{"report_id":"88d7eeb5-b53c-4619-b6af-189245ccde05","version":0,"status":"done","tags":[],"date":"2026-07-12T23:44:52Z","url":{"schema":"https","addr":"purefm.live/","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"ip":{"addr":"93.177.117.246","port":0,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"purefm.live/","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"title":"pureFM: пройди тест, узнай свою роль в финтехе","dom":{"size":64438,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6274)","md5":"842ec46042ce82bbee860fc4306df421","sha1":"9d11951e03328060fac3cb052749c2a06de1151d","sha256":"c0d3055e30fd0e786af565bccef16855b8dd71b55fe5ea6a9acc998a862f44e6","sha512":"5cadbafeadabff48fc0143928392b1c75860ded5b58aa45a538a513d233599675d6d5798f127c27f05a72014279b1684c75023028d52b7bd58b2c15bcd356e0c","ssdeep":"1536:HhK4njsXu8s56SryRcu2tKezXbkaqQKbg:PvXbZqQ0g","tlshash":"1c53d821a2a610767233f5d6b7dbb70d35e0942fd802462079ec056c8fdedb4e29b789","dom_hash":"domhash9a2306090649673bfda930c210368387","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"purefm.live/","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"ip":{"addr":"93.177.117.246","port":0,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T23:44:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purefm.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"purefm.live","ip":{"addr":"93.177.117.246","port":443,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-10T10:12:45.97635Z","last_seen":"2026-07-10T10:12:45.97635Z","alert_count":3,"request_count":3,"received_data":82878,"sent_data":1394,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"purefm.live/engine.js","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"ip":{"addr":"93.177.117.246","port":443,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"496e82f4dff4a333119e6afd2d74b08e","sha1":"43d69b1234b79795d80a01de04ea839f5abb8b2d","sha256":"40200ceec299b25d0df9b9d44701468377065a600eeef84e43e5864a8254c715","sha512":"24a8796bfdff00802d00e44273e918d401019113f8ca1836dbef88624ffab7f829670a670ec80de93ccce591becbc37cb00fe546f19f0b8ba21647ba4c6f9e37","ssdeep":"384:uqL+7Vomh0DRivhFx0MPEJPPWVSagcZC7DQSMy3bFBEP7IWscG2EBpaRZD3B90nG:nLa9u0VSa+7p3bFBEJ4BwF90nhYrSF5+","tlshash":"abc2f1a855ec204f5101f067e9096e0978ba40ff3fea671a395c297e7fe502cc1b968d","size":26337,"data":"","first_seen":"2026-07-12T20:54:40.106265Z","last_seen":"2026-07-12T23:44:53.122731Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"purefm.live/","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"ip":{"addr":"93.177.117.246","port":443,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ecc456b3a23ad8d8ab86be181c9519c0","sha1":"1765b25a572c4e7ef04056ed958b8ff2586c9a97","sha256":"db110f6fd60b4a7ec683885f9f616a6d609313144304dd6536eae2b8bb26d625","sha512":"ae0703ecd9f715a23cbe7dc3dc42ec3b34eaea602bdc234d044970fe4e603ffe2b4f462924e4fda22518674167bfc24c525a84ef577414fcc7a50385a4256e7d","ssdeep":"192:2x/7mst92Dm2iuPXz8LWmrN050WWptgVJAnm94J2BfhM/iMyy8gIvfWeNiUh2/:nm7qPD0p/","tlshash":"2442a71bbad71871087ba4bb93afa38539b0001b1841d9117d6ccd6c9ff0d60567baed","size":12058,"data":"","first_seen":"2026-07-12T20:54:40.110233Z","last_seen":"2026-07-12T23:44:53.12834Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"purefm.live/","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"ip":{"addr":"93.177.117.246","port":443,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T23:44:25.387Z","timestamp":1783899865387,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purefm.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 20:43:50 GMT","end":"Sun, 04 Oct 2026 20:43:49 GMT"},"fingerprint":{"sha1":"74:AF:D0:5F:70:51:A3:38:37:F1:E1:6A:B7:7E:FB:D2:53:08:21:B5","sha256":"E1:48:EB:B5:18:C1:50:4B:BF:57:49:AE:B4:C3:E8:EA:7C:BF:6E:11:78:0B:44:EB:4B:E2:2B:79:09:0D:8A:1F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: purefm.