{"report_id":"97cca965-77a7-4cbb-a7c1-13bf29eb5285","version":6,"status":"done","tags":[],"date":"2026-01-11T00:21:04Z","url":{"schema":"http","addr":"polbot66.top","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"104.21.16.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"polbot66.top/#/","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"title":"POLAIBOT","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"polbot66.top","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"104.21.16.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-15T00:21:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-09-14T19:08:46.45161Z","last_seen":"2025-12-29T12:03:00.942591Z","alert_count":24,"request_count":24,"received_data":321156,"sent_data":12848,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"polbot66.top","ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":44,"request_count":45,"received_data":3824366,"sent_data":20393,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"api.web3modal.org","ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-11-18","domain_rank":433029,"first_seen":"2023-09-19T09:52:23Z","last_seen":"2026-01-10T17:56:46.663327Z","alert_count":0,"request_count":1,"received_data":3737,"sent_data":737,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"polbot66.top/assets/userMessage-1766537880937-CT7g8Zt1.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8458fc54ca8619a5b242c7468e8a11a0","sha1":"4da7eb6329f38f309e4c65f0278919f08575e463","sha256":"6bdb2390cd4492a8fc3d3c5ef0fd067f86ee924521798c660be9e4584324a97d","sha512":"fee65971e4ac4a31fd5128adc676ac88dc7f230ab6b6651cfa7af7eb8b2cf9b9f9f7e03d58040ab488443e6464d3e5fa88375800e3e90a19a12eb7b1d19ba850","ssdeep":"","tlshash":"fcc0480e7600caa1508a51ea166208b632d715ff5b00f9e24e21ac97362b7a0381ccce","size":132,"data":"","first_seen":"2025-09-14T19:08:52.605613Z","last_seen":"2026-07-09T02:04:42.843717Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/mount-component-1766537880937-Bn12xgOq.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"5d24c703aada588d6f8b1b6b4e9e3855","sha1":"37d7f6bc593d2a66c90f74d250f0b05941a28dc6","sha256":"fe1ee0bd0649b865df68e0440a287a076544623fc6d9e3cb3b1b02bff4386a4e","sha512":"0757479620c4faac57b35da1a82f5748d4aa8d006caa3aa7723261903d6408b8ce851ee29f1027a32391b3c1eb1cf4eff5e175d90e84c6da40b4ec86be9cc7f1","ssdeep":"","tlshash":"b9f05c5ca7104374815541f861b58f7cbab2191c785f5941f1dc58687af2842879ffb8","size":443,"data":"","first_seen":"2025-12-29T12:03:05.360014Z","last_seen":"2026-01-11T00:21:16.448737Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/bignumber-1766537880937-DOH-f-tm.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c262f432e629a4d833314ccefdb40038","sha1":"c19d5bc607f5fd2d22de0e4b87021d8140b4af91","sha256":"200b81c2f39ba01c3f0b83838ef0cd4db9d1047e4cfa0d9eeaec28b96c185b81","sha512":"5bc3f02ccc9c96f85bdbddafe5e5d06a60d61a527ea66f046c5928b53056eaadc52bf4e5f3c58fe89c8fff8d5512f828eaea5c022f1ad691d4c566ecd62f698a","ssdeep":"384:7rPbXM1rzET1v30jIIzSlyD+CtKIlEmVemwibM/5RYwG2u5:TFuIIzUypAQYmwibM/5RbG2u5","tlshash":"c88209dc70aaf05a42fe389000eb9443e139bf56588c1966f24161a1b836dc7e2bff75","size":18612,"data":"","first_seen":"2024-07-18T01:10:46Z","last_seen":"2026-07-20T20:04:20.698023Z","times_seen":96,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"356a45730c4c09b6246667ce62147f5f","sha1":"5efcf6fa0686a03d17f96c9ed893bfaa250eac70","sha256":"12d5fd420d065b46cc6d533bde7e4567d1186da15670f59de49ce86775f5a874","sha512":"5eea4cc406a7f0907eaa90640268f44a96a79e926ad65073b04bd9d785a3a8cc9349bbf30785a15ecdc78c81cd6fa7f86decd82cef9097ebdf0d48df4229e8e7","ssdeep":"768:qghDaJsTzp7GDcap2Eib63FOycAeGxoFE/ZjN9Kek9xKUtEzDMUBduYFh1SrWYdH:qghIEm3lf9JixABdMGpG","tlshash":"55234b08f926893ed2f741d4641e6800a5282fdbe23448f5ba7e5c7b17d5c38376ab36","size":49622,"data":"","first_seen":"2025-12-29T12:03:05.387573Z","last_seen":"2026-01-11T00:21:16.478169Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28d7dd9c3b5274c8e14726b9050344e8","sha1":"e6f0e87ad72c900a1200040acf208e0b0e9d29d9","sha256":"bf00ae66d18c1ec6c72892ecadba4ab9174537672e9312ece0498763419b923d","sha512":"271a148553083fc9e8069b19083a9e7b52a0506e3787bf06c963e8a0b8c05adb522f1be51a28a69980165839d533d10112285b9558f1a53673543e9776dd96ad","ssdeep":"","tlshash":"9bf09e1b1c86b07e17d6a0ba5a3b9d1a22291147285108137d0c80246fe09347fe5fce","size":558,"data":"","first_seen":"2025-05-27T14:24:25.109166Z","last_seen":"2026-06-02T08:59:05.302498Z","times_seen":168,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"72a85073e547a7d11cbc616bf32a5a47","sha1":"bdc6b5a09765d58b158d7260adae46cd6d1efa7e","sha256":"d271cc15a22ee36fccbaeab6e88ba4f1ab8e083f6b3bd9df6e16e237fe60d21f","sha512":"d6388d2211ca54f34561effbbe139e59597e08f8a2880030032ea9658f884f89e834f1a13d3220a109999a4cd249f9a3754bbbdf11c9198cff930e7568bc2ead","ssdeep":"","tlshash":"d201ac224eb40129122730b97eef3d2a7a3a213f0490c1053e5cc724af11b33c36aadc","size":698,"data":"","first_seen":"2025-12-12T17:04:15.20406Z","last_seen":"2026-06-02T08:59:05.304729Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-BrMN9dhA.