57baa083ca0135f78d7383d245476124032dd61449422163cc5c972f2eb3dac","first_seen":"2026-05-13T12:54:05.72201Z","last_seen":"2026-05-27T00:42:22.277379Z","times_seen":6,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/money-small-Cy3NAYUS.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /money-small-Cy3NAYUS.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28250\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b26-6e5a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BFm7376paLdJrERbPjpLNrZT2CXpMSUcwsdhXPm5L1XUvcE0TVCNhtM2YE41oLtip3Ui5N8uogBDyUPaZqop8CnAoSCSz8OLBrC4BQWf30NWP5gYgOofrKkjwvD0036bMQA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb321a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28250,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d1565bde94f9f70c0ef7fb53b71d1511","sha1":"1fb25d8493fbb67d69dafa342eab5c5433afb89d","sha256":"3c23fa4a9a590aaa6d28565edede14b19efd968eefafd67608ef731dae0358c3","sha512":"e094cd27fba11852bf453f574398d7a9ef735df41f3dc8350390ddec7b7bb2a4724098cd381889a9e9d0d7f32fc1341c5ba804046a56ce13ed3ebaee7b73f159","ssdeep":"768:FTPcGlAoj9NXZS3HIPHy/RVTWDPnnySVksqSJl8f4Wo7nBDKxJw3E3hPQR:aoj93SYPS/RVTSPn3Lqu807nBaJGExP2","tlshash":"84c2e1466fe30d2ef908667545c0a0398b634df2e3dad60949135729b28bdc37d72ac3","first_seen":"2026-05-13T12:54:05.778599Z","last_seen":"2026-05-27T00:42:22.277945Z","times_seen":6,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/profit-day-DFkym3GQ.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /profit-day-DFkym3GQ.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29956\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-7504\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kf%2BtCRwQ1b7MRMK%2FzluqaAcR2LFIUQXeZWaJ0o7xVtd4YrjYLwPzTDzcec6ZVhSHrzuG0xVoFVtC2AC2u3Ujtkngot%2BKdIYevsUjqj6m1MuufXRt3%2FTmi0VjiBRbT0GbTm0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b0c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29956,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4c081abed35aca1ece8059bb650e88ca","sha1":"e5abfed24168589f72534515674df1b517311e33","sha256":"5687315a57157fa3f916beac74b884c4fd9d67ccfb7e5a79e97f7123c00d2aa2","sha512":"0bb3db37af838577d50f3ce01afb104d11cfae6f8ac11340740fe9fa305b96c9360145612127555189da32c4b1a2ebbc7dcb82666dad075ac6d6b862421c4411","ssdeep":"768:PT/wxrBHzdTmt0fIQZ/r/9jZt1+pQ/cBXchGQcf/EMHkH:baHzDfD/V7IpQEBXiGjHEMHkH","tlshash":"dbd2f15880a8a3fdc4471f76826e75f0e9a570048ddeb1209750139a93aeefdd12f0e6","first_seen":"2026-05-13T12:54:05.688629Z","last_seen":"2026-05-27T00:42:22.278469Z","times_seen":6,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/bg-right-BcQzDS86.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /bg-right-BcQzDS86.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 187248\r\nlast-modified: Tue, 17 Mar 2026 14:54:37 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2d-2db70\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Am28gCK48Xjk9VdkDo105o9Xcyp6K3kI8KXi0Rt9dl1uf9fnS%2F9PIhUDgtqKat02E%2BBLdrc8oLKup4JbmQS9uas7shMOnOI4Sbm%2FFfLNPllZpwsHNLkGKzPA9uDY1%2BtEBdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b0e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187248,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"77ca7013654762d8f432e4512e79e757","sha1":"9f1cc65cc5a7e314dbc0ebcfee4564008ae55b3e","sha256":"bbe09c90ed37e26e6d18ddcd83708116d6a437e9839b0a25a36b05748f03a68c","sha512":"74650fb6da1c46f3b2c47bd4173a0cb43a37ad6c993f75f36c9c0237dcd67c6bf77d6ad9e3d14e742c08a970922469804ad40e286424f56994b4c6de7c75dc95","ssdeep":"3072:tk75qolpTTcSZtNjQ+0XprgJSTnd9y6vBNm/eYYyP7ON33H3T8P43e:WNpXHpx0XB84dDNypna33je","tlshash":"e70412b5db650aa0d84ee37691bb056d201ecfedbc5dd7ae07c4fa498a902c38e74704","first_seen":"2026-05-13T12:54:05.757445Z","last_seen":"2026-05-27T00:42:22.279025Z","times_seen":6,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/google-store-btn-3O2f5Hca.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /google-store-btn-3O2f5Hca.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4800\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-12c0\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q0TInxgkeEEh%2B7ZlJFsJ7XHc3NEAnxfM1hVS67GdJwP17e2bBPxzbZXWrbtQ5rw8%2B3lavMhEue8We7d9Yg2unu4U5YhgtRRv1LceMYbNhOlkaNChYe59MBeI5CEDdAqKmzc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab101a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4800,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"707b809e99c423fc2b6ee1ec5a03fa34","sha1":"2c6cf0dd7f5663b94cb93d806f2ad1ae00a7a6cf","sha256":"62aa159436c396846111d6145ac49e162d54c798fc2729aa7f33be10bd52a34d","sha512":"7501e0e76edca62221eca05f05da2221ef834cd2d8689e4ea6936382835c61e2159cafb4f9312e51189a3a806dcfe4bdcb233fae7b7270968a72ba4463fb305f","ssdeep":"96:OElbw+iX3sOId5Rs7VdggxhHLDPFrJgdylH7KhrwMzV0tH/aYkXBlJdkiq:bwT3zIK7/g2hH3PFydyh0rw98YYQ","tlshash":"e0a15ca74350223ac0723fb93458ce4eb8b1a935e3d6cae1a3c18c602634dc35d59d71","first_seen":"2026-05-13T12:54:05.709988Z","last_seen":"2026-05-27T00:42:22.279572Z","times_seen":6,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/bee4af44a4a62c18956040b8a50b075bccd72ad1.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /bee4af44a4a62c18956040b8a50b075bccd72ad1.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UUJOi%2BznbDYAz5bSHs0SQ177sHluoO6zxXc%2B0ZkehWV9k0MhQOl%2B%2Bdmju%2FGn%2FBA%2Fl%2BY4rRMkJw5KtZd3dkNkhE8RQix4QWT2NMdVqbnw7j0kF%2Bi8yIqe%2BxcV3FBwkqlPUjY%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-3aa\"\r\ncf-ray: a020fa11cb351a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":938,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8bc67bf4f946b443fa399638ef64db86","sha1":"bee4af44a4a62c18956040b8a50b075bccd72ad1","sha256":"f9875b4817c93c64e2d6ad58b5bc941ee0c586f3f9fd0b7eb840d5df95841412","sha512":"d681c168a6bf4663aed9e69da463467be76f7df46eb0edf12909f4f57d10827df8113a61f8abb0e5a123f6a6b69521ec3b0c0e9b349730ef278ea92fe801765f","ssdeep":"","tlshash":"c1115bf406d4105a8e0e43b369fee63ae13f51806b2f1940a75903d9d75e92b2d567e0","first_seen":"2026-05-13T12:54:05.795871Z","last_seen":"2026-05-27T00:42:22.280132Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/bg-Zq_-NzoG.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /bg-Zq_-NzoG.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 30846\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b26-787e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tAORoylTJmTez8sEhwVDYJyAodozBkWQQbvfUOOoiBKlHHYJLfEc5pk%2BFu%2FoKwpmWo6psZtPd3ssw%2FZOn0AdrQ398FohkNSY%2Bbfgn8LDinKXi9DyyPNdSfvQiT%2F7Oof9Hns%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11db3f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30846,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1948b3125773ebb2a44d063c55d79528","sha1":"53cd90430ff9d37abae07553caecfcc797ad76e9","sha256":"c291185de78fbfaea18688a4a37081760baba731f653bafabe020a90d7336dfa","sha512":"e6ffd427af74f8fc961acdf7754b4eb8e6b2693c38d1bc80d56e41838ddb8c2c7a5895f3e5f10c5409516fce076da12c1b198f772b2d762341e9379504422e9f","ssdeep":"768:zT5VJtkZVcVrLXomzfwg8QDhGzLwuQrg/1Cmy2:LJWZm5XnYcwLwuQrg/V","tlshash":"2ad2d09705d9e27ce47020b07c83d6cabeaaa83e134b6b5315dc40326736bc1365dea3","first_seen":"2026-05-13T12:54:05.785369Z","last_seen":"2026-05-27T00:42:22.280705Z","times_seen":6,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/contact-small-ball-ChDya-JL.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /contact-small-ball-ChDya-JL.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22104\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b26-5658\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W6OPMRaUT1pNWBTRrGcagYcWELjM0u0%2ByD48uUcypRiKMlArlaskU9itOu%2BlRB7y%2B9i20mUJemm5HRca4q1wQiDP6Gi6S7WdxP%2FZ8ieSupXRR2ha9MciJ6EndOLLENvzP4o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11db431a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22104,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f72819ec84379edf697442c1be73ac8b","sha1":"62af31c51f807831e4bc52203916854f4fe1c3a2","sha256":"fe31383d5a86698cda3bc3923e3abf0b63a40abe7fbd222dc6cc5641fc07d135","sha512":"11c8a2b22050da2e88f69c105908ef3c8c494b18c95b7f56b1b664751f1abc708c314f7eda444ac5d48c92e4fa96534faa94d8f2b9896e56429c66b28bbea451","ssdeep":"384:zwTLZmDj5yuWjMi63Eosl++kMRSqLUAAmIOWxusL/psw/xhHGVA:0T9mDj5mjkEos8/AAmIVxzX7GV","tlshash":"f1a2e1300234d860fd31ea7808a1775aa16fdb173f0a5e7454aed4fb1e80e06b29b5cb","first_seen":"2026-05-13T12:54:05.796712Z","last_seen":"2026-05-27T00:42:22.281273Z","times_seen":6,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"botty.com/assets/icon/favicon.png","fqdn":"botty.com","domain":"botty.com","tld":"com"},"ip":{"addr":"172.67.73.234","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:57.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"botty.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 25 Apr 2026 17:43:13 GMT","end":"Fri, 24 Jul 2026 18:43:10 GMT"},"fingerprint":{"sha1":"9D:6D:B3:87:55:5E:5E:25:6C:88:8C:37:5C:E1:3A:EE:FD:51:27:6F","sha256":"76:1C:CD:A1:51:A2:2F:CF:24:92:D0:75:44:CE:45:F5:9D:7E:B0:E8:78:A1:68:F6:7F:DE:41:DD:DF:15:8F:CE"}}},"request":{"raw":"GET /assets/icon/favicon.png HTTP/1.1\r\nHost: botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 180172\r\nlast-modified: Tue, 31 Mar 2026 14:51:45 GMT\r\netag: \"ad5d248996093e42a2cf23524e70a9f5\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 72f384e970588ceefc20249175441968.