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 23:43:20 GMT\r\nContent-Type: text/html\r\nLast-Modified: Tue, 07 Jul 2026 00:02:29 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a4c4215-d6b2\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54962,"size_decoded":18257,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (440)","md5":"22abf974275952d771505335c1b7532f","sha1":"c0b385da7b4245d99a05a05eb328e2b62168c391","sha256":"8170dc5d6369109f6344c7c2d7f26a05d766269b47aa8d91423fc0d8e792e701","sha512":"317db7c1305ac7f141a66e73b95f33ce313ccd7bf48bc7527d82895ebcc332b2c3d2c1e2bbc49a6e005fa854c8fd70fbfe594bc74b090fb1a0a3ac61769bd581","ssdeep":"768:7ADhzBk4njsX+38s56ZYryR3NKtorsXzCqzQKbR270pe:QhK4njsXu8s56SryRcusjxQKbg","tlshash":"f933fb22b7a510767623f6a577dbb30e3690942fd402462479dc045dcfceef892ab788","first_seen":"2026-07-12T20:54:40.100454Z","last_seen":"2026-07-12T23:44:53.118992Z","times_seen":2,"resource_available":true,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":487,"connect":28,"send":0,"wait":56,"receive":4,"ssl":68},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purefm.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purefm.live/engine.js","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"ip":{"addr":"93.177.117.246","port":443,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://purefm.live/","date":"2026-07-12T23:44:26.286Z","timestamp":1783899866286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purefm.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 20:43:50 GMT","end":"Sun, 04 Oct 2026 20:43:49 GMT"},"fingerprint":{"sha1":"74:AF:D0:5F:70:51:A3:38:37:F1:E1:6A:B7:7E:FB:D2:53:08:21:B5","sha256":"E1:48:EB:B5:18:C1:50:4B:BF:57:49:AE:B4:C3:E8:EA:7C:BF:6E:11:78:0B:44:EB:4B:E2:2B:79:09:0D:8A:1F"}}},"request":{"raw":"GET /engine.js HTTP/1.1\r\nHost: purefm.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purefm.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 23:43:21 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 27012\r\nLast-Modified: Mon, 06 Jul 2026 23:57:25 GMT\r\nConnection: keep-alive\r\nETag: \"6a4c40e5-6984\"\r\nCache-Control: no-cache\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":27012,"size_decoded":27300,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"496e82f4dff4a333119e6afd2d74b08e","sha1":"43d69b1234b79795d80a01de04ea839f5abb8b2d","sha256":"40200ceec299b25d0df9b9d44701468377065a600eeef84e43e5864a8254c715","sha512":"24a8796bfdff00802d00e44273e918d401019113f8ca1836dbef88624ffab7f829670a670ec80de93ccce591becbc37cb00fe546f19f0b8ba21647ba4c6f9e37","ssdeep":"384:uqL+7Vomh0DRivhFx0MPEJPPWVSagcZC7DQSMy3bFBEP7IWscG2EBpaRZD3B90nG:nLa9u0VSa+7p3bFBEJ4BwF90nhYrSF5+","tlshash":"abc2f1a855ec204f5101f067e9096e0978ba40ff3fea671a395c297e7fe502cc1b968d","first_seen":"2026-07-12T20:54:40.106265Z","last_seen":"2026-07-12T23:44:53.122731Z","times_seen":2,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purefm.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"purefm.live/favicon.ico","fqdn":"purefm.live","domain":"purefm.live","tld":"live"},"ip":{"addr":"93.177.117.246","port":443,"asn":35830,"as":"BTT Group Finance Ltd","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://purefm.live/","date":"2026-07-12T23:44:26.360Z","timestamp":1783899866360,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"purefm.live","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Jul 2026 20:43:50 GMT","end":"Sun, 04 Oct 2026 20:43:49 GMT"},"fingerprint":{"sha1":"74:AF:D0:5F:70:51:A3:38:37:F1:E1:6A:B7:7E:FB:D2:53:08:21:B5","sha256":"E1:48:EB:B5:18:C1:50:4B:BF:57:49:AE:B4:C3:E8:EA:7C:BF:6E:11:78:0B:44:EB:4B:E2:2B:79:09:0D:8A:1F"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: purefm.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://purefm.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.24.0 (Ubuntu)\r\nDate: Sun, 12 Jul 2026 23:43:21 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.24.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":318,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"37d5c3a24983196361e6ce9b1a499464","sha1":"2dd5878df894f3c648e42408879e9a61c112d1b3","sha256":"766c1d6bcb81d3e983fb7adbc19c616d7fc01dafb7893738edc242e2adc59c07","sha512":"cc140d1f61a01ba5f282d682dfeb19229426c7164b147a3031d3b5544c2d7213ce19b075a81d5e00750bdac7b1d9232b8b971e026d838ccae9466523338b09a9","ssdeep":"","tlshash":"eac08c6e2513bd4cc663217432c36490c08b93a7a4ea42228440805331cb2aa8ac7396","first_seen":"2023-11-07T17:46:00Z","last_seen":"2026-07-17T01:23:00.151521Z","times_seen":26869,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"purefm.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}