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad63b31537f50c64b21810dbbfb35c56","sha1":"be09d8a33e8de499c71f49ba3f5240f0e82f4471","sha256":"3df050720c19336ab64b9f89db6976aba5f264f67f67afdf71f882d5f2d75816","sha512":"16599e6c8c13e90084885bda831aecf02d4d9354f4d0300f99fa2e05c7617107656f71e2ec9ab558750d2598595775ada1a4f1525da552c4f3a9b5e45d97e149","ssdeep":"192:MK14y6oPJNJHUpEjvMT7sFAn1TJAlJ6bagRkj6fEN4v7Uyy0iIGg8tfLlhnIN:/f5HQIETwFAPb1RobWDVX+tkN","tlshash":"4d0296f0729f49f052d5094c78225a04a02445ace91cd07dbf9c19fad9afa438e5ffe6","size":8291,"data":"","first_seen":"2025-12-29T12:03:05.408631Z","last_seen":"2026-01-11T00:21:16.487022Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/commonUtils-1766537880937-RmAoQfx9.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"884dac152ec22b406ab28534de68fd01","sha1":"6a4c61d24dff82b0095dc2242a55bc15f8a074c3","sha256":"ad7bc832333a382747f174b805f7d170e0b37f1210c347e6428e6b04898ef7a7","sha512":"43cc8fe80bbbd943cd6417bad8df45f84708c67bf1bc1f061569eda43e0eafbcaa09032a66fb728bec2951ad02230ad87493ab1a3190944427eaf616fe19902e","ssdeep":"","tlshash":"a4e07d2c15168c7d03dd27c671b1c6e4b4c390a97557548270cd3c2cbbbaf805003e08","size":328,"data":"","first_seen":"2025-09-14T19:08:52.610742Z","last_seen":"2026-07-09T02:04:42.861369Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/hooks.module-1766537880937-B3Nfv_UP.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"a1698e40b10ebfff2e1e13cd3dc8132b","sha1":"f5c0bb602b018cea790efa74ef21c02b0996bbf9","sha256":"ef797a7c794c8056a1d6846d367e7d9980c88b6a4a41562e132c3f95e620972e","sha512":"9d491098bbac625555b0b5b60b5f3f88111b8cff4d6b20acb415698ca9302ca33d40a1194fb234b87de3ce9dbb74c78f0156bb4f676416233c9cc0324d078d1c","ssdeep":"384:S2bbmL8jpNgbbxAmmPzRn4GJRlbh5qiJcVpoR4Ju:SH8jpNgLMRJ3h7GVpoR6u","tlshash":"8d62e8ec3078742053fa75b261bf5d0bb3761c1aec8d98a0a609e4ea3af044c5157fe9","size":15966,"data":"","first_seen":"2025-07-07T05:51:14.83681Z","last_seen":"2026-07-15T20:45:43.42817Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/sha3-1766537880937-DVSzrknm.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"83b1b689d0c9364bd13e5ff43fba1c1f","sha1":"0fed4e0aaf332ad079b54ef4406ca0983ac34203","sha256":"0dec000be8e8018b5f7afbe02ab1fdb9e68c6df1f775f6c373f40d7aa4b29e6e","sha512":"e899543b212d62e33beeb008f60ff5237e4e3f0f0f4110c50f53650d76fe241ad1b7ba5f445e3a68648ae14711950b1dfa5ebbeaa8d9f1a1ca64dfaf51b530b2","ssdeep":"192:RCyXgWHWuZrR16ZPHrz6zj1ydi8LI9zMyZCLcbwENkCtUXCmOOlXJ3UoUFKD4SaH:MDWHWuZrR16ZPHrz6zj1ydi8LI9M7Lcf","tlshash":"f322888422c4a0a7a3d73de5447b401ad420bc30704a885cf75c4f6badea77d96f6e3a","size":10218,"data":"","first_seen":"2025-06-21T18:52:51.020723Z","last_seen":"2026-07-19T11:53:45.565274Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/pol-1766537880937-CLnshzBL.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"34fa6dc3511b3e68da4af7e9927ab702","sha1":"3c35d02c45b5ecb23407e46b949f8d3214dc0fbf","sha256":"80ced128f83660521173f8d0de6393dcd17733b744192a5bd5ac6921e5e4cea8","sha512":"c1e02290617c40d1d1bd6649f09e0fb50a2cd7ff0958bb95227e21ee8925cb509ddee735c4f7c7e220c12d5572f6e24895224a8e5c27e8f17220d9eaa138162d","ssdeep":"192:zJRTo0ztoCoob7nb4AL+29R5VVACSBy37+uSt:zJFfyClnbEwqCSBS7+uy","tlshash":"f412af93bc2f362fd593a85b325ad4c56a0a20bbc772a781e8b0106dcd2d206d7dc563","size":9521,"data":"","first_seen":"2025-12-29T12:03:05.350053Z","last_seen":"2026-01-11T00:21:16.446402Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/function-call-1766537880937-D_4qpRIl.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c30804eefc31281d53f14dbadd8df48a","sha1":"d43816e9b380cfda6f7b92f2daf6f89ad5835d29","sha256":"561dd32334eec78d8d2b1d1f2e8283e7d744ed92d099683a431aa11cab3302cf","sha512":"dd077f04e2491d210c66729cc61c361743b563c487d93884072036aa59bb6fbc88c0f92de70abadf5a989a51cc199e06b2f070b7841e9c7d4810aaad9633f7a8","ssdeep":"","tlshash":"a82114ecf4566f7ea05b81ecd6362d1068351a9cda3eebc4d17f352143814466a0ab78","size":1211,"data":"","first_seen":"2025-12-29T12:03:05.41824Z","last_seen":"2026-01-11T00:21:16.475913Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-D0tWWV-M.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d732d1b409840b260fb3546611e3b05d","sha1":"c266a8eaa8f67512f84eea6e46e17ebb1de0fb61","sha256":"7936138bdb33eb3b0444f217015faf0dfb433504371226c634af289578b782d8","sha512":"ba2e419b80d51d63167314ea276804e732a3b1a6af888b1a3707602f7f8a998bdc849251e395288658f80608a9465aa7bac2709f940de68a6894a8c7588aa49b","ssdeep":"1536:zCO/yrXfdOKD/yH5QeKIi5WlkiJxNFzgiHuoM+LadxT5K:zCOaxOKDa2IighzzgiHuoM+L01K","tlshash":"de736d8031b9a27047da90dab0b07302e224691cf85c843cf6bdcde7aa59e496737f75","size":75607,"data":"","first_seen":"2025-12-29T12:03:05.365956Z","last_seen":"2026-01-11T00:21:16.470636Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-Bi-K0ek2.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f65548449a7390c41e1f3930478778d5","sha1":"38d48b8a6b52413a5b56cd7d1bf3c0868e638b0f","sha256":"43fa191d415626bbc6b8b3b50ab600d01f68ed379be1eeabf148c132eda64042","sha512":"6b50db489824b06b3157c799e294a4a1e99e4f12bbd180aad58de13a79639d7a3fa218c56691b8c45464018c9c418a4c11be2603184c75d4319d3decc9c722f9","ssdeep":"24576:wo2cx2vv9A6splph7zJziqqilLXB5y9TP3s89M9XNg7OkMkhF9KEAwIXUoKaUAo7:P2cx2v+6splph7zJziq9lLR5y5P3s895","tlshash":"6e657c807295b03607a755d8647b1112f1385865b00dc0a8f6ac9defbfeac89867ff39","size":1536650,"data":"","first_seen":"2025-12-29T12:03:05.422737Z","last_seen":"2026-01-11T00:21:16.489475Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/function-call-1766537880937-MjiqYbDf.