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: V_ui0jO1cf7hifHAXZxcCH-tW6VRjGN3zEYRKZ9s5TeNq-d8BxqX4Q==\r\nage: 24892\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W8O%2BTS%2F9ia3DwpLBsdF4xdlBEJBP%2FSpLcuB3xc9q5uVvEhJNaGKCrWgJ9fuI7%2BKiIqx2m2hzBdflfxKX2hsLcTGl8RzStdnwQzaHw%2FnxkIivwJ4hGo2rsgsnmA%3D%3D\"}]}\r\ncf-ray: a020fa158da275ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ad5d248996093e42a2cf23524e70a9f5","sha1":"c943fef0d076017c2323de4ee5405f59aa7bf777","sha256":"a0e654ae38ae3b7e693a99dfbeceecb73ac5ef409f108a85408511b24c3baee5","sha512":"ec12bbaf5b69806d0b0d50f253f079f019b9e457d54a3468d2da367f75811832126a5981c59eb5bf67e7f8f72abf4896e5278cee0ca79d0716de5ffbde27cab3","ssdeep":"3072:juc9/RzCFFF5J6Tb/BxIjNV4N+jVntU9/XsyHtZwcXEJcj6xM0bVE5OJWpyObLjM:fGFr5J6nBCfVntU9PFrl1Ox3a6IVLsiy","tlshash":"fa04236408aef2b4f6f7342d05fbe064f519b987ec1c99167f25af107868e0063a91ed","first_seen":"2026-05-13T12:54:05.750221Z","last_seen":"2026-05-27T00:42:22.281873Z","times_seen":6,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":15,"receive":10,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/index-B8xdKO1o.css","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /index-B8xdKO1o.css HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69b96b26-560f\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPiVn5EkKddB0iJsAO6SkXHVa00OV2V67N3xDDr%2BXLhe7P2ANtBmafYUsbBIvePX%2F07DfB6wSlsy%2BX1iCY8wF6uijH71yaRCmwDSiAjKUyzEA0dCb%2Bnd%2Byo1x9jiJ2bo2B0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa118afb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22031,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (22030)","md5":"750f1d4e03212e3609f2c37db549d01e","sha1":"21880dc470fc7f45064e8e25c065a68322759bb1","sha256":"b2d961ace2c94d2454c30e802e2a60b004c1a564f2a26653946af07232f6e6c7","sha512":"9c33a969f5eb20aecc64316179554452d7e4143404b779543b6a896f76efdbb488c7ed55fc531b7318b13fa6331c02644b4e3b066e29d7ddf2195c981df6e679","ssdeep":"384:xz1k2Tw/7NN0qmwhwK8VznsCdCCsxyClC8GC4/JCoCM0CqYUMCa83CDmRAyzDOnB:xzsNN0qmwhwKWznPd9sxNg8J4/MDMnqA","tlshash":"45a264d6a919073e2d27547b1398f60cb73ef080d96683f0bd86d29523cb2e90a77b11","first_seen":"2026-05-13T12:54:05.764823Z","last_seen":"2026-05-27T00:42:22.282474Z","times_seen":6,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/5e27b20a0df86dac4e23270be9ab77934d666997.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /5e27b20a0df86dac4e23270be9ab77934d666997.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dt3KIVlnil8n52FSADUYoc9U1pOKW9JDS%2FVxOHbpLF6JgiukfERRbW%2Fu%2BNYh4xncRnScMyWdqCVD%2Fbau9tRZpb1JD%2FsAlIhhlbBwdRipHst25G0Q%2BJLEr%2Fygjlt0d1huFPs%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b96b24-5da\"\r\ncf-ray: a020fa11ab191a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1498,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36f7321432fb89f2faa4c7bf9542185f","sha1":"5e27b20a0df86dac4e23270be9ab77934d666997","sha256":"0f5f5099418bd17de9180cc50cd5ba8888ac77a39821c2f71703aaaf8e99c284","sha512":"ad4c021937b6d6c3fecf7959ccc2db2a6c0b9fa32478311a5d2b7963cb18324c78db2e9ed1495b26db320623504ec055633246bf8f67c88b61f05e49e0fb8fd6","ssdeep":"","tlshash":"7031d0f3d2d99590404fcfd5dcaa9eae6e5b6078b392dbf001a51b40b70adda5548cc0","first_seen":"2026-05-13T12:54:05.740476Z","last_seen":"2026-05-27T00:42:22.283064Z","times_seen":6,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/binance-8FeLBYEy.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /binance-8FeLBYEy.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bwrIIZNucjvf%2B%2FGYYodyIoZ%2BcEP7l9njrfsJiD6XX3Tbb3fEiMazAoMr%2FeP0kyDEv%2FJdVyI9CgvyNTGuhHVaZmfWvRUqEBcI77j6U84ixosbut3st%2FIiMFiWLsNK3lZIBe4%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-1150\"\r\ncf-ray: a020fa11bb271a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4432,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7dc4f636d544a05b81e43a4269e4c6ed","sha1":"91964b9ff2b15731ed756b9bee8f5e6b508f823e","sha256":"14b20d89ba4c4999348a90fcc67521cc7ea445813cfc94dbd1ce95d50f46e4d5","sha512":"c243a2b763d61181a72577671793314304210ee1767e34a09dfb50aca82a3e70b186c06b78bc67cdf5eeb0f354937476d5621f64e79cf01bbdf07225a2a0d0d9","ssdeep":"96:sJ7SPqwXt+lCk7ZbWaWhPH38grS+JCMTQlVCdbg:s7ct+oubWaWH3brSE4cdbg","tlshash":"f79164d4a3e8a3f0b01ea7e59a163079390712fb2502c645f7dd2c865f4284e4d1ceca","first_seen":"2026-05-13T12:54:05.771335Z","last_seen":"2026-05-27T00:42:22.283663Z","times_seen":6,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/3d7f32d54226c36c4164f21f3730d0d67587a11b.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /3d7f32d54226c36c4164f21f3730d0d67587a11b.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQglfnFdp%2FcZuA%2BolYXMb8jlPNd8P%2F6DKUmfUYMIIgUgl8Qf5Sb5qX00BVXbnSHk40AIJK7Y07zLMB6f2IArim%2Bex9a3sL%2F298x7zkikjcsKTYUi14Ft%2F0AyoHsQVETfGI4%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b26-67d\"\r\ncf-ray: a020fa11bb291a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1661,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"077964b2ae4971e1c549a945979dcddf","sha1":"3d7f32d54226c36c4164f21f3730d0d67587a11b","sha256":"572b698461da7876a68d92c7b5b4877e9ece700eb489296bc8f84debc6259a5c","sha512":"2706bc7a70d354a4c10524e8f60c4c08bb8e23e951367bf4e8e0797d7528f81773f38fd5216855ccc7dc790c24cb847701164882abbc9e43616ba9d958a72b0c","ssdeep":"","tlshash":"ce3172e953d9d3dca009abd8187e2c3cbb3938f23902e47c0ba965059a044df0c964e9","first_seen":"2026-05-13T12:54:05.6707Z","last_seen":"2026-05-27T00:42:22.284264Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/who-one-BlAn9MoH.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /who-one-BlAn9MoH.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46848\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-b700\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3lTB%2B78aYxGUDUDUQug5ZfrdGZqoY513dSaM0yQ%2FtPW0nrZFIDr%2B6QEVRDn3Lfpf7ME5PHj%2B7MXHrL0w2V6swEFyMJGIcQxFMRnuS2yEKoCArEFV5133s5Q9zilKS4zqajU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb2e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46848,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"61cc909f6aa5d2f2700c3b16a0e0cefb","sha1":"143161b60cd7c63433ad9ce65cbc03432d3bda74","sha256":"1c6f0395cc6f560af2fefff54cff973cb0fa2d1346288e0a7f8b9af4f1d679a5","sha512":"daef4386fca655513a0f2a9fc8d33410280b7341c1ec49e8f6d8a0b33f0961127dfae513dc75d5d714d39184a286dcce442670379a501b7d59349cc91354dde2","ssdeep":"768:3TT7MBbYoH7Sw1FlpxKAlVUD5qxKZBROSvqNOEJhamSiA+5UjZFAcoST:IqODhlC9sqO5lJh43qUFFAcoi","tlshash":"ef23f16de6635f51d6ae8eb877441915d90beb37ac3987437ccec583188a80cd82c4db","first_seen":"2026-05-13T12:54:05.800472Z","last_seen":"2026-05-27T00:42:22.284843Z","times_seen":6,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/profitGraphStandart-ChbP2tDr.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /profitGraphStandart-ChbP2tDr.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11904\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-2e80\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SCEDJn8s3KVygIAAzICt2UzN2xkMRd0HfQktM3AmCvEgnfB0Y%2FndQWf87nsU3SlzCRWR72Y50ZkTC4pPbmLbwKODsEh%2FwMm4RgmvpcUnjRtG6nRRKPSIBbJ5WwrJ8o9X7Bk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb391a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11904,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b707a7e95ad9a8c81223dc9c0277c009","sha1":"3f65329f67b1e8ea79586f95b9520ef5667bc577","sha256":"8d5293a85d5447ad558fa0f033bb7621ddcbcb0e2e817e5cee887ef5d93b536b","sha512":"317b30fce40e7bff5d0fc41d56bdabcb7ee9001f9b93f8f0e475c9eff4d124e4b9932de1c8011ee28c22d573e532194aa28794acd24c1914849051664f2a6093","ssdeep":"192:XwTZyi7XrlTDWXfJ4k5L3w+IDuFtfDwhIIYUZXjwQ15sjizJgNCGl9OkZa:XwTZ57tDWx4kR3YS/khII5SNjRZa","tlshash":"ae32b1cb91a5072cdf0185b58d980eb013c2af21fe62c68f559454730e63fe965892e1","first_seen":"2026-05-13T12:54:05.70278Z","last_seen":"2026-05-27T00:42:22.285466Z","times_seen":6,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-27T00:41:56.313Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 17 Mar 2026 15:44:25 GMT\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GeG07aTYRLgnFiXNHah34RQyrQuNREMxlNKhwyHwEX1%2FeDp1VXJfEjoJyowO7GsgdeSkZz4BLV4IkKuBfH%2FMFlEygHZEObV9En2HcB8SANbABLm7AWe4UukF8m8R46b4Pn8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: a020fa0f19e15690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":222400,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9577)","md5":"254452cc82c0e5786a2f233dfeb6a4ca","sha1":"f9dccbac1d82c4aa94b7edce2e5e6b81cb8b8ac9","sha256":"d33b44a960a26e3fb8154d728da65ea108f0c67a61b5874d023a31b066ffccd6","sha512":"f464080f821303b30a84b471b370cd9eeb594d66f672f03d49b6f185f9e889cd5e2ec58e89b6e0f97b5ed60f9b49ed9373b5e560a329bee82feeb438bf2d34c9","ssdeep":"6144:CXQKadHPlCpvzRznLEPamZ9Jeu6lJMS444t4/5+:CXQKadvlCpvzRznLEPamfJeu6lJ95+","tlshash":"2624fa321550311f513bf1d0a592578f33e6e12ae34e0abd57f8229ac3ceea4156badc","first_seen":"2026-05-27T00:42:22.286092Z","last_seen":"2026-05-27T00:42:22.286092Z","times_seen":1,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":135,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/ball-right-HH176_sM.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.797Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /ball-right-HH176_sM.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 33888\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-8460\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHNw1X2TvN%2FIAXTUmWeWcThh%2Bbcm6%2F%2BaapqRpqf9%2FrF54hCWyts5spZcOgD5gRH0iUuYzHd8lg68aNU9SVvSFGXzqgzuKjfdLUHO5OEam573VDS%2F4wDRk7kgCgqTJ5GwSzw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b0b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33888,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e9d321e47466961a77d1a540111c9e1","sha1":"27163b44822308b2c8546c8c4253746005a05897","sha256":"ab357d306ff25ddf378c71ff231d721f069e967442687654928d7261d37e32ac","sha512":"50ee3c143dabf4f0cd3fcac5ccb214dd2208633808f262ec387711d3b82462bb51ba26d3e4719d42dabd2d9a1ebfa785ae7779d694bc45b006ff8430b1eba92d","ssdeep":"768:2T1UCuk+IyhOBHispLSoCePwZJ8WQdUBl8FM2FYi9bXo1ZwcXShHq:Yf8OUIYFlEOi9bWZQK","tlshash":"95e2e1e5125983eff073c17328e117f4b34109baa1b5ccce96a707427c2ca667a98763","first_seen":"2026-05-13T12:54:05.76606Z","last_seen":"2026-05-27T00:42:22.287746Z","times_seen":6,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/chart-D9fEYMYX.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /chart-D9fEYMYX.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 295226\r\nlast-modified: Tue, 17 Mar 2026 14:54:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2f-4813a\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FWiDcPIwLLJw5GlWTlih2rQbntyxb5ltw2BIBDa22cMs1x5UXres8UaFJ0qArTrD79Gqyam9YPk19e63nnnWpMjbdGcysOAWsjmCHX6ffVqq7mJN%2Buo4ju9VwCYi93Fa3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b0d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7e4ec12c60cfbaa82e519bc52a0233c","sha1":"84bbc0b36b71a305a7878642b40d450b2534a170","sha256":"5412d7b985ff0fb2b7324ac4fb47664c972880341e658e70495579a27db9ed66","sha512":"6f98f3ba7dd833767997a49fc006981a37ab463b75e4be92099bb42c3f75ec95f8e11c15edbc481e4834668b2f659f3ce16ba10094089e842d0181bf90b21739","ssdeep":"6144:+wohMz3gpS4ZTuI+nE28aD2bWxBRA2roz5RMrs+W3oAoTRkUo9TLj:+fhMz3gpjEE28OSWxHAztqg+2yRkf","tlshash":"445423567f6023e9e20d4fb8296cf933af205d661184ca305cb613265b941cfbb3a39d","first_seen":"2026-05-13T12:54:05.677348Z","last_seen":"2026-05-27T00:42:22.288491Z","times_seen":6,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/14db1b1524de733b354b78ef3f38f47865428a9b.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /14db1b1524de733b354b78ef3f38f47865428a9b.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Su7mNCylTmaylZ91LS7VUu080Xdw5GyK%2BFxKm%2FxEj0piwgdEHd43p%2F%2F938%2BMsIBD0sZ5Aq%2FmHfN%2BP6xrjPnS4fm619DvYXxnSIv4dKFG50GvJ0Tt55dLjCTy9kDk1An10Ro%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-3f7\"\r\ncf-ray: a020fa11ab151a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2d14d0d23b29eaa3907ac39093ed223","sha1":"14db1b1524de733b354b78ef3f38f47865428a9b","sha256":"8ea1dc67b4b953288e8bbe4f981cfd7586ad16caa137008afbee568cb4f2f861","sha512":"d06073277fbf60cd910dda573328d7e83dcf2bb8d72d547067d303ed22ec1c56e55b00b4d6455a6b6bd41af130754da60120b523c53882981445d13902a809a0","ssdeep":"","tlshash":"7811c3f6239ce2f0f108c771842544b13c1b10f8b553a99f83a22fd0691010f51c2ea8","first_seen":"2026-05-13T12:54:05.712356Z","last_seen":"2026-05-27T00:42:22.289199Z","times_seen":6,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/point-four-jUFXKrE4.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /point-four-jUFXKrE4.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 161198\r\nlast-modified: Tue, 17 Mar 2026 14:54:36 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2c-275ae\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uq3Evt818luPhl089T7LVYLLJrE25qL%2FF%2FriKRTedMUukz31PoS3QBF9GS0Eur8vfRvSBPSPqqIp%2FC%2BZ%2FCDLwqB%2BTEI0qsojTB2aiTJCkaUApeluq%2F26yBW1wV0IBnto0Z8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11bb1e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161198,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"56beec45f1c4d519df496b4ef625959c","sha1":"5b5a016433b2c84f15c0699cd6c8a006502011d0","sha256":"56c4e4ebdd78df1fd294daa7834b45da2eb26b87dcf2b2f4f65288c93af681df","sha512":"93f26cffbcf3d485e81846d9fec4c658ba2a1f97604dd3a6b2d4c86ab71319590bc18357c341118172b87e65b698cde318a60731d0f12abdddb0ef40adb3646c","ssdeep":"3072:onYepKeD09dJleS8udJKaak2B1iBr7YP6jsBWCyQkcSSLpVSUT:onRpKo0NgXudJutUEksl9kIHS6","tlshash":"48f3123977479cb1c9a399ec2ad2c7d11b1de0ca4cb6b94b167c41bbd234ba5a3cb044","first_seen":"2026-05-13T12:54:05.782735Z","last_seen":"2026-05-27T00:42:22.290386Z","times_seen":6,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":131,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/3bd64b5fbf1719ec20a9139bbd063a25a5e6fbd7.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /3bd64b5fbf1719ec20a9139bbd063a25a5e6fbd7.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J86D%2B8bkIYNmG%2BUjdx1S%2BSF3tGWK7b4pyfinSAhYM3ghI3f8DcPzN4p4seq%2BFepqPbVRzbqgOHqG66gqwM%2B5R%2BREZZke7SPV70IB4WDM9n7VW%2B4pGwztZYw0yzH0N0qMO7k%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b26-5ee\"\r\ncf-ray: a020fa11bb261a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1518,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8149963b38120c5e0b7d336cdd9adcd0","sha1":"3bd64b5fbf1719ec20a9139bbd063a25a5e6fbd7","sha256":"9b7abc452c7371c93e909caa6dd610d3297913ff038c2930a10127763563aa02","sha512":"75db9609b5dfba672ab76fbc5b763e988d40b79adeda2fe9c67e14837df3e09644186f4c310cf197c923862a7ca1b2a30980a651680339eddc2fcd18c0662ef6","ssdeep":"","tlshash":"e031cfe283db3691d41b6be85a26ad38b59c65be0db5e9a70e7612cc770110e1ce4824","first_seen":"2026-05-13T12:54:05.777783Z","last_seen":"2026-05-27T00:42:22.29102Z","times_seen":6,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/e4e4d7ee6a173e32c5557f1cd0cde9fc6726408b.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /e4e4d7ee6a173e32c5557f1cd0cde9fc6726408b.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1044\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-414\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKQaLxNG7KRwKlOf9QCy5HAQMZ%2BZkion6g1DdAou7py0QPVIFvbxaZhocTyvwQCqYA9qpL1zloz666z%2BBtfmLVhE7KXlTuIXozQhbOsk4bOd%2BE9Mzxff53DBb74b8Uds%2BAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb3e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1044,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"329c4ee0d4b8abd2b6290ea18f20eab8","sha1":"e4e4d7ee6a173e32c5557f1cd0cde9fc6726408b","sha256":"ce1c2e596187ca8764d78c55644afc612e8f7d0d8fc3ba078d6a4259ff6af5ea","sha512":"ecf11873b283c7b52ba9d3b2aadbba6f121e809223a142d5fd9f6f8d5f974048d33bdab46282ecf278f4b9c9db64bd10df8a42dd4c2875d1c5f49c62ebb7650e","ssdeep":"","tlshash":"7811481ee347079cf051be34f0413f02d2e56d2256895a13c0c287750f018c509ee9a6","first_seen":"2026-05-13T12:54:05.761921Z","last_seen":"2026-05-27T00:42:22.291679Z","times_seen":6,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/apple-store-btn-DJ6Wx2Um.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /apple-store-btn-DJ6Wx2Um.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 4998\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b24-1386\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xuUQLw3%2BBf5rtsgj5dGiwmr%2F1T8tN2wTPFjShWrgL1MCV6GJj36HemeBPSy8D6xC9ripMkw9g40f3XTnW7fXKH4SMcP8fuKxqoSyFhESsyXasjinkFr2xDJbXiIcfYRMrSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab111a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4998,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"076c840b7b77037b7b113dab98def478","sha1":"6a912e75557593abdb8b075193baf842b731a86d","sha256":"12f7af453b7d4798198004a99aba938d05d00de8f8c7c06bcf97f71dab4f7c6d","sha512":"92f192752593c49cba8307093ac70982c35aea1f3c4111b4664d8a83a08e221493b8287689b9a7ea44f6798c79b4fcdc96d64219bf06606dff369bb0b417c6cb","ssdeep":"96:5Elbw+iX3sOId5e1kPGjtJliOXS4GVxoLdf3jfBRNtgUDia2kVZdq5C7gnke1Iek:UwT3zIEaGZn0VurThieg5Cckb","tlshash":"c9a17dacd3691a2af76367f864c93641e9a5baf6473f64588710e05c6b031c80ef1885","first_seen":"2026-05-13T12:54:05.792674Z","last_seen":"2026-05-27T00:42:22.292335Z","times_seen":6,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/point-three-CFjvcO1Y.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /point-three-CFjvcO1Y.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 147622\r\nlast-modified: Tue, 17 Mar 2026 14:54:36 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2c-240a6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLftAGXUn85jwrXKTDPb5suYfgwGHoJqdWjO1Aw2I6oA3x4NuQWJ49fNxcilqNyuo%2FWh5KrfozMTuUsZEih5eeiaP5IlVJsfVns%2FTSipysDBrZC9VgYs1nVpTgg0DpZPZbQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11bb1d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147622,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f067841c02e1d4746200cd9621f3ecd5","sha1":"f09ccb853e107f4bfa11491f1c22abee3c5ccdd3","sha256":"5fe590f0589fc62d0cac3432484f64774baf10c9ac775e958c6e8505f6238300","sha512":"2a082fca612521d831176f957c59cd7a98390ca7cabaae421e08eebe117f18b7a7dd147a8efd7f8a3d9ac8a80eb1cc4f4af33c3665905481b7c8b821da9e16f0","ssdeep":"3072:KsxXeUZY+qS/z7gt77PIftVKXBrf45pAGwAdCKA//:ZxZZKdofAr6NwAdCKy","tlshash":"37e31232139966d4e2713b7d630e9b3edf4da0f4e04a64af24cab290417680963d17eb","first_seen":"2026-05-13T12:54:05.717473Z","last_seen":"2026-05-27T00:42:22.293Z","times_seen":6,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/who-ball-CmksIpxW.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /who-ball-CmksIpxW.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26574\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-67ce\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1sEXGupl6x0AktOMbnwgdRX6ACqufvHfjlDTgRIi86rzD9TDOVMhmSYF5Z%2FLKG7VISFio3CVh1p53%2BvBQfFQflH5emY6zXjcBSXeJWvRO40bmqKEZrBj4ALj4N4tzNcwkHA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11bb2a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26574,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9fd0b8a26fb640114d312572af304acc","sha1":"55a670f4264b5f6f8e9702ddc53e9b2337e5d920","sha256":"737eee1d3fed28d609c7ee2f1308ca89ee1007325edfc667858033aae367de92","sha512":"67d36a91da839e7bb7da0661cfa38d3c7d66d39e519d08b64be630dfa27f534d5230da5bd4abc31dacb23a3ddd43eb774a52c7a506a0d0cd0174984f3387ffb7","ssdeep":"768:MTnNf4wlRudmrw18uRqb2ZTgc0qZUs/SyR:GNgpdew/cbsgiys/S","tlshash":"98c2d1971a0343b2cf463738719c274d361dd89eba0dfb3ab2c5947596fa2825d24b82","first_seen":"2026-05-13T12:54:05.767072Z","last_seen":"2026-05-27T00:42:22.29361Z","times_seen":6,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/settings-EoFtAXNz.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /settings-EoFtAXNz.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13950\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-367e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDYuPy9h9j8ERaShlL31p0Q6Cxz3JjiHlZCzYCTTbxBZqi3jiaUsTwBeNIS8xseMMRm%2B9uNfHRjWCGHHHrpg2W0wqdE5Godb6241tAG0bCNRMbXyXsUHMjUpbyi51sWAv8A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b081a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13950,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee487d4311b9ce2254f05bb8d92d07e6","sha1":"27cf2f9fba607134a2b000495e3ebadf7820a994","sha256":"9d5d93435cb7a649f4b432be4c370a722ac9550d6a68b59053cc4cec7ed12161","sha512":"4f9e93e4045a6f22ecb6414b5ff1d8bb7d3a6956e7f0127853ba2fb932f5d5f01b2ca78a98c2f6dfb1e9026fd1ab6039db8d01b1e41ee177e5778fdc8574b848","ssdeep":"384:qwT/6FFwHHA8CxyeQb3h3pmJqHs5Re+XEI/uCG:LT5eQbRZnHgs+XP/I","tlshash":"1052ae38d3854fb5f02f887c86868a46a710682446b1f1e68dc25aa77a0dfd38c7d597","first_seen":"2026-05-13T12:54:05.70777Z","last_seen":"2026-05-27T00:42:22.294284Z","times_seen":6,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/index_1.html","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:57.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPrFsEBYLxogwaV6dyyYaTbim0YBIupshFnx5fd%2BZJgsCjvFtor68rQwAvlsu6OlI0wwzQwJfHhcemc7IAS4sLsLNV0cOyDDGmWBgJvbHb09S8RhKP4b9JsG%2BW6QX%2FSOwU4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-ray: a020fa149b681a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":147,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"1b89189e4dfeef4668d8e26260d69b15","sha1":"3a6f954572d65788041fdb2aface23a071b2915b","sha256":"e11f9db354e4478cfccefecf9655738aebb33c82c58bc3cbcaca2721985c9523","sha512":"2fd60196c45b0afc1cdae1a7da805d958e526134959f0ceb087622b600b99fedde755e69f9d25c89b771601c66ec0352ea5aab302bb8c0818716b45b820aac3c","ssdeep":"","tlshash":"13c02b22dc04484f3d005fd1cb8bf0c5c002dd3cec315c00b856b544e9ac231c012549","first_seen":"2024-12-19T00:00:05.397279Z","last_seen":"2026-07-26T12:47:21.166471Z","times_seen":83,"resource_available":true,"data":null}},"time_used":1008,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1008,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/InterTight-VariableFont_wght-Catr4xtk.ttf","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:57.