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"011d2ec7ad0e7b2254251e800c31ce32","sha1":"c8d4daf8ed1a4351306ba03d1a058746a0c97c0d","sha256":"416ce613a6e4f3ce0572151cb8a949c323e2796fb40d67629d05938fba82583f","sha512":"749b00534246676c5e17247d1bd8406ed580943194dfe26f69a7f0e5e25f1a6490ac7edc5588dcf77fa8ca180d8459338844e17301b46acd9972e83923959155","ssdeep":"","tlshash":"7c51c9d9f04d973d918740e4907b68a0b7280f4eed3c01c1f2ad6607a3a06c753aafd8","size":2869,"data":"","first_seen":"2025-12-29T12:03:05.405844Z","last_seen":"2026-01-11T00:21:16.457956Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/pdd-1766537880937-T_3oHWQ8.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"8d90178259f212f754deed999e593222","sha1":"baaffebcb071bece883d0e107d7033537031b365","sha256":"ec034ff28dae75b49a24bacf43ceab825257decf54fe5e99dd502a62a5f9d4fe","sha512":"eb9f249b93faa561b0489f7b7fb30cb3802cf916c9fc0e9a7966a5d405750917c262b5e519455a15ea4e9d8f145b0b19e57eea7e64f7fc9bde5ecb05ca334510","ssdeep":"","tlshash":"e1e012b91246d8a2411b24b115678f3702d662fa9b20f5e92f3df94b2b2f360944998f","size":394,"data":"","first_seen":"2025-12-29T12:03:05.389738Z","last_seen":"2026-01-11T00:21:16.462252Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-CRMVkWE8.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"3d06350f7267fd55581e4f50ec3d975b","sha1":"0ab14f49335341e6fee8cf56ec5399a2c3432ea2","sha256":"a8472646e4125b47d752a99d9f4f9e4fed44cdb5c417b6808adc034cff4c565a","sha512":"b78b339c808b08c2391394adcf8672b6f5195233d748b6f138c80fa6bdecb5869abf1ccd9434684d4b08e782dbfede97bd99c9856992baf12e0c272bc14a7333","ssdeep":"96:JzzWCXa/usi/c+X+Y5psbGOtl5xMjXfLB3ES67DCjA16O6Ym5uSC:wwaFi/l+Y4bGkl5uLfpE116qm0SC","tlshash":"c4b1c4e27190fcb7d738e6cc405001e0e7ae57d03025c6e9b01f5e03264acb8a6faa4a","size":5158,"data":"","first_seen":"2025-12-29T12:03:05.368503Z","last_seen":"2026-01-11T00:21:16.456972Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/dayjs.min-1766537880937-CYRVggtZ.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"f3efa8af1c06c214b295c60afdf492cb","sha1":"e390130443966cd65ff11aa9b0ee15260c244bda","sha256":"1c7627144548c931fd4f1fb46591d66e9a1720b0207e79582ecaa75e0620ad69","sha512":"8473b7b87d1eb68aae70ec3651d4bb9284f8e23f4197ec3965af5b1f15fb7461b364d93384149547cf379f3bd1a24cca5edbf00d2858cbe09726d4551e94d79a","ssdeep":"192:mzlr0ZxBZNFp/URt3lknlUmktp5nzZVcfQ3l4:mzlrivZNFp/Gt3+l4tfzZSu4","tlshash":"d4e10ec9f1c7f1498393f568452f4006f66f4996685f896cf42ac5c3bc2484dc17bba8","size":7156,"data":"","first_seen":"2025-12-29T12:03:05.398296Z","last_seen":"2026-01-11T00:21:16.458863Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-CNHF6DvV.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"c26732a373b66e765799e0ca940aef8c","sha1":"82fd11e9c74389b431270c1e64d2683740f2e784","sha256":"8ad80f6613721f85674241a13300a598da1ff23024c7bd39465b5c2634267bea","sha512":"e5eb96dd4678369a67f194e6d8be8d17f7a208b3539db875e106bda20f5df5280c380bcaae1bd20147f5017037195f8e7ecdcac8181da0f663f06c4401ca2082","ssdeep":"","tlshash":"8cb0228ff0822ef002230ebac80300ac2a3000b82b830280820c02200bfb0aa800fe0a","size":122,"data":"","first_seen":"2025-12-29T12:03:05.356444Z","last_seen":"2026-01-11T00:21:16.48401Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/home-1766537880937-CC_4Ghiw.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e0a48cc6b552a0e18ae6a0c939865948","sha1":"a74840db87f16612223559d64a590e4cd4383b90","sha256":"41a249cd197105c9f28afb47c37e8bd0d890225c211ac64001a08ed2f7bbe8f8","sha512":"99f32ca5ba7f0d190f1003974f22c97a891e8c473d57bb2d4864e82faa531c69c6115feb0b05badde175461d6cb1566976b912599c48dd05f68e4d96e4739aa4","ssdeep":"","tlshash":"72e0b6a2234185d7844e04f420524c314ac228f29b15f8c40f3cfd8bba2f7e06034dca","size":302,"data":"","first_seen":"2025-09-14T19:08:52.628597Z","last_seen":"2026-07-09T02:04:42.878338Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.web3modal.org/getWallets?projectId=751592f6b7ec898fba145396448542b8\u0026st=appkit\u0026sv=html-wagmi-1.7.11\u0026page=1\u0026entries=3\u0026include=8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2C971e689d0a5be527bac79629b4ee9b925e82208e5168b733496a09c0faed0709%2Ccbc11415130d01316513f735eac34fd1ad7a5d40a993bbb6772d2c02eeef3df8","fqdn":"api.web3modal.org","domain":"web3modal.org","tld":"org"},"ip":{"addr":"104.18.18.237","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"web3modal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 15:13:15 GMT","end":"Mon, 16 Mar 2026 16:12:59 GMT"},"fingerprint":{"sha1":"BB:A4:F0:3C:53:42:23:CF:CE:B4:8E:41:44:54:EA:D2:CC:AE:63:19","sha256":"56:62:33:83:79:07:6D:C7:91:6E:19:7A:0D:42:AB:AA:CA:79:20:84:2C:B4:55:EC:E2:C4:A1:84:5D:7B:EC:0D"}}},"request":{"raw":"GET /getWallets?projectId=751592f6b7ec898fba145396448542b8\u0026st=appkit\u0026sv=html-wagmi-1.7.11\u0026page=1\u0026entries=3\u0026include=8a0ee50d1f22f6651afcae7eb4253e52a3310b90af5daef78a8c4929a9bb99d4%2C971e689d0a5be527bac79629b4ee9b925e82208e5168b733496a09c0faed0709%2Ccbc11415130d01316513f735eac34fd1ad7a5d40a993bbb6772d2c02eeef3df8 HTTP/1.1\r\nHost: api.web3modal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 00:20:44 GMT\r\ncontent-type: application/json; charset=UTF-8\r\ncontent-encoding: br\r\ncf-ray: 9bc040047ffc56bb-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 33\r\ncache-control: public, max-age=43200\r\nexpires: Sun, 11 Jan 2026 12:20:44 GMT\r\nlast-modified: Sun, 11 Jan 2026 00:20:11 GMT\r\nx-robots-tag: noindex\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3281,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"e724fb55a7e688aa40aa15fd03c6718c","sha1":"3c93449a9347a9eb94600aca98baa9c25591c2df","sha256":"aed0668c4567ef2674f4151cf307017c740bc7679ad55b948b64f6d0265ec4c5","sha512":"48c21b2228248247bfec38bf0386e268568cbfbf05a31a732356885dddb6744278b63f56a5c63d1b443ea035b6e8fab5c6ae7df6bbf3adbad5057832c387558c","ssdeep":"","tlshash":"7f6134578bd09d6a9f308384e15cfeeec42ed00bc1cc9cfd65b4893543f596b6240425","first_seen":"2025-11-14T00:09:15.069715Z","last_seen":"2026-01-11T00:21:16.438319Z","times_seen":12,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":34,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getDomainCoin","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"OPTIONS /api/0ptP1e/getDomainCoin HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-max-age: 0\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DklLf%2FRGtkhmCpF0zZTaIM9paGt%2Bs0AJpzyFl9LL5j3xkhg2lo%2FZsa%2BhASRSiTTQGPKb88MDrAiYLLtsl8CO9cwLK01iR2k2qGgyRDlYSt8nOczw9Y0CxPEOmBqfH8i8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc040051e62b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":541,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":529,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/home-1766537880937-CC_4Ghiw.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/home-1766537880937-CC_4Ghiw.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"694bab26-12e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YhEsETIIkoaHEaEiVra6qlj%2FEpiYuZTGHhq6GbqUt8FIq6PoxPtDdCiVV5%2Fc%2BkrXY7dZTzAS%2BmJjpauPqJH%2FeSdaHX0h3IAbFuHTRQ%3D%3D\"}]}\r\ncf-ray: 9bc040053cbc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (301)","md5":"e0a48cc6b552a0e18ae6a0c939865948","sha1":"a74840db87f16612223559d64a590e4cd4383b90","sha256":"41a249cd197105c9f28afb47c37e8bd0d890225c211ac64001a08ed2f7bbe8f8","sha512":"99f32ca5ba7f0d190f1003974f22c97a891e8c473d57bb2d4864e82faa531c69c6115feb0b05badde175461d6cb1566976b912599c48dd05f68e4d96e4739aa4","ssdeep":"","tlshash":"72e0b6a2234185d7844e04f420524c314ac228f29b15f8c40f3cfd8bba2f7e06034dca","first_seen":"2025-09-14T19:08:52.628597Z","last_seen":"2026-07-09T02:04:42.878338Z","times_seen":73,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/commonUtils-1766537880937-RmAoQfx9.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/commonUtils-1766537880937-RmAoQfx9.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"694bab26-148\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESXKFRZqm1%2BKrrR%2FT4Ky0kTnJXyzqIXhne97ktlP93pMW23WNORSGxITfIzOPfj8t1FwwOB7ar4wRPQN4JgEPr6v5F4o5o8lGYMH7w%3D%3D\"}]}\r\ncf-ray: 9bc040053cbe2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (327)","md5":"884dac152ec22b406ab28534de68fd01","sha1":"6a4c61d24dff82b0095dc2242a55bc15f8a074c3","sha256":"ad7bc832333a382747f174b805f7d170e0b37f1210c347e6428e6b04898ef7a7","sha512":"43cc8fe80bbbd943cd6417bad8df45f84708c67bf1bc1f061569eda43e0eafbcaa09032a66fb728bec2951ad02230ad87493ab1a3190944427eaf616fe19902e","ssdeep":"","tlshash":"a4e07d2c15168c7d03dd27c671b1c6e4b4c390a97557548270cd3c2cbbbaf805003e08","first_seen":"2025-09-14T19:08:52.610742Z","last_seen":"2026-07-09T02:04:42.861369Z","times_seen":60,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":396,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/pol-1766537880937-CLnshzBL.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/pol-1766537880937-CLnshzBL.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-2531\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ki60A310nKDjxOgHPIZeapRBYRRsF%2F3ACZ6%2Fqg8arCfr%2BMLHlJZxAU7Q0wYdYW4BerKIcknMGESjDWlF5cLhEoR4NYAxU7zVPOecEw%3D%3D\"}]}\r\ncf-ray: 9bc04008bd1f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9521,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9520)","md5":"34fa6dc3511b3e68da4af7e9927ab702","sha1":"3c35d02c45b5ecb23407e46b949f8d3214dc0fbf","sha256":"80ced128f83660521173f8d0de6393dcd17733b744192a5bd5ac6921e5e4cea8","sha512":"c1e02290617c40d1d1bd6649f09e0fb50a2cd7ff0958bb95227e21ee8925cb509ddee735c4f7c7e220c12d5572f6e24895224a8e5c27e8f17220d9eaa138162d","ssdeep":"192:zJRTo0ztoCoob7nb4AL+29R5VVACSBy37+uSt:zJFfyClnbEwqCSBS7+uy","tlshash":"f412af93bc2f362fd593a85b325ad4c56a0a20bbc772a781e8b0106dcd2d206d7dc563","first_seen":"2025-12-29T12:03:05.350053Z","last_seen":"2026-01-11T00:21:16.446402Z","times_seen":4,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/home-1766537880937-CC_4Ghiw.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/home-1766537880937-CC_4Ghiw.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"694bab26-12e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6b1DgULItRSchGgwtd4Qk6WUjKtxKjnAePFVJe6sBpHaL5RAB%2FCdcQl4rLSZYbP3hweH1yl4Tcc8WZo2jcDoScs1%2FnDcVWlJtoF6qQ%3D%3D\"}]}\r\ncf-ray: 9bc04008dd292efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (301)","md5":"e0a48cc6b552a0e18ae6a0c939865948","sha1":"a74840db87f16612223559d64a590e4cd4383b90","sha256":"41a249cd197105c9f28afb47c37e8bd0d890225c211ac64001a08ed2f7bbe8f8","sha512":"99f32ca5ba7f0d190f1003974f22c97a891e8c473d57bb2d4864e82faa531c69c6115feb0b05badde175461d6cb1566976b912599c48dd05f68e4d96e4739aa4","ssdeep":"","tlshash":"72e0b6a2234185d7844e04f420524c314ac228f29b15f8c40f3cfd8bba2f7e06034dca","first_seen":"2025-09-14T19:08:52.628597Z","last_seen":"2026-07-09T02:04:42.878338Z","times_seen":73,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/mount-component-1766537880937-Bn12xgOq.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/mount-component-1766537880937-Bn12xgOq.