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /InterTight-VariableFont_wght-Catr4xtk.ttf HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/index-B8xdKO1o.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:57 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 580572\r\nlast-modified: Tue, 17 Mar 2026 14:54:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2f-8dbdc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pi1pgek1zhpfC1Bdu93MaTH6TI%2F7NuVEmr5vHqdeg%2BGVuQZDhhhuIq9ZOjRcnftxAIQvZqT30ZL3cHMG58WyikbIAL%2B0rFReVdEq0rBt%2FEUJ%2B7vatS2nUdOZ7Eg6XbEL8Do%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa14bb6f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":580572,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 19 tables, 1st \"GDEF\", 43 names, Microsoft, language 0x409","md5":"92ddf6027174e34750e5e2019938431e","sha1":"bca8b03ebdc033a5c1f7050eb217efdbc79a7639","sha256":"663efdf98b2b383175690cfc39b22d8874b7a585fdbfc2d86cf310be42a7ae04","sha512":"975429af82a0a5fecfb0325efd37c4c6d6ae49ce2a8fc50e751b9b4f72bc1db0c1e68131050e0dc292277b5ac13d7abeae0473662da285a781f7bd5fb29d8480","ssdeep":"6144:W/twwVwrSPfNz5PfpgJSzy0lnvJ1Phmn0G7PX38Jq4zYhefA4x7kPwIoxBlZZzP1:WA4uIzy0lnvJ1u8J8S9Brzp4PcEeoq","tlshash":"85c47c07f3a7c35ec821257287d2cfe237f6785099459b1b64ae3e29ac533f429a05e4","first_seen":"2024-10-24T14:44:31.321495Z","last_seen":"2026-07-29T16:01:19.109634Z","times_seen":99,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/hover-bg-CPhXLMBt.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:57.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /hover-bg-CPhXLMBt.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76940\r\nlast-modified: Tue, 17 Mar 2026 14:54:33 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b29-12c8c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jaazw5xrbUQWkxUF9o2s649Bt0Qg57SztwD5OZUW7T2lrnH3N1Px0HxSFr3JzuEG8rSiyDhuBGl5fnen%2B44rf9j4N3OH8WDwMHBOFHKgvzC2cICgV1WqwhL2LvyMv8iecBk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa14bb6e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76940,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b7659fcceb55e80c9abb931b67b09e1f","sha1":"0d36db3f706d36139d5a0f92b3b1dabaf70f43d1","sha256":"d02034b307ab267793b59324483640ce29f274fc22ea1163e8403b29f3cd2110","sha512":"52166b6ca847f037c1b1cd10fa77ec77856292f9fcf803bec153a94bedab1f1b1b8daa74b692ed0fa0eca678d59a21a983722c807b8893f4f75583e41c489911","ssdeep":"1536:ldqSy/CL2LTLgFy3aj4HkH/u45JiwemFx4B3MsBgyAnBKq3r712s:LqSgCLYPKMHkH/2mFxB58qVx","tlshash":"9573130c5a865b09fd15cfb2a1bdddc43b7a96cdabc08dcb415e2a5c499db03802d8c7","first_seen":"2026-05-13T12:54:05.692946Z","last_seen":"2026-05-27T00:42:22.296999Z","times_seen":6,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/bot-lYrU6MbJ.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /bot-lYrU6MbJ.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 334108\r\nlast-modified: Tue, 17 Mar 2026 14:54:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2f-5191c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FAFaukWbZ%2FwbT48xOlP%2BC1Q3COwR2cPgb94WLoyGPC8hnvQvzZ2fGyizoiZ%2BFNuKoWv56j9V60646HBtBTbC2cfG1OEjRAwpdF95PZbTTKaOmDqGH0H2hLDl0g4FZgsp8zo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b031a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":334108,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a91bc7b2f3d2696c1118fc74285aeae","sha1":"509b593ddb98af621f13055c0e40240cced4f468","sha256":"3411079febfc6446d8d1e6b56609326a978aad2f372cbd00c03a3c594a453de8","sha512":"268eeca4ec253dc77e8d3f065c22387b03bd44ce4a71bfdbf96aee5ac87f4d624827e2e36686928c8327553d81c2b0145692eee35f63c1646ef1dfe7de0086aa","ssdeep":"6144:NJEGnPK0DrqNYist5gzvY4bxcowh13ArL+O6xiS55o7zI:vEGiGrqmissbmNhFez6xnHu","tlshash":"2b64234bdeb63926eb651d2f2209d9e4322f483e7c6d024252df51325b2c896407b7f7","first_seen":"2026-05-13T12:54:05.755197Z","last_seen":"2026-05-27T00:42:22.29764Z","times_seen":6,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":206,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/profit-month-DI5ct6sd.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /profit-month-DI5ct6sd.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51358\r\nlast-modified: Tue, 17 Mar 2026 14:54:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b28-c89e\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2n%2BeQ8%2FTWIJK4wRezWdYoUAAcw%2B5TNGuq5qvgniKtYqEnD8Hqp566hhWqU1mOpsuFo9eV08kRSj7W4k74gD1KvpEL1CsnxS3ME5kof3zdNUiO6vdZtW%2FqyIlEwUh%2BVUWzIk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b041a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51358,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c28fccef25d20b92d4dcf3e01ba026aa","sha1":"5603ed31f37da9dd8c57f690c2f6cff8c1279bb0","sha256":"e9c109b9762b2899c42f2307bf9ca6b0afce3d52b196630eac2d0c3d1e007e99","sha512":"cdfed1f15400b4f754d86a2d50497705274f05d2be5a714654394acb72dfee18e02c6b442a7dfcc5373c1e300aada130fd8e9e6931f94b7c2c945a4091633a1c","ssdeep":"1536:V/dd90b5RvQH94QruCyuN3EvmW0UeB0rb:V/dd90nve4QruCyuN3E+W0gb","tlshash":"7633f230b9563144ee6d7ebee4296d69c1116140d2fc92f8dc15003e78e9df5c2a717e","first_seen":"2026-05-13T12:54:05.79943Z","last_seen":"2026-05-27T00:42:22.298278Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/fadd6c1594ed650ea1f53911ed88ba1a1d25211c.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /fadd6c1594ed650ea1f53911ed88ba1a1d25211c.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eYSbmZcESRiWnJq%2B4NpFuaYNloEiv8B01U%2BgNLMpEywpwJYI1%2B%2FRlucVNniuQK16FryLSTmvQWEsHoez5vvIaEzlDyuRItbnnVTKnjl8soITZ%2Bep9VNS7uImHbsmHTPvA1A%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-582\"\r\ncf-ray: a020fa11cb2d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1410,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b199667282d6e36c8ebce6a9748a5ce1","sha1":"fadd6c1594ed650ea1f53911ed88ba1a1d25211c","sha256":"1794377d66d2e7a2eb832bc1e9d67e14a7d027dd5c88c2cb97db12fbb8b21a19","sha512":"f5492ea3d6439398e176c5efe187530eb866a3e3c1751ae813c1c611d169ac8c0d1c0288285794272aeec16dd7ab38521be9b730414589b1901d8cb77f175976","ssdeep":"","tlshash":"8f216674b3f995e5f010e36042bacd647adb17e62637c14487e50ed8e27600e06f945d","first_seen":"2026-05-13T12:54:05.802423Z","last_seen":"2026-05-27T00:42:22.298968Z","times_seen":6,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/who-three-Z5dx8W2u.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /who-three-Z5dx8W2u.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 83406\r\nlast-modified: Tue, 17 Mar 2026 14:54:34 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2a-145ce\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKzS76q7nGC74q6x6tWEJoi5D4HI53a%2FRMXqNrkxr%2BpE86NdSDRoqHjhsdk0eDeJdvWMFL6ApWlTVGGanUM%2B5Yr2t%2FQ8LwjOnCifAkPUcCnekO%2FW2L6pSu%2FzcE%2F3EnYnFms%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb301a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83406,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cdf835167ebe0d8c74de3289bee08039","sha1":"60d07369f5e8b48f664a60ffbc8e14800fff93e8","sha256":"97c8611c5a57e366338deb8a26b3bb43f0c9af2a1c266646c7015f20bd0486b2","sha512":"ea144bc1002bcf4c8516b9dd97581aa0f7e6aa265829c14854313b2ef0d0e680721b75b3c03e9ed5fa723ca5d6d4a10e309c6ede9ddee32fba1fae1275026933","ssdeep":"1536:m5FY7PfTSnZRXncgti3TZWTrHF7SYqlaXGkOLQJAP5Jv6fHVbnqCsYE2IaLVT:AFSXTKhLYW9slatO8APnSJqdf8d","tlshash":"6f8312a296e56354c0828479983d0b4b066864cdf76a2507f432bf8c771e3a257ae1ff","first_seen":"2026-05-13T12:54:05.768279Z","last_seen":"2026-05-27T00:42:22.299581Z","times_seen":6,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/7b0e3ab86364dd45142dcdc9798f1f39967f4a54.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /7b0e3ab86364dd45142dcdc9798f1f39967f4a54.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mLK%2BmAUww1xR4Uby%2BHMQb1EjrUUnniB6mhqsIVMO5Sy4LqtB1cFdGZv5xllxvEq8Cu%2BH7ZJX%2BaqwykHWwthfhk%2BrktiBM94076uqM3%2BTJjH5pit4agbfPlv41jVo3UiAwY%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-171\"\r\ncf-ray: a020fa11cb381a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":369,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c9c41bf175b156a850d52c35968dd9cf","sha1":"7b0e3ab86364dd45142dcdc9798f1f39967f4a54","sha256":"bf1b27a74c2d08958399cf3153575f85745c74d786115a589c90f3aa23405607","sha512":"9291443625e3bee4bb50494270b42a5dac036f716ce59385c02daed653b4a4cc725c727265676408d286c3fcd44b70e30c6f4694c0e99f82572b64b50f6bea48","ssdeep":"","tlshash":"c9e092a627483c38b81a4e30cf1af110203a52327084321cd9323138911923d7ea3ea4","first_seen":"2026-05-13T12:54:05.784571Z","last_seen":"2026-05-27T00:42:22.300988Z","times_seen":6,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/botAvatarBtc-WdJJd4f3.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /botAvatarBtc-WdJJd4f3.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12412\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-307c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4g9GfZzdClvWtZrSN2BxaxOm5cvCcNXKU5ymgHBDenr5UauzMDklMN%2BIXLxnONyx%2Fgc1MO%2BNqB9HXxniAaqh1moY9jmUmispZtIzcgRya%2FAx207U%2FyOS2PJm0zsk%2FwI7lNU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb3d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d127535d80dd2b4f577b7615e3e66870","sha1":"8d235053e8db13b9c9df4edcb37bdfd80cf1d48f","sha256":"f979f69eab305d36c2d41e95417a14157e0ca2d6b789e4c1932be91a196acd27","sha512":"5d2a52efc41a9755f7c2ae955ca337643a1ed09623270eff2978dd18884cf29f0707e756c733941c854e9f33615c5227eb6ed5f3b7f55a51f357a675dafb0a81","ssdeep":"384:qwT5IHMbTfG0C7Vpu/FeklpVC80X/T6d93A8NIEy:LT5IHGjWcBCj/TKjNIEy","tlshash":"1442bf6113d021a8f0b6997c426852af5a829ecf2375c6c3a74e4ed51702d7aa3cc892","first_seen":"2026-05-13T12:54:05.747636Z","last_seen":"2026-05-27T00:42:22.30166Z","times_seen":6,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/note-Dd37MwFM.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /note-Dd37MwFM.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 22128\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b26-5670\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ng1ClKISsiGZ7zJIVa6Q2dCI%2BC76SSMpdTyRVm3%2FLk2ziOgez4HDYqlvyuSaNTBHzC36gRRMifRbTuAJBu5WolsEqxzPo3IzgV67i%2FICtg7kzb9GhopYB4DcUWyXa9ZaXxo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b091a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22128,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eed2de7742b3e6a1c2b745eeed140327","sha1":"3b9063ee74e955c0b878d9eae423002479c58a02","sha256":"8415bd7cd3b9196f9f83e36c95d6754bc84f1df5a0b4617a3cd0f6f140b1bc3a","sha512":"a67574cedc32a08363eadce2202385a5fe637aed7095d950305fcc859d65461f21b1716040aa4b61e5e0896dd8c34e18a8ad6011a471d8e4b522634e20f9dc6f","ssdeep":"384:YwTrVpDjU2YC5wjaxbpcbOXxULvk6POHPYeBRGrd74liJyFqLRaCJGhdogQ0PUMc:dTZxjU2GjaxbnULc62HP7GV4MJIqtmh8","tlshash":"16a2e15e5448d233f428e8b2678c33a122c02f8e1f0fd45c52aa1655dcada4fbe656d3","first_seen":"2026-05-13T12:54:05.781527Z","last_seen":"2026-05-27T00:42:22.302333Z","times_seen":6,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/ball-big-wait-BMcWkh55.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /ball-big-wait-BMcWkh55.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 71212\r\nlast-modified: Tue, 17 Mar 2026 14:54:32 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b28-1162c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=efhCsE%2BZxpBWwkd7qw5%2FaGWjaGw3WNsOwCb%2B4wH5UJIJLjyOL1LzgVwNzOG2ABuAObrKGiT%2BpRuCdAoaf4siyHXqmFx4qlvWjcKMcd3mg6h3w1pNCwaW2tE0xLQI93SfvXg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab0f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71212,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"560dc38b1d01321045e0119f6bea66b4","sha1":"2886736de23683d0afc05eff5fd52bcf7417c73c","sha256":"53616f42698d732783f7c493badcbeb1a7c7868366ac8d1b567e133112688fb8","sha512":"1f3ce2ff580123acb518b9b433a03fb3dcb1b9f035a77d6e299400520502a55cf6471670b64d757655efcabf2b43a37d3f04be6b2877043f0b6de45b2a5d1b15","ssdeep":"1536:jDVfno/uX3aUYA/u4qnpED8WzfWKYWekdGASELxkiXSbm8:HVfnFa9AW4M22lWzbSixkiXUm8","tlshash":"e363017cb92ce46ac340d771203402a2e4a279cf5469b36f17ce07b51a1386cce1bfa9","first_seen":"2026-05-13T12:54:05.769817Z","last_seen":"2026-05-27T00:42:22.303Z","times_seen":6,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/point-two-bEgw5xdV.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /point-two-bEgw5xdV.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 340028\r\nlast-modified: Tue, 17 Mar 2026 14:54:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2f-5303c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onG%2BkCWKsyGlWspA2Yg81VOnJBQ5JTJrQd8ShAJiEkmlguw0hLJuYnTOcuTCGABqlWD33bbmeyLKDyQI2sfYdliRyEnZ3x4WKssVm7d8d2dT0qyIpMgPMyY3DSJoKtfhBdY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab1c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":340028,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"166ea84a483d57322de69cb5f5ec89b4","sha1":"ffe0b2ddcc69a4c3f81ec04efa7a6ada3e0adb8f","sha256":"c81946f8b3a927c91a527d8d03f5ed568b902f0259f4f1c298a2933d222ccbe9","sha512":"466d621e5c5cd43dba4597972ba95c90fa47454fd17c11a7067b653e65f80705c4816885fbbfedcf2a07fc49705fdc2bf588b5747ef44881f3064f87bc526799","ssdeep":"6144:5FetBNCH8nqLeBOcHGsuFjasBK2pxTnbD5TNYtkDwCWRLpi6z:5FetBNCH9LeBOcK/LD58kEC6Lz","tlshash":"9974230a1034d3e19492c470b25c6c1b9e0ae1798b94bdf9e49aaa81dc3d9de317f4f6","first_seen":"2026-05-13T12:54:05.696902Z","last_seen":"2026-05-27T00:42:22.303654Z","times_seen":6,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/safe-ball-DuGtg7JW.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /safe-ball-DuGtg7JW.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40102\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-9ca6\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pb9j%2FrlBgr2eh9RqYLXXL6bXNqFQMVJ7qdazJqcjYh0%2FM2aIaq%2BqCh%2F7cByvjCIjaaKxDv4c%2BCqJO%2F8h65Rmm9LfZ4MJx9tjg3kk2L6dUKjG%2BRlr7z493vvWvp7XswXwbCc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11bb211a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40102,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2195e97a0e7c8224631e6d112928c31","sha1":"d1642fac0191ede1ced2be6a8fd170eee30f4d50","sha256":"758328cb74106bb5cfbcb7d655787913c76eb30f4f1a45906e64ad6e20a6e214","sha512":"654a68e9fc0dcb2dbc1db04c5c007b254736ba98f6505fb12d9c04769489994477f29ef8a810d1fea2c290a38c12ff2e728f457d3590df29d65101228976fb11","ssdeep":"768:ATzYXkKSoZoc9QwlVIv1ipXe6DIWnlAYJhTjXUX+y2G4Y0wYun:AxVYL9zYv1I9BLWH2G4Y0wYun","tlshash":"1203f246e866a23fc094077356ec0bd903b5ba2d4fd0addbcb0037d7fa6918725998d2","first_seen":"2026-05-13T12:54:05.679546Z","last_seen":"2026-05-27T00:42:22.304297Z","times_seen":6,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/c5de3dbae993a13c7924c295e4aa4f60b1cb0ae9.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /c5de3dbae993a13c7924c295e4aa4f60b1cb0ae9.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msEU9BxMpvqLdlhqH%2FP1OnZt70TwHl7CtXSs6L9n3NbU%2BCWMgVnpHD%2F1OB46hveUNe%2FJL%2BQpE1xcEbrWGRoDvusHY%2Fn4r%2BoRQO1rYHIrOii7JYnbBb3vYudJU98S0hgIx0s%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-374\"\r\ncf-ray: a020fa11bb221a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":884,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"772e58a5287cf01b199b2794f9ff5362","sha1":"c5de3dbae993a13c7924c295e4aa4f60b1cb0ae9","sha256":"675c203496cafdbf54730c189b18f2cef69098e161444a15fee053786fb7d644","sha512":"c9e6f0d32420620b7d6fb0c13b77bf0f5ae45b93a41fe4db2cad3931edfbaf41375c9b7cd4b0d6b8e0e3696c7af617a61bec495bb0a610d44b18644c5114f0a4","ssdeep":"","tlshash":"731159ca93043ae9e0867b78588ce558b6143ce67db7f28afa9000a3e10123f0074552","first_seen":"2026-05-13T12:54:05.791837Z","last_seen":"2026-05-27T00:42:22.304982Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/aed55503d6fb8fb99f22d004a17fd5a0c794ec55.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /aed55503d6fb8fb99f22d004a17fd5a0c794ec55.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=COiVAFIByQMsvpumtib%2Bb0nn%2BCiqd06BNj22%2B2kx%2FAfzHBLSLn3yWZ96femc7yPXcB9UXFFWli5iwghFCWyExPiFvw%2BqBTYzFIfk4gBnV6RY%2BuRGc7FBgNcY1tyUx3cCETc%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-285\"\r\ncf-ray: a020fa11bb231a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":645,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9cba576a19ddfa9c9f1211c260feb314","sha1":"aed55503d6fb8fb99f22d004a17fd5a0c794ec55","sha256":"645c01728c92209b1ed5c02a54ecad91be35aea32d604b34df899dfa742a1a4f","sha512":"933eff4afa377235b93649f892bb8569a393e01aac7835c0a02b6430384f8b0ab29f216bd4a58dc70c786e1a52ca7acfcdb6f917a11026a495bd21523d0a2688","ssdeep":"","tlshash":"f3f09eefe3b32c7de44535f47d5c951081e298d8146bc85896b20722d16824f6b7ec67","first_seen":"2026-05-13T12:54:05.699284Z","last_seen":"2026-05-27T00:42:22.305619Z","times_seen":6,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/arrow.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /arrow.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VFeJ%2BI6I2m5a2nj3KQeF0AzSz2sV%2B0ZhYdBblxIIdM5MGxWFfN7Ru2j015bfgzAv18FFqmn2SZasN3E%2F4xeZTju214ghIaXjo3xHhP8HTajBypRJqrXb1QAA0xif01bTw%2Bc%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-15d\"\r\ncf-ray: a020fa11db411a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":349,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5a627c718b17dc76ba894692a2ad323d","sha1":"cf84598aac56b5f37c96393da37325b0f6998730","sha256":"59e70f72a5dbe067e5e7166356b375009fe114a49aba9e49510f32a5ba8e1ef7","sha512":"2ef05319836173087ec14dd7f403320e09139f0be6a91a4cfab87a482100d1fb1eacc06d30a0611ef966a1ee8a5792861f707872176116e9f1ec54daa18f7522","ssdeep":"","tlshash":"e4e0c6b882dd428c853367c0fc2fbaa3289e01faaec001c0c1443e27b280cf22826894","first_seen":"2026-05-13T12:54:05.772326Z","last_seen":"2026-05-27T00:42:22.306318Z","times_seen":6,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/6c11d99575fe89956b19e64f2a0a4a58e4f1bae4.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /6c11d99575fe89956b19e64f2a0a4a58e4f1bae4.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gcjwgjA1EdVU06N%2FanqY%2Bb%2FsOBM8e1dTHqgfMiBclMclng%2F0YazLlk1T6me5D9Lcg%2BFauEhMTNcNCqGu4K3%2F%2BPCjnPQKwbcpXLw2rXrk2j%2B7ZZAp0TUNLYZpn8i%2Bo3bxaIc%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-16f\"\r\ncf-ray: a020fa119aff1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b4d88982674c14be9e34ed6b77faf55","sha1":"6c11d99575fe89956b19e64f2a0a4a58e4f1bae4","sha256":"2699d935eacbc775ffb22f60e270c3d16a72fa6142e9028b894b80bf1bd637b7","sha512":"0761660319d25ec0306c9d093e28d8623365aa50d44931e87c7762acb52e1fc075844d8d3f36f8fc6c5750caf1224040b983066e8407a3dd9e097f953befd9ad","ssdeep":"","tlshash":"9ae092b180d5994e990d273d18b8ad29e46be85403e5b6055283375edd8d0239eb03ad","first_seen":"2026-05-13T12:54:05.705688Z","last_seen":"2026-05-27T00:42:22.30729Z","times_seen":6,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/who-two-Dks22wiy.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /who-two-Dks22wiy.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 46870\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-b716\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epC5lemFyfNCElXBUdsqb61AU5e4x2b9wFVP6arW7FxnYDRs%2F3uOPj%2FdkcihyWepxM%2BmLWPetzo%2F73XVY71IDT%2BUdI2hvSXSJjPCz3nq6KDQ2JzEaFVJ3HUExiwV5jn5Afk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb2f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46870,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"99af3e5a9cb5b34ae7882e47754d4cf0","sha1":"8c6b5437bddb0863a44ef396d9400ffcf560b450","sha256":"9d8fb6c84e19352ea676d1c123646f45546069b78aa35f9e7089e324ec5c655b","sha512":"79b3337f2db9735ef4a1a1cde64aec134a08e5b775678551d30a2289f3abaa7dd002c9606be4f52cc5fbf94f39237aaf9c90325af03769c9f2f11d1c0b7e00f3","ssdeep":"768:STc8Bo7r5HxB5qy9XO731ZUV+KMwe704/vY+5t+cUFjq/DAfLF+pOOl0JgRnYeDb:Tv5RD+Lm3Mwe44//UFjqk52tSiJhDT/","tlshash":"e82301dd2785f054dcbec4f324632a98b4b7b2198c0a455fb1dbcb73939c0858b1862b","first_seen":"2026-05-13T12:54:05.773285Z","last_seen":"2026-05-27T00:42:22.308051Z","times_seen":6,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/c8fa2db161308ab2c43b9509d874c533e7a46942.