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"694bab26-1bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fzy7kGYZTQAafPGSZ6v8X7SPX3PSuygzys2zlVF%2FaOOCAFmW%2BHM4hvFSmgqevvWb82IO1Te0QNLLmd0y%2BtYQ%2FomL9kPg9m2DVdyCHw%3D%3D\"}]}\r\ncf-ray: 9bc04008ed2b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (442)","md5":"5d24c703aada588d6f8b1b6b4e9e3855","sha1":"37d7f6bc593d2a66c90f74d250f0b05941a28dc6","sha256":"fe1ee0bd0649b865df68e0440a287a076544623fc6d9e3cb3b1b02bff4386a4e","sha512":"0757479620c4faac57b35da1a82f5748d4aa8d006caa3aa7723261903d6408b8ce851ee29f1027a32391b3c1eb1cf4eff5e175d90e84c6da40b4ec86be9cc7f1","ssdeep":"","tlshash":"b9f05c5ca7104374815541f861b58f7cbab2191c785f5941f1dc58687af2842879ffb8","first_seen":"2025-12-29T12:03:05.360014Z","last_seen":"2026-01-11T00:21:16.448737Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/sha3-1766537880937-DVSzrknm.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/sha3-1766537880937-DVSzrknm.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-27ea\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pWZ77ADTv2smR0UYRYRw52oQNtOOg5NvACJrmsjoT0RjnvoKuQAqCXelfUfX1msUW3yUP%2B26t%2BDRhCd8hEMmAVD5t9nh%2FpTieibWeA%3D%3D\"}]}\r\ncf-ray: 9bc040064cdc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10218,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10217)","md5":"83b1b689d0c9364bd13e5ff43fba1c1f","sha1":"0fed4e0aaf332ad079b54ef4406ca0983ac34203","sha256":"0dec000be8e8018b5f7afbe02ab1fdb9e68c6df1f775f6c373f40d7aa4b29e6e","sha512":"e899543b212d62e33beeb008f60ff5237e4e3f0f0f4110c50f53650d76fe241ad1b7ba5f445e3a68648ae14711950b1dfa5ebbeaa8d9f1a1ca64dfaf51b530b2","ssdeep":"192:RCyXgWHWuZrR16ZPHrz6zj1ydi8LI9zMyZCLcbwENkCtUXCmOOlXJ3UoUFKD4SaH:MDWHWuZrR16ZPHrz6zj1ydi8LI9M7Lcf","tlshash":"f322888422c4a0a7a3d73de5447b401ad420bc30704a885cf75c4f6badea77d96f6e3a","first_seen":"2025-06-21T18:52:51.020723Z","last_seen":"2026-07-19T11:53:45.565274Z","times_seen":89,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":381,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/home","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/home HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: polbot66.top\r\nContent-Length: 64\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"data\":{\"language\":\"en\",\"wallet_address\":\"\",\"coin_name\":\"BSC\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYhmLQX4I7JGrKvNSQzNfWWfOFjoGOd9Ure%2B4BkdjZkVvanKRDbF8G%2FzJfOGAJfVvXa37iG88kLdvaFDQ%2FIYbRgWsFDeoSwPkLcG9UJYo0dn1VeBUk8iJwUxOHj0FPkrAbo%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 55\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0400ce918b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11374,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a63fa0dbbce3cfa5b9b5c81dc81aea3d","sha1":"f0e6ff56eb342836df9bdb9d59aecef2b68f8895","sha256":"8e6a0e3b0f02b7a36df821625c375d12d5ee8b73291e5bc9ab61146fe6e949b5","sha512":"61979c809d008fad86b64c9d8bf4bbfc759a5193066d499e905c4f99385a57eb15f22035b330c5644f5e58954bfca735ccb709fcbc8aa51296733a5bbe0ea1a4","ssdeep":"192:eZum029WkJf5n2ZRGwa1GgMKmNWEn/j9ANlMYlx0J7efEyGnteabewqxFwo+bpLH:eO4Jym0pLVfsSDFRdBasoXTs7OIjJrMq","tlshash":"dc32b774c798377453943e4080fff4e1e68732c791894eb512fed02892a95b38db7559","first_seen":"2026-01-11T00:21:16.450913Z","last_seen":"2026-01-11T00:21:16.450913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":390,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20251224/2025122434261.jpg","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20251224/2025122434261.jpg HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 113901\r\nlast-modified: Wed, 24 Dec 2025 00:52:13 GMT\r\npriority: u=4,i=?0\r\netag: \"694b393d-1bced\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MH8YkfHnMSSGYTyj4EjFa3BNjwEuqRGwZaROzcFUXj3ioIw4kZiOLuCLq7ZPdL0GgvYakZ3kl%2BlUZlrKkiuFh%2B96UIeptVYzcA5SiIv3QOOXr2pwe%2FMwUq3%2F2cVbkKTf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400feba00b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113901,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x716, components 3","md5":"81e5acc0ceffce8295442be609de1e91","sha1":"03995f1b49c7e13525f5460a02d2e651cb467e85","sha256":"adaf65947b1f29750b8ec2f08948ccaeaafd290ccce0ffd18ffa0031508b1fe1","sha512":"35781ca3bddb1c180241331bda76812a6ee5f65b87b4b358c5896dc1263d57f7463bdd79e3f9b0a04bf8e22c6af5dc5d2ac0f214ce855009fe2415d7e9f0fcdc","ssdeep":"1536:wWpxO4hG5cF33FkeUQTRrXDMb0kd0lZRyUU9QEVbYR8ovXOLXSYt2I7OicD+7TAq:/sqN33S3QTRHbZIUtOOii3gy+X/L","tlshash":"ecb312a92305ac05fd7ecc5b85d532c2f746a5a48b59467531c208fababf852c77c3c8","first_seen":"2025-06-18T03:26:15.930252Z","last_seen":"2026-06-28T23:50:55.407039Z","times_seen":26,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-Bi-K0ek2.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:42.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-Bi-K0ek2.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-17728a\"\r\nexpires: Sun, 11 Jan 2026 12:20:42 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DgxxME3JjuyXe3pKFNSumLLnfGdeA8kr7gTQJxUQ%2Fg9yKiSGPT5KGGY2EGfprrFyFo85U1rOF7xt885mfJkZc0AjkstY0qtU5bIEtA%3D%3D\"}]}\r\ncf-ray: 9bc03ff71aaa2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1536650,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41061)","md5":"3e2c46cc6f83f38dab7eea0163d830d4","sha1":"549b3f4217ebf2a54e79fddc0053f31f59d76560","sha256":"a15f5447c8e19d2cfced3ae48b7b322d3744ae55d2cfced6b0a59d9c5827fc79","sha512":"f561c09bb4d642390d517f522f444704fbc0427b10baab5151acfbe16e240d4d87717c5d79535a35cdfb6e6d3452898e4432e665c4be983ab6a4134d4a3d079c","ssdeep":"24576:wo2cx2vv9A6splph7zJziqqElLXa5y9TP3s89M9XNg7OkMkhj:P2cx2v+6splph7zJziq7lLq5y5P3s89T","tlshash":"e5254c8072a1b43603e755d964771101f2385854700dc0acfaecadebbf9a88a967ff79","first_seen":"2026-01-11T00:21:16.45441Z","last_seen":"2026-01-11T00:21:16.45441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":972,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-CRMVkWE8.