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.863Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /c8fa2db161308ab2c43b9509d874c533e7a46942.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrekLgKkno8rrv7lzSd84U0MJ0RRC8AkRPXtfbd5d9jQ19tFSRMDfgznQF390jkdDD5PSPvUdVmVajlpfBsoDIYv82Rkq41HaZAYKcYx2qJl7Y3odtvGs6P%2B0fkinxB4FuA%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-201\"\r\ncf-ray: a020fa11db441a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":513,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c49ceb19857e010d50232a0154cf4f57","sha1":"c8fa2db161308ab2c43b9509d874c533e7a46942","sha256":"614848ea7c9664422c6815f78c102ef197506e71eb8a3236ded6ab597381f101","sha512":"30541e3b2b732005920883a6ed21710d0c7309fe24ea519b930fab0cd8fab046500b7f7dd55e9e23f7ec82ef9c0a1d7b78f75b25be6f2ba080d58242010f5c12","ssdeep":"","tlshash":"1af059ffcac77e58c102c7b0982b8a20b97f757417ce4350e3258b72b69c8572581c58","first_seen":"2026-05-13T12:54:05.762996Z","last_seen":"2026-05-27T00:42:22.308724Z","times_seen":6,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/d7e600c0bcf75c76deba8f8cb26254d62a7802c0.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /d7e600c0bcf75c76deba8f8cb26254d62a7802c0.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyeSP8%2Be8dquzLnUj7ICLDqM21YJcYAN2fdgBIhfIxycRpHAGircZJ2m4x4LxfHlX%2BcgLN6VqhYOKV1irV9F27LqxUC%2B2O7Pxr8wWKhvLKag1R7PGqBm0cbrn5ZyfWm%2BmVA%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"69b96b25-25d\"\r\ncf-ray: a020fa11db451a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":605,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a52558c6be93df2e22822bad7a4107cf","sha1":"d7e600c0bcf75c76deba8f8cb26254d62a7802c0","sha256":"3b0b4d80cd98e0c0a21240faa2327c8057f2280e5e46428ddc0418b0a51e010f","sha512":"6e1c195c8962e0b0e7e6afbd143b0f08f6b8ece7f506fb8fc8f7c9af3f7af6d5eb51b2892393747c9ad8b1db3af94bf4162f21f048c2ff7e06003c2e0b8448ba","ssdeep":"","tlshash":"a9f02899dbc81ed4f206c7f090b6ade00a6f5834b952c76bc3522323e328a7a5124850","first_seen":"2026-05-13T12:54:05.779764Z","last_seen":"2026-05-27T00:42:22.3094Z","times_seen":6,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/about-bg-C6dGgavI.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:57.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /about-bg-C6dGgavI.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59190\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b24-e736\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=faC5ez02CBnJQFQgd5D1axotZ%2FIfocgd3uMj2ahiQE9icNN50Y0rT%2BV3B4%2FZbHcB1%2BLRUMPCK3DB9IM8aQiISI0ZDcUKIIMSeW%2FRpbPWrey8RDFyajOK5h3nj3YNZimpo%2FQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa14bb6d1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"221706e16a396a4d55022a2bfff430b4","sha1":"09ce8d7df0423a9695bc0aa4ada380a373290233","sha256":"0d1f8b29a81fdb947d6cace160b17b5d7e8fe5feb9127a5e8d5ef51c15abed9c","sha512":"18724785d21875584d7db410687f4de191e9179dc35da4e79e1bf34bd54bced27b4ed67f18d0192ddc0528aaa6e76fb71b1d590c9615f9a437f00f67435f1f50","ssdeep":"1536:09nQw6ZczwaBQV45P4BXS0blQLGdcsQ4ybEEsH89QqzJ4X0C:eQw6Zcm46BtlQLOch4MxLQkc0C","tlshash":"204302f73f568ee1f53e0b7310c505a46e88f2b73747d995162921a908041c7ae1f5ee","first_seen":"2026-05-13T12:54:05.737962Z","last_seen":"2026-05-27T00:42:22.31005Z","times_seen":6,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/aa877654843300f3e4ef8a79aaec7b8294e7c9e9.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /aa877654843300f3e4ef8a79aaec7b8294e7c9e9.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZybkdXhOWhRjBMtPObxtKy2NrDpTYkYpHkbZR%2FToyUbg5Za10zYYrqubtcKzTyRXc9rfDr2QLxUQLax96%2BVaG1DS8R8Vixz1f0ryTTYPlPyrJSK2yp94NWQGKIvwS%2Bc48pQ%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-f4\"\r\ncf-ray: a020fa119afe1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":244,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ecc4fd34e5ab76bbaf03ca3bfd4e4fb9","sha1":"aa877654843300f3e4ef8a79aaec7b8294e7c9e9","sha256":"f3ae073ec3ea3d27ced860f401772380f84076e32e2fe68a1fefe56404b20f95","sha512":"0f8b130526d4bec9667b0fe2a6d43796a483847ef6c5cf3fa547895503aab829d39746807f52de8ca9f18140bced9ab0ab25540a8b09675dd198066948ce3d96","ssdeep":"","tlshash":"f3d05bf041d26c1db00d663d14b98d1ce417e80007793b4047533767d9594175d757dc","first_seen":"2026-05-13T12:54:05.719823Z","last_seen":"2026-05-27T00:42:22.310698Z","times_seen":6,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/cccb2d00d1cad530866175229a373168a9b86d91.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /cccb2d00d1cad530866175229a373168a9b86d91.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2Yj%2F967ZbLesbkUn2w54lqzIaWaz%2Fm8x5djDxUxQOvTE9x9pS80VuZZd0rMjDRQEF9opOGcXUeiJFhTzOhH9Oimv0SK2BGVqjFshiSekmDP3BiB44skKHlSsamSrrK7jiko%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-462\"\r\ncf-ray: a020fa11bb2c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1122,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2fd9a6eca3a858d90582b70b40cd304a","sha1":"cccb2d00d1cad530866175229a373168a9b86d91","sha256":"52f96f51fb7c3808748d46762537fbc92421bab341bfd2db146b7f5cd0e9019b","sha512":"b2c28d5e7fb0e280407712d630abd65c5db8d4477657b7d8d12624443441ac161d4e74efecd3bca0d6069f04744e9b77da2db335305bd7f8d8e74dc49f7b316d","ssdeep":"","tlshash":"db21dd8867a013ad47cc1fc6a9253c8c2f2fe41f32a63348ca3dba1a6d70e346d9d445","first_seen":"2026-05-13T12:54:05.701001Z","last_seen":"2026-05-27T00:42:22.311356Z","times_seen":6,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/8cee341c90fea23bebeb58aeedaf82a5609b8f4a.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /8cee341c90fea23bebeb58aeedaf82a5609b8f4a.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvQFnMq%2Bq1h9F0Sxi9kF%2FttgEYVmgb3viqGqzVNnIq%2BVtOlgoc5840HYnEPQXAM3pOnBPVdSc%2BHJzqGU5%2FaE794vMmfuU99U%2BfYnPtAvckH6geVNv71ekrLyTE%2BGVW2p1Wk%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-50b\"\r\ncf-ray: a020fa11cb3c1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1291,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a2e92f5e1ea3f94f43f50340424db71","sha1":"8cee341c90fea23bebeb58aeedaf82a5609b8f4a","sha256":"1bf2d45a7236843307d768eb4e883d3a64c97acc7fe0a3225481ede1490a90c0","sha512":"b5edc62b1b9a34c3785319b6af2c4dd06be1070cda027e81ff3bf59abd956ddc87225c2c62d9bb27811781309c5422153e036dbe348df33dc9e358696fd5d782","ssdeep":"","tlshash":"b22162f261f5b6f9d10ae7fdf438af197423b47cae89938681c1171aaa140664e0ea44","first_seen":"2026-05-13T12:54:05.760692Z","last_seen":"2026-05-27T00:42:22.312051Z","times_seen":6,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/boy-ad-BUJg4Ecv.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /boy-ad-BUJg4Ecv.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 228604\r\nlast-modified: Tue, 17 Mar 2026 14:54:38 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2e-37cfc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eiwitiWb6geu18kg3Mq5FXiE7UWusKSu6MAcHoYTrHPso3zBJ3lbaaKpCp8Br0kKBzmSAWcJBLKH%2Bzeaqaxj7IbIZ4%2BOKhOk6Iy62mLi1uJzWTq4k0nXdSKRK75GoW8CAxw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11db401a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":228604,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8e9eaeb9f006058ab8a9937f53f6f3a8","sha1":"4cce40c3f0ab963a6d6c2e5ec3fc05ef5b11578d","sha256":"05c2c9e9e25b25959c61277b6c2d3f5687a0cb32c14542295cc36b4978406e01","sha512":"317c0d177c9a27dcf98e9f3c5a43cb8af2786a28b49b756f1c112181c03d7312301c144229de44b85b503d99c1346f377f3a19047ca74a0666a29c4a34e00e26","ssdeep":"6144:vVlmRQ6tyVLVzDghC/0gt3pl5NOFVYeWw53ruprpvkMnHgTb:dkRqtNDySZxmVDpipZkyw","tlshash":"0324237c3ac2b818d50299f56c4c94a55c0caa92c73b3f1cbdbc062b597d31da8d6d8d","first_seen":"2026-05-13T12:54:05.791016Z","last_seen":"2026-05-27T00:42:22.312716Z","times_seen":6,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/container-CzeSmpCy.css","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /container-CzeSmpCy.css HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69b96b25-d10\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5iPSMnGFzXxFFaM5weK70Q0ErBGlEvAxQ5ymIPP%2Bt29Uvv%2FqECUUiZr2%2FX%2F3NQsvC5x0H4KjKHzOe7Z8K6fujwOqG6fUnbIwOwLK%2BmQ%2FGAEP%2BqLNOBSgolEI%2FAP%2BVQxInLM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa118afc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3344,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (3330)","md5":"7d549ee25b7639c6548d579b726274e3","sha1":"1e09de09fc21e7aaa25ddc9713d58c689bf7cd11","sha256":"0673e9c0f1e8aa74552d19c02fd2f9fac47f12c61194d8eb72727af92ab16583","sha512":"d5ed9f72f9a9d491ed61074c1e1b0d39598d5ab64fd39cb0603d71eb0ee25ca9a571ef4bfc6133e0d44787c7bed40489e443af62a8a3a71fd35481aedc6f69d6","ssdeep":"","tlshash":"6f61642851a6618a4023d7217bd3d39530c7f563b9330be9f66a931cc4cf1a80fe5ada","first_seen":"2026-05-13T12:54:05.780666Z","last_seen":"2026-05-27T00:42:22.313415Z","times_seen":6,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/logo-light-1duz2mMS.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /logo-light-1duz2mMS.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C7KFpplWFQLDOflnT4LAuAiE4oIZ6RiUv%2FbnTYiWRFawxgw5jF64tmfXWT9%2FtXRgPpityMviiWEK6VcLcwCaqtwjFCOrqPhUOodN3FUBqVPKHtJazkAAsLOyM5rF0J%2FPh9M%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:37 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b2d-29bfb\"\r\ncf-ray: a020fa119afd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171003,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"abdf5ebc14f3e11bdfdae172b2ae5446","sha1":"868291a3763fe4f6a81abaa9536080387f43894d","sha256":"4d8f8a44186f61d72318b07ff3ec10f7497469e97479d1a9c55d8f0a8928d364","sha512":"bd5b12415c5467641cde5b60a4acadb22575e253de5649f64569437bb8a32ed88563647dfd9dc864e22fb3050b6a8432b7079d136e1130223b8d61fea10879d6","ssdeep":"3072:JEK4AFIKH99iHDu4rd0szRbq/Lug276XNBfRc4XH8WSRmbBn9:JEKtFIKH9qXtRbqj/2QBfRRXHkOn9","tlshash":"e0f302f993a6fff4d80547a0320e3a848d3a31b77436c29557c57896f584ace6c6cca1","first_seen":"2026-05-13T12:54:05.786263Z","last_seen":"2026-05-27T00:42:22.314102Z","times_seen":6,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/bot-Bi0PB7bB.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /bot-Bi0PB7bB.