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-CRMVkWE8.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-1426\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4fx7o%2Fkwb4sD4AKxalc4oitPt7UTAt7spnYot%2B5Fm1%2B9CQIzDCZB0GWFw2KYMTCsqayDzMwF4DVKA5N8a1jZBccBn46SpS%2FsyAOphA%3D%3D\"}]}\r\ncf-ray: 9bc040052cb22efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5158,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5157)","md5":"3d06350f7267fd55581e4f50ec3d975b","sha1":"0ab14f49335341e6fee8cf56ec5399a2c3432ea2","sha256":"a8472646e4125b47d752a99d9f4f9e4fed44cdb5c417b6808adc034cff4c565a","sha512":"b78b339c808b08c2391394adcf8672b6f5195233d748b6f138c80fa6bdecb5869abf1ccd9434684d4b08e782dbfede97bd99c9856992baf12e0c272bc14a7333","ssdeep":"96:JzzWCXa/usi/c+X+Y5psbGOtl5xMjXfLB3ES67DCjA16O6Ym5uSC:wwaFi/l+Y4bGkl5uLfpE116qm0SC","tlshash":"c4b1c4e27190fcb7d738e6cc405001e0e7ae57d03025c6e9b01f5e03264acb8a6faa4a","first_seen":"2025-12-29T12:03:05.368503Z","last_seen":"2026-01-11T00:21:16.456972Z","times_seen":4,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/function-call-1766537880937-MjiqYbDf.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/function-call-1766537880937-MjiqYbDf.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-b35\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V0SHcMlXRE3xU1z6qToo%2BDh35yfBUmFP3tA1jU6vkvm4uXghOrYquCZkyW2aKJkuMDYJkjJIf5UINJc6U6VpDzAI8QyTR13vxrOJdA%3D%3D\"}]}\r\ncf-ray: 9bc040052cb72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2869,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2868)","md5":"011d2ec7ad0e7b2254251e800c31ce32","sha1":"c8d4daf8ed1a4351306ba03d1a058746a0c97c0d","sha256":"416ce613a6e4f3ce0572151cb8a949c323e2796fb40d67629d05938fba82583f","sha512":"749b00534246676c5e17247d1bd8406ed580943194dfe26f69a7f0e5e25f1a6490ac7edc5588dcf77fa8ca180d8459338844e17301b46acd9972e83923959155","ssdeep":"","tlshash":"7c51c9d9f04d973d918740e4907b68a0b7280f4eed3c01c1f2ad6607a3a06c753aafd8","first_seen":"2025-12-29T12:03:05.405844Z","last_seen":"2026-01-11T00:21:16.457956Z","times_seen":4,"resource_available":true,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/dayjs.min-1766537880937-CYRVggtZ.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/dayjs.min-1766537880937-CYRVggtZ.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-1bf4\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UuB%2B7lwuWa17JMalnOnadTfjQJYd%2BnKRvDo4YnzxJL7UOnquO%2F75ogDj9AhulnsuQzVhn6pVV9qQxMukPd9wXzAEttSXZ5v8KOSLmQ%3D%3D\"}]}\r\ncf-ray: 9bc04008cd222efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7155)","md5":"f3efa8af1c06c214b295c60afdf492cb","sha1":"e390130443966cd65ff11aa9b0ee15260c244bda","sha256":"1c7627144548c931fd4f1fb46591d66e9a1720b0207e79582ecaa75e0620ad69","sha512":"8473b7b87d1eb68aae70ec3651d4bb9284f8e23f4197ec3965af5b1f15fb7461b364d93384149547cf379f3bd1a24cca5edbf00d2858cbe09726d4551e94d79a","ssdeep":"192:mzlr0ZxBZNFp/URt3lknlUmktp5nzZVcfQ3l4:mzlrivZNFp/Gt3+l4tfzZSu4","tlshash":"d4e10ec9f1c7f1498393f568452f4006f66f4996685f896cf42ac5c3bc2484dc17bba8","first_seen":"2025-12-29T12:03:05.398296Z","last_seen":"2026-01-11T00:21:16.458863Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AntYrzV%2B%2FMj1Vf6piEnM9woCubUReCBKiYtSMP8RqmCVAyel9XiIKrwEdO2LnFZ9NtUH9Ubxf2KbzR7igz8KTvwDzTw2tCuN%2BWd53Q%3D%3D\"}]}\r\ncf-ray: 9bc04009cd4c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20251222/2025122273055.jpg","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20251222/2025122273055.jpg HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 45644\r\nlast-modified: Mon, 22 Dec 2025 22:13:48 GMT\r\npriority: u=4,i=?0\r\netag: \"6949c29c-b24c\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ygBY0qccnu2SXPqsLTgkP4N075JK71%2FgAtDBl%2BTVC6gIVQR7PTPmoiBF2wvmPFaq%2Bgnst%2BZjf5zUNHRlUphV3COxumsoPIK%2FfFKKgZFfPOwyURy3vlA6WwwQJlSI1F39\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400f7b930b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45644,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 640x640, components 3","md5":"b6f733c40014e717265ce6f86bd62723","sha1":"4a0f1d40bcb5628826223d7ca30ab308c9808e20","sha256":"65cb2275c88131f970e8e6c3f9e16bb93b0c2f70371022718068868dbd2afc0a","sha512":"bafc6d49a196ef6bbb20c7886d683042e6f53e8c53adae96d0f1053ad0cc10b990ee2242ee1e6e2575878718d041a9d77601a699f9f6cc812b26498db53236df","ssdeep":"768:H7bNM9nmPxfGaeAj9Ikx5LiQD5vU4oCEjqOuBK/+bNCGyjx:HPNM1kOaPjqkx5LjCajK/+bEr","tlshash":"5823d0366c044c428e5f1ef29e97c65adb169531ff23fa2eac125da0ec01fe8c965344","first_seen":"2025-12-29T12:03:05.413776Z","last_seen":"2026-06-28T23:50:55.417453Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20250620/2025062095391.png","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20250620/2025062095391.png HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 17381\r\nlast-modified: Fri, 20 Jun 2025 05:31:09 GMT\r\npriority: u=4,i=?0\r\netag: \"6854f21d-43e5\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cxnGySIOyR4Ip%2BxvK8ZuHLcn9VuCPWLw7Plx71RqV%2Fx52SboFl1t9Wrbvlh1nuV01EJOrQFQEzgebe52RlzjeXjTyOC%2B8yuxMWAVef0WtLG%2B9%2Fwrt%2BZq9uXszHnwORyv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400fcb970b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17381,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 180, 8-bit/color RGBA, non-interlaced","md5":"d840aa21c0240a770deeb2a7df8a636f","sha1":"e72db4b9beb81dbb168ddfe199e82af7a14c3165","sha256":"e343eb21088a6b4209b78c20f793e9ee7f76e452c832afcb77cc61d7383e2a14","sha512":"cefe3b7b1f5dd97d818cca6d82deee1472390d712db26718e3513dc01aa6fded4a6bb1381a1ad00578e99b4a09f7f28615f1a3297bb11c4813ea5498ea5ec616","ssdeep":"384:tpnPj+1UPOLerNgVO8ilM+ImX6N3Ks/dO7YTYOJO6CNsJ:bRSeMONM2X6Ms/dOcYqtCNsJ","tlshash":"5872af146c212902646a57385da97306fa9e4b94fc06f5919bc2fc97c87c2739eceac3","first_seen":"2024-08-19T15:28:20.965802Z","last_seen":"2026-06-28T23:50:55.451136Z","times_seen":66,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-CRMVkWE8.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-CRMVkWE8.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-1426\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olN0P7UHOnv4u5tTEDwceH2MTmPnUwZsoX3Q%2BjK8xK4%2FCN78FyHDpeEPu1AabqoQGq5UDFfEvLKhm8vdcwN6FwQ51P7xmDT7x9K1SQ%3D%3D\"}]}\r\ncf-ray: 9bc04008bd1b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5158,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (5157)","md5":"3d06350f7267fd55581e4f50ec3d975b","sha1":"0ab14f49335341e6fee8cf56ec5399a2c3432ea2","sha256":"a8472646e4125b47d752a99d9f4f9e4fed44cdb5c417b6808adc034cff4c565a","sha512":"b78b339c808b08c2391394adcf8672b6f5195233d748b6f138c80fa6bdecb5869abf1ccd9434684d4b08e782dbfede97bd99c9856992baf12e0c272bc14a7333","ssdeep":"96:JzzWCXa/usi/c+X+Y5psbGOtl5xMjXfLB3ES67DCjA16O6Ym5uSC:wwaFi/l+Y4bGkl5uLfpE116qm0SC","tlshash":"c4b1c4e27190fcb7d738e6cc405001e0e7ae57d03025c6e9b01f5e03264acb8a6faa4a","first_seen":"2025-12-29T12:03:05.368503Z","last_seen":"2026-01-11T00:21:16.456972Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/pdd-1766537880937-T_3oHWQ8.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/pdd-1766537880937-T_3oHWQ8.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"694bab26-18a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sje%2FK%2FmwqqX72dQTbqR3MQ32teL78VLqdwQ6ZvsieHEDw9GXwLsSppzoeW2%2F8PczZBLyt7unLn0s8Y8qEdbRxUadUWij3AQENt7TDA%3D%3D\"}]}\r\ncf-ray: 9bc04008dd262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (393)","md5":"8d90178259f212f754deed999e593222","sha1":"baaffebcb071bece883d0e107d7033537031b365","sha256":"ec034ff28dae75b49a24bacf43ceab825257decf54fe5e99dd502a62a5f9d4fe","sha512":"eb9f249b93faa561b0489f7b7fb30cb3802cf916c9fc0e9a7966a5d405750917c262b5e519455a15ea4e9d8f145b0b19e57eea7e64f7fc9bde5ecb05ca334510","ssdeep":"","tlshash":"e1e012b91246d8a2411b24b115678f3702d662fa9b20f5e92f3df94b2b2f360944998f","first_seen":"2025-12-29T12:03:05.389738Z","last_seen":"2026-01-11T00:21:16.462252Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/userMessage-1766537880937-CT7g8Zt1.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/userMessage-1766537880937-CT7g8Zt1.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"694bab26-84\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yaQtk0vs47TVu3GIXZoMJQlXxaYxEkHuhe3PpON8dUBAslHfuj5B4wE1mxdlku6ch0M3ZLMLEdV4wv83LPlhL3fTuj8y5S4l6OqrmA%3D%3D\"}]}\r\ncf-ray: 9bc04008dd282efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"8458fc54ca8619a5b242c7468e8a11a0","sha1":"4da7eb6329f38f309e4c65f0278919f08575e463","sha256":"6bdb2390cd4492a8fc3d3c5ef0fd067f86ee924521798c660be9e4584324a97d","sha512":"fee65971e4ac4a31fd5128adc676ac88dc7f230ab6b6651cfa7af7eb8b2cf9b9f9f7e03d58040ab488443e6464d3e5fa88375800e3e90a19a12eb7b1d19ba850","ssdeep":"","tlshash":"fcc0480e7600caa1508a51ea166208b632d715ff5b00f9e24e21ac97362b7a0381ccce","first_seen":"2025-09-14T19:08:52.605613Z","last_seen":"2026-07-09T02:04:42.843717Z","times_seen":73,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getChainList","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"OPTIONS /api/0ptP1e/getChainList HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-max-age: 0\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XheHhwdNq%2FyjSVyNezWLfv5CCvmvGnZ3oXz8HmQrARDsR9IXgy%2F2o2dafqfRYbpiftgpm0XRUuK32EJH1EiaLuTt5eyB9dmMItvzm76A0Q%2F9dR9nB3ehMUW4J95WOO2WPvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0400998cfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":540,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/bignumber-1766537880937-DOH-f-tm.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/bignumber-1766537880937-DOH-f-tm.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-48b5\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xka8GxHpFGp2DSRKWjMy%2BsVHf1MkIrMdTbUuq%2B7DA9jcyL1U1vcLDPo0FJjkW2%2FewGQKm4JgFs%2Blx8cgNd%2Fv0RGz5pcYirb04th%2BMA%3D%3D\"}]}\r\ncf-ray: 9bc04008cd202efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18610)","md5":"c262f432e629a4d833314ccefdb40038","sha1":"c19d5bc607f5fd2d22de0e4b87021d8140b4af91","sha256":"200b81c2f39ba01c3f0b83838ef0cd4db9d1047e4cfa0d9eeaec28b96c185b81","sha512":"5bc3f02ccc9c96f85bdbddafe5e5d06a60d61a527ea66f046c5928b53056eaadc52bf4e5f3c58fe89c8fff8d5512f828eaea5c022f1ad691d4c566ecd62f698a","ssdeep":"384:7rPbXM1rzET1v30jIIzSlyD+CtKIlEmVemwibM/5RYwG2u5:TFuIIzUypAQYmwibM/5RbG2u5","tlshash":"c88209dc70aaf05a42fe389000eb9443e139bf56588c1966f24161a1b836dc7e2bff75","first_seen":"2024-07-18T01:10:46Z","last_seen":"2026-07-20T20:04:20.698023Z","times_seen":96,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/commonUtils-1766537880937-RmAoQfx9.