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 141784\r\nlast-modified: Tue, 17 Mar 2026 14:54:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2b-229d8\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jjhv9vkk0sdcvzbpQPtXlc39xHt2VTJlBASuNO1PoRP%2FVxDjnxGwnxmpLTbA0wXCrwsXhxf6gFkVpRorTf33pLinj2%2ByQL9rL2bTi6vIOVTyZ7h%2BU52Nd7HvLvz321wMbOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab131a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141784,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50074c1b1e5d90935806a919e331bc14","sha1":"b037b33b3fcf48d8b041bcea5070b4a1e5e38539","sha256":"c2f82c979ee19dfe26185960e29f2e4357e20fa92fecd5dc01768473de1c9619","sha512":"fb4ecca5490a24d1df2e81a1f086cf1033154cd2ed1b1685746201f6c863a8fafba4cad18ff42b2d63a38c637d053f88e5dc6eb4e37d2a9b8da9cc57930655e6","ssdeep":"3072:UVNOCdd5ttguAnTMtFvOfiOv1iFocsuyXhYAryuILwfu4pkG6NpGcGtGgnvh3PAt:UvJP5TguAnTaOf+nyXiqydLwf2G5tGes","tlshash":"65d31232c29a10bbefec55b50d8703ba1ae1ca60cbbe0b3396c5c751e63c5938949957","first_seen":"2026-05-13T12:54:05.801559Z","last_seen":"2026-05-27T00:42:22.314755Z","times_seen":6,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":128,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/469ec15e33efb9c8110b8db7177bd7988c11be35.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /469ec15e33efb9c8110b8db7177bd7988c11be35.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClkyVUkycB6Elo91ijwdiqWRjIwXT9aEbtBWWlUsK8kelvThp0DVN6mXyd2t9wIU7bDi7CSbZLO2q4PhHoj9NXNUtlSBokdBUkXXs%2FbHnxydrqTDjDqd6uXx6AH8udwhOGI%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-30c\"\r\ncf-ray: a020fa11ab161a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"02362c0c9868457df560f094477be01c","sha1":"469ec15e33efb9c8110b8db7177bd7988c11be35","sha256":"914c668e1c0154d6634108947c49a7487137ffe204685b68cb5783a8aca57ed5","sha512":"eeeef68a681638140abf777fd458855aaa06bab671f39cff62113a35e5d7e9e36244b20439865ff77799425b4c8c6b61eef24d22ebce204d4e7883c8a9eafa3f","ssdeep":"","tlshash":"1b01bdf372c864c8a64ed779b9263c217d1f20b49f29868649652e4af2242219d88c88","first_seen":"2026-05-13T12:54:05.714745Z","last_seen":"2026-05-27T00:42:22.315377Z","times_seen":6,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/point-five-C36MAJY7.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /point-five-C36MAJY7.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 297154\r\nlast-modified: Tue, 17 Mar 2026 14:54:39 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2f-488c2\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IUQqssUuGSHQwqkUPX2MLhLLeWAujFhuvVybt2QZVtmsXmKI4kShUrfRLFncUccv8vitA1H3X6WfckUj8HcMSvzxGH3%2FB2qAGimT7Gbijry8amhxLN%2FuxaOrz0pYdy%2Fw%2B2o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11bb1f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":297154,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f226e19dca3a9a1df902f15901f91c2c","sha1":"35a68c46fd9bb9957d7991d8f72c6df15f4f11bb","sha256":"c1fd26842a6646a034224bf4696433f4c1edac75b79d20d08b77edf1954b07fa","sha512":"af23d4115b15090d9d050a50beebf47436842185b9409c23e3706515a7a6af82dd6c83fff927a65035473603805972b8af637e5bf7a3fbff6c7f37aea480137b","ssdeep":"6144:VC7VK9bNZGai96bU4dVfh9JbNNZprlDh83eUE77p66TOOd6FVyV3:87VKBNZGaAbyfj/7prlF4e/p6A7EvyV3","tlshash":"c354234e475fce65fb160ab10b20cf1b2d8c6d2579db603aaec86b5d98eec815c73015","first_seen":"2026-05-13T12:54:05.745557Z","last_seen":"2026-05-27T00:42:22.316112Z","times_seen":6,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":179,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/fa891b670fdb2c73661240b691574be68420eb06.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /fa891b670fdb2c73661240b691574be68420eb06.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fun9yUs%2B9C3zZSBYy3EcmiWshOHH0LWJtaafqQIo5uA2ZyIKjEybUXrla8fnwkB9dZRvV9hmpmdIoKHzk7ZZkwK3tIWW08HkS%2BIF7BWq7jP9ANCDxcN4WvY%2FoEcXuHsGO8E%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-596\"\r\ncf-ray: a020fa11bb241a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5a8688c2089b5c7af876178f76d251b","sha1":"fa891b670fdb2c73661240b691574be68420eb06","sha256":"616ee27d5f6e4c2485b489510dfed0cc5d1fe76e5f1a3051b48c705d921048f3","sha512":"9aa782201feb7bb2266fbcbb434725a5e78cf4a8d1b9021033a41beb3b518454890488624f2124c727228f4c534e08b333e309159da70e9fa1216a84dd7b0828","ssdeep":"","tlshash":"a1211efaf3f2a544c722036165f9b830d91b437c4920c984c9619ad8d0f9c1f69acce2","first_seen":"2026-05-13T12:54:05.783699Z","last_seen":"2026-05-27T00:42:22.316826Z","times_seen":6,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/money-big-DBCh2jmT.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /money-big-DBCh2jmT.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40382\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-9dbe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LLlTV4xucIwsAYOBSgoAJeqdGymbevTHLVITRUP0kzD87fqziarnDkGHAqH%2BG9hjnVY0KtwvfFpwLCil1%2FtSw3W6osgJ%2Fa89SXu5VtmL%2FLAS%2FL4BRKcY1PM7ArhD5nZFs%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb331a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d6d72bb2d69fc9e772aba20e4e5b29b","sha1":"3e1dc938a65e80097c562001310d96d8b3a030f8","sha256":"a80a00caa2b111f97de89f9afdc1f73908024b0f72aa8f9dcc18965232d2a452","sha512":"a99a5ab1ae73c83d59e13c85718e940c2da9c6c30a71e3b802ae8822eda774775c8a9628a33f95cc041655e15c42fa0133ce59d667e9a29154ff08265fd7d55e","ssdeep":"768:STdIdUKz9uQImymzodkvx99WxQv4mcG1vxQLAPk0mOCf49U:WBk9zgmcMBPSIU","tlshash":"3703f1ae92580a4dd92e9ef943c8570db91216767c43ea96ba0653060b3fdd6c4fcc83","first_seen":"2026-05-13T12:54:05.797901Z","last_seen":"2026-05-27T00:42:22.317562Z","times_seen":6,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/botAvatarDefault-DF5ptroy.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /botAvatarDefault-DF5ptroy.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13844\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-3614\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5436Ke%2FFDpV8srzajbEkfCcsP82UXdu4CeyOUKS2We%2BpZISPk%2BK%2BeRDxSx%2BCsZO4ndkpcyO1BKomFQGlcvc%2FQVA7oNp3QgKI3NglV4Rd2m4duoPj89NVjQAzSkt5CZsilQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11cb341a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13844,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"847e09b447a3cdbe8a5e4eb4252433f5","sha1":"babc96e4fe7f76572c3261d249215262a7be83ca","sha256":"752b2f3f8255bd7af875e3f4bdaecd507837dd352b142b38b8ea5e3a8d2b8a48","sha512":"829f7c47090dfd85ada60f378ee38adb806d8d9bbea6b2e5f7f0bf846faf23235582201babf652ac7c88af7f3f5742ebde935dba4ea3240108ce3ed6bf4a11f6","ssdeep":"384:8wT5Dg99Uq81MiQjqP8oTm3eEEB7x/3l3:JT5Dg9oVLq3e/x/3l3","tlshash":"5f52d11bdbf68db7e00601f419d961443f6c2a39e0a36b1625e16d2fd2273ca75e424e","first_seen":"2026-05-13T12:54:05.794637Z","last_seen":"2026-05-27T00:42:22.318326Z","times_seen":6,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/84802e9ab2f198becddc6f6326c4f6ec01f07e68.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /84802e9ab2f198becddc6f6326c4f6ec01f07e68.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NLSY%2BUklGym5maVATQ3GYCBonFLNx0NCHc2DHZlnzvKfKdav7OoaxKFi1mdvf239tKv%2BXgFdJD%2B0gGaCzy8ktQpPjO6lHsuWeRhAe9yiWdnblJsGwa2bGAQrlzs53f5U3PM%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-e9\"\r\ncf-ray: a020fa119b011a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":233,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"643065f8f67273d3f492da6b3732c6aa","sha1":"84802e9ab2f198becddc6f6326c4f6ec01f07e68","sha256":"d9ce082cd9a6d3cadbc1d88c710472508e0d4df3f5967895fb6d5dbd809290f2","sha512":"89cbb7001033fcfb6070e24e64853a83bb99dbdf4b7670d93ec65d29a35e3e07f891b6e212da18722d042040392e13ee9236494401dd1ee3d5895153c5c6591d","ssdeep":"","tlshash":"53d0a7e692480d1db4164a30cba8bd24843ba61927c02110c9632378d0e022f3ef29ec","first_seen":"2026-05-13T12:54:05.775088Z","last_seen":"2026-05-27T00:42:22.319078Z","times_seen":6,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/bg-left-CGP7u-TO.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /bg-left-CGP7u-TO.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 172140\r\nlast-modified: Tue, 17 Mar 2026 14:54:36 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2c-2a06c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uB57TvDSLRvjihwNHES2QZwNCngViPHIEIrBMB7XzZ6ienlOYYIkwG1XCpFFdj74Atpp%2F8zBfUf52VP0D9rP1oskFHZtWWDEwtp1HF3MAhVZlye2qgphvZGU1m0nvGREo4w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b051a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172140,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1051e193e38f0dd4e0cd850762864d37","sha1":"34233699a1432505295094c9f6daa79e2b05bb11","sha256":"5ab6f16a14447af3ca0bc83453087d70902c422fce20bc09bd9f1a6ef80481f0","sha512":"1bec9bf090c0ef39e2f630d0069f36c412148db9c84a4ef49421af6a72e98ff5eb59f1154632217bfcea2f0177ff6f486c0da7197d9c99c135f323796b2e6242","ssdeep":"3072:87/ZTDjP7eL8JgECFJbOEKIo2ijBWkbqBh3CTrMrWrr3EllB:uRDjP75gEKZOEjijPaoMrm3ElX","tlshash":"bef312b9243c4e4df6ac36bd8108f223c9a2d7416fe57085a60326429bead73e764f54","first_seen":"2026-05-13T12:54:05.686592Z","last_seen":"2026-05-27T00:42:22.319889Z","times_seen":6,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/btc-Bqbv3lPe.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /btc-Bqbv3lPe.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10750\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b25-29fe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aUilNTq3KCr8%2B9qkiT3vGarsCqlYD5OA3%2Brer4FQkJlw%2FM9Lm4sRy6boKrvHVLusaBiDIt1VPN3IOmi802%2FLUH7YOlE1BwuDkYRel%2B4sg0kp4GY%2Bn%2F45Zfc4eAt%2Bjwjl9cQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b0a1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10750,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fd2193ed0a4961f8f19b007aca3704c3","sha1":"1cd75bd2f889bed81adfa7385a2c7cd200a62a0c","sha256":"d465ead725944bd3d3d65bbcc155769f6a875c0c19959f03ac8187d57ed67763","sha512":"76972b5f5752da064e700aa383d52ebcd9872a2ecae7d88517792f1a58a75c9e269ed3e300fa425f2b752b5d00b06a9b3da302881a39bb1d98252bb73d95e5bf","ssdeep":"192:jwToYX1PDMxz8bYumrRN17PvnI5wpOBUa6+IA1MKWsHXrGh9Ixjm4K:jwTrJYbhRPvxu6+IAAsG9IO","tlshash":"7d22bf2093949a8dd3046dbba7aa0fd1e6c8cd350173f38ef9ed516116941817e8e2a2","first_seen":"2026-05-13T12:54:05.694833Z","last_seen":"2026-05-27T00:42:22.32106Z","times_seen":6,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/chart-1YNb-yZl.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /chart-1YNb-yZl.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 133596\r\nlast-modified: Tue, 17 Mar 2026 14:54:35 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b2b-209dc\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ph3kRwVYJNV5qCE62Cdp%2BcIPSvfjPPYoryScl8hCWAsZMnNofmDSrho%2F9Usp8eOK8oBvcK61PKBL3U2h0I6B0eOiXKGHUALOGBhAKjUDDgPGgk1nciSeoTHi%2FqG82um%2BCtQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab141a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133596,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d7163a67bcc69e636848a8be98a8fa4","sha1":"d9974f1fa7e8554f3d8ba9d3db0d5d5a1c2bfdf6","sha256":"52c920a8a71f8d760de025dd31c54c6c507f3063207140df6eb309aa38a51d5c","sha512":"3446db6c65e0c402c082e01b9223f76bad7b34d3aff6bc7dff9db1c83ebb190dec3cb3e4ac273ae65e7501aab3f5be9fad01d544055a4caa748ef1dd839c4ccb","ssdeep":"3072:8PXZvu4NE72eH6/42EGgTmSLvc7lyO8vfj+u+I5IGAtOoWtCFu+nhr:8PpI7DHeOG0mCv6qvfj+ulILECE+hr","tlshash":"31d31259b832cb5de91737bdb99ab3c17921156a2ba80b013e0d46039e35a15cecf2d3","first_seen":"2026-05-13T12:54:05.78714Z","last_seen":"2026-05-27T00:42:22.321803Z","times_seen":6,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/ball-how-NxUYTnc_.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /ball-how-NxUYTnc_.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 47452\r\nlast-modified: Tue, 17 Mar 2026 14:54:31 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b27-b95c\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h1TFRTAO5PaG3bYQw99J%2BS%2FTPFKvG9rNUIfq071fbcVWzlQNF753HbXQUkIrYnyP0RvV1ndjfgn2VHIxp64%2FK%2B0aqv2waT9b2xEDPQRUNWLZNJMBKs6By1oUX3M9WMdF6uc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11ab171a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47452,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"641bdcdb02b1f79b38b86f0f75ae2bcc","sha1":"71c475fbb654bf0b89d5dec34158347b0477f81e","sha256":"e9b4de7e7174b2e13fdad0406d082c3c7a9655e4c4b42666336c425e21994378","sha512":"4d9aa716f2cab36e7d3f93bef9c601b32849d76dc2a79b7135a01e4f7030733cc471c3cc8709b7372c46eb8a28020f44ed9d29fc45509df0fb48d2abcad462d1","ssdeep":"768:hTJAUfwmGP+A9f4vzD696GvxxCFnf1e5YE1ixNX4vcAV0OpZiuw:TkxZ9QbD69Sf1AusRE5","tlshash":"6223f11bb323213be25081b3240a74059fab355f690622a9d3dcd617e657367f8391fd","first_seen":"2026-05-13T12:54:05.664861Z","last_seen":"2026-05-27T00:42:22.322613Z","times_seen":6,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/b10e0349c274df36b18503b50462073bc11bdd62.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /b10e0349c274df36b18503b50462073bc11bdd62.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yP2%2FKmRFQjZ5ZOZNBU9Hq%2F8XOz22urgjNe1%2B9dFGvkkro%2B6kLm6zYAinGUYQl95WZ%2B4Mscp0Sj9MNjjjpeWJXFvvM4ZdlwY7RayvDKHTvGtFj%2FxlM4qLUd6WeGAOYQKp3HM%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b24-827\"\r\ncf-ray: a020fa11bb251a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2087,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a47f040efb13d3303b8c445c1087a982","sha1":"b10e0349c274df36b18503b50462073bc11bdd62","sha256":"4d190d73ecca0d8ec74a95a568d68bc2dda904e6e48c5af61038b72178abba68","sha512":"82831f075e7ef5f17e3d2fcad70f99ace6039a51cf4ee6c7e138acc13a04439e132477c7c63be7e7782ee3c268ab5d4b396cea3b98b251a3215dcf46762679d4","ssdeep":"","tlshash":"ec41f2aee7d9daa0908b27b1ab44457938853da93c95d0482a755d88e1d020ebde8ce3","first_seen":"2026-05-13T12:54:05.789243Z","last_seen":"2026-05-27T00:42:22.323867Z","times_seen":6,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/contact-big-ball-EBn-3y1G.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /contact-big-ball-EBn-3y1G.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 25968\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b26-6570\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NdISkEYWdIZ5kIZjKmu7f6hOMFzH%2Fn9KMzlLR2VA5pDHhjW4cueB7JAu90ff01OvNkZimN6ng8LZPU9AEttobsFz2WHmkcpgdUERLuocF2L%2Fr6Ixt4csH3jBY8GxXPaAeI4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa11db421a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1c26329478a177d18a776f1930f30d8d","sha1":"87cc48a3c216b422af3e0cebefc37a50e9ef5756","sha256":"23647c3403228d8d57b91d6c314fb09a081882b646d6b558d87ae7c7735cbda1","sha512":"26133b42cd149af531409dbe45e13e8a992b95912e94a25ddd2224c0065329643f5496c8a9d4171deafe9bdaaeb2abe7556d4d4362fbfa4dbae725da31be1435","ssdeep":"384:NwTpXVM4A3aiCEzQ0/0bJWK428rlrnpW15pffPr+SwNVlcnV06iUJIJQbnNzooJT:yTpXVY3UEQ0xVW15pf36S+Vl0fJB6WUg","tlshash":"44c2e1dfa7151da3f650643d34c9e3bdb5c62366b0291e42f7cbf5923e020a785931a2","first_seen":"2026-05-13T12:54:05.691097Z","last_seen":"2026-05-27T00:42:22.324666Z","times_seen":6,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/vendor-antd-CwBLJBHs.css","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /vendor-antd-CwBLJBHs.css HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 17 Mar 2026 14:54:30 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"69b96b26-1333\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IYhbJ73D%2B1HJtcpJN%2B%2B%2FyBGPc1hwbCt2aaULhmFzbUE9kdNRYK9J%2BLNGU6%2F1ezZ6%2Fs4Sv3vdwraFznmfhIFIYnf1Pa6yhioKmoV4G5U5gJbrepgrVrehcY%2FD0VpNAc2QqOI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa118afa1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4915,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4914)","md5":"343c03d615d65a09938785aa1e12fb68","sha1":"f3b55db0c3676b3a9fcab6bf027f238a3a759e28","sha256":"1c15438926b46ed440b883a3e4144f2748681e6f9cbdabcbac03d870644a718d","sha512":"76cd212fd3e0b1c95723054a620c6a3fbbedaed985b994275fd4c6899e5a42e5908a60f5264b82844af84b4482f3c18a56bdd5de4b48f7fd6f49ce1afc7ead50","ssdeep":"96:uiljjcjjOCaquclvsa8KGK0fId6Ns0yeSB:FdtIyyeI","tlshash":"7fa10f6ad26e2c59a01b8f11a5c0efc9d1fbc361b5738a39edd5305dc64f4c82e62ac4","first_seen":"2026-05-13T12:54:05.752495Z","last_seen":"2026-07-20T18:44:53.887796Z","times_seen":8,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/ball-left-BTrxJWmO.webp","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /ball-left-BTrxJWmO.webp HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26878\r\nlast-modified: Tue, 17 Mar 2026 14:54:28 GMT\r\npriority: u=4,i=?0\r\netag: \"69b96b24-68fe\"\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5y2%2BXQPtBGcZOK5%2FVTX8fIzwH%2BqiefM42h1imzvf6xPz6f5%2F5yD1WyFfieu409uTiS4UwAHmTHZP8cxMCYksx6I6nJ8%2B3kPPh4QyGDO%2B9TJ5s2k8J2SG9yxOKlhqoJKeRl0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa119b071a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26878,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"da42400f2f56ff4b068548352e10d857","sha1":"2a2dcf9590a54159e372d1866071453710434b5d","sha256":"76782a6e54c9f326c4903bbed44ce894baae79459f22282da606ae009b15aca9","sha512":"8da353c9a9316175c60c86f3727c49343ca4e089b82538cc5c38e9c74c5762384bc36b1686834027ae1f6db120ffc08d7eda5a447fb5c0e10799c84602ce3adf","ssdeep":"768:BTAJDhLSOOV6UR8YQGQcXt+ayve+5//ZlLzBl/5B:gYOOVFKHiXEaMJXPflB","tlshash":"d9c2e18774a851c9ef5cbb3d7687c2ba3d605aa20f48009de0f84d693d70f4d85559d3","first_seen":"2026-05-13T12:54:05.673412Z","last_seen":"2026-05-27T00:42:22.326147Z","times_seen":6,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/coinbase-CeQpvT9k.svg","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:56.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /coinbase-CeQpvT9k.svg HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:56 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3MyudrIU6zebN6uCSs0%2BHLIruGca7xPuOnwsb7rY5Oi%2FvIEwPM%2BUsY%2Fc6Hw%2F84gC2uqvazEqirLTgNbnf%2FUOwGwRUH6r%2BDPiOWoqcKSbwPGr9GATQGb76ymPH41on9%2B8VR8%3D\"}]}\r\nlast-modified: Tue, 17 Mar 2026 14:54:29 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"69b96b25-127b\"\r\ncf-ray: a020fa11bb281a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4731,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e9abf3447453b9b62bf82cfd1c2c84fe","sha1":"f8c05f18e28b09ae113c204d727f97aae5f65524","sha256":"e9833a2dc5d676c494b82f975a057ef17437d284110206257e0a2cf2a1f59ab4","sha512":"84befe60c20520dcf21b6db1f021a42b1d3555cdcc34aea1e2fbe264fd1cbab1165be8a18a13abd60ec9b6d8a3907c0c1408e2ea0ccf22e2476827b299e1a744","ssdeep":"96:cp9oCWYKnKxsCQ0T4dW2lpYb8SSc5owIWt0WThIdsQW6QkT8kSrzggevSz1t7rIV:croCWYnxsCQTlU55FI5pDAdzavSzbXIV","tlshash":"d5a1c7e95bb841e4fc47e3e989136838311b74ba95a1c711d3b8c9392fa205c488ddcb","first_seen":"2026-05-13T12:54:05.681501Z","last_seen":"2026-05-27T00:42:22.326877Z","times_seen":6,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"login-botty.com/favicon.png","fqdn":"login-botty.com","domain":"login-botty.com","tld":"com"},"ip":{"addr":"172.67.215.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://login-botty.com/","date":"2026-05-27T00:41:57.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"login-botty.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:13:34 GMT","end":"Thu, 13 Aug 2026 15:13:33 GMT"},"fingerprint":{"sha1":"29:68:4F:37:C7:C0:CA:8A:FD:40:D6:5E:91:E6:9C:26:FD:E3:E1:61","sha256":"8A:77:94:06:3F:37:15:27:4E:B8:5A:BC:FA:9B:BF:BB:07:10:76:10:70:44:B1:08:6D:C5:5A:33:10:90:C9:F9"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: login-botty.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://login-botty.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 27 May 2026 00:41:57 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 17 Mar 2026 14:54:37 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: \"69b96b2d-2bfcc\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6t44SUeW4AkPKOWxs2rRJYiDfvmyVniCy9S5j83mi8zzgH6ry9ImwBIkKez0Wuxtk2Lhp5kg9bDJOsUghtO671l53FxqLVenZqgIKa6vkJhSFz0PvL8jL6qyYZk9fe0Fvpk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020fa153b701a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":180172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"ad5d248996093e42a2cf23524e70a9f5","sha1":"c943fef0d076017c2323de4ee5405f59aa7bf777","sha256":"a0e654ae38ae3b7e693a99dfbeceecb73ac5ef409f108a85408511b24c3baee5","sha512":"ec12bbaf5b69806d0b0d50f253f079f019b9e457d54a3468d2da367f75811832126a5981c59eb5bf67e7f8f72abf4896e5278cee0ca79d0716de5ffbde27cab3","ssdeep":"3072:juc9/RzCFFF5J6Tb/BxIjNV4N+jVntU9/XsyHtZwcXEJcj6xM0bVE5OJWpyObLjM:fGFr5J6nBCfVntU9PFrl1Ox3a6IVLsiy","tlshash":"fa04236408aef2b4f6f7342d05fbe064f519b987ec1c99167f25af107868e0063a91ed","first_seen":"2026-05-13T12:54:05.750221Z","last_seen":"2026-05-27T00:42:22.281873Z","times_seen":6,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"login-botty.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}