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/commonUtils-1766537880937-RmAoQfx9.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"694bab26-148\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32Mf2VUkBKE%2B1B3MfljJkQUqVu6CGskwQb8OlyHc18khKRzsLtq7D5Xb8tOAj5uWk3jl%2BOz0rZXdQEvGHzTBRBO2vmy0AKLZAnEyiw%3D%3D\"}]}\r\ncf-ray: 9bc04008ed2a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (327)","md5":"884dac152ec22b406ab28534de68fd01","sha1":"6a4c61d24dff82b0095dc2242a55bc15f8a074c3","sha256":"ad7bc832333a382747f174b805f7d170e0b37f1210c347e6428e6b04898ef7a7","sha512":"43cc8fe80bbbd943cd6417bad8df45f84708c67bf1bc1f061569eda43e0eafbcaa09032a66fb728bec2951ad02230ad87493ab1a3190944427eaf616fe19902e","ssdeep":"","tlshash":"a4e07d2c15168c7d03dd27c671b1c6e4b4c390a97557548270cd3c2cbbbaf805003e08","first_seen":"2025-09-14T19:08:52.610742Z","last_seen":"2026-07-09T02:04:42.861369Z","times_seen":60,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/notice-1766537880937-HCdp9YW_.png","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/notice-1766537880937-HCdp9YW_.png HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 5188\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\netag: \"694bab26-1444\"\r\nexpires: Tue, 10 Feb 2026 00:20:45 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s3v0qFtJTF5Ya2BiBsUFZCFjGnpoH2tD7whR0jJeJdivJvdSQyXTXROgwgfgivANupreQDWVpcAA9EuTYP3JHhSwFYHEfQQBSkEbqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc04004dca82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5188,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"dcc34f72146f8f1c7c66b2263b73b90b","sha1":"1abeb572dfbaae681852c1c6f4c84ebe0156bc68","sha256":"59c36fbdeb165afeee4388e51e6dc8610165fc77fa25825f8a89fcaa4fb026f4","sha512":"d9a9146aa371b8520a94d2211b0eb57fc6f2a6dccb2f7752a03f371611e3ed34962e44c2011dbf325c8052354e1350dacad264e054d6733e810712e09546a859","ssdeep":"96:WbZVPwRNHSPPKHBl8NWmU9XMS/tfiJxgkj6pPSHSlpRWfuAhSj4pc11Ej9B:QjPwRNuAB/Lr01WpFnREkH1ur","tlshash":"36b18ea7afbc43e0db2b231f6977657d191464c9fd39483f9b1b0036696e86230c9493","first_seen":"2023-05-01T23:49:23Z","last_seen":"2026-07-09T02:04:42.864965Z","times_seen":109,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":200,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/HomeView-1766537880937-nHVpS_Uw.css","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/HomeView-1766537880937-nHVpS_Uw.css HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-6986\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dBqhbxt5EMmC%2FxMYM6jyeLeTZ7CW2h3u%2F0iV3ayuKLBbmYGN0BBvHRIQz4Xvx%2B7FCPg0OAzIa1rEXM9GzVv1kvVePjPa9jaR%2F29r%2Bg%3D%3D\"}]}\r\ncf-ray: 9bc040051cb02efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27014,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (27013)","md5":"d2e3774d596d347faf1bf2e876e31925","sha1":"76f3d55c428d4a8def19bbbbb391b9809b9a8681","sha256":"85eb68ef535aabe4907806b7b31fc93db3bf889b73a115ff605abbbf4b566571","sha512":"1736031e793bb9525a88ac97486e1777ea557cc4903754ecd82aa4f5a2fd3664341daf1077923c16e431101318d0f7e66dcd0a33833241f3fa25111cdface0c2","ssdeep":"384:RiS6eRRSfRbHT6+OhCcbak5eYaTOHMV7G/PI1hCKG21NR92SSn/8paUZxdro74jN:oDseNR9un/89x+74jH/l","tlshash":"42c23c365e98503cfae7e0b8b296e989c45c8412c6514ffdfa2bb53a46c76f13163324","first_seen":"2025-12-29T12:03:05.403041Z","last_seen":"2026-01-11T00:21:16.466157Z","times_seen":4,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":205,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/pol-1766537880937-CLnshzBL.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/pol-1766537880937-CLnshzBL.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-2531\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5ef1tbjYg1jmxG7zdmn1QAL6MqIGkdw24eGijDY8XanFKXicnm%2FkCkhlez43zR4ZnjaGxdvpv0z9wIwegYWT9wfgeM5AEnHAVONMgg%3D%3D\"}]}\r\ncf-ray: 9bc040052cb42efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9521,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (9520)","md5":"34fa6dc3511b3e68da4af7e9927ab702","sha1":"3c35d02c45b5ecb23407e46b949f8d3214dc0fbf","sha256":"80ced128f83660521173f8d0de6393dcd17733b744192a5bd5ac6921e5e4cea8","sha512":"c1e02290617c40d1d1bd6649f09e0fb50a2cd7ff0958bb95227e21ee8925cb509ddee735c4f7c7e220c12d5572f6e24895224a8e5c27e8f17220d9eaa138162d","ssdeep":"192:zJRTo0ztoCoob7nb4AL+29R5VVACSBy37+uSt:zJFfyClnbEwqCSBS7+uy","tlshash":"f412af93bc2f362fd593a85b325ad4c56a0a20bbc772a781e8b0106dcd2d206d7dc563","first_seen":"2025-12-29T12:03:05.350053Z","last_seen":"2026-01-11T00:21:16.446402Z","times_seen":4,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/userMessage-1766537880937-CT7g8Zt1.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/userMessage-1766537880937-CT7g8Zt1.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"694bab26-84\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dn85nycEO66kvnsx2iaJCp2OAE7Tf7i01O4Zul7FgyyFXk3dV3aGeHwFybLcG5NUmp4wQjS4v1UWeCKtYoMTWZdUheIl%2B91H1HHvGw%3D%3D\"}]}\r\ncf-ray: 9bc040053cbd2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"8458fc54ca8619a5b242c7468e8a11a0","sha1":"4da7eb6329f38f309e4c65f0278919f08575e463","sha256":"6bdb2390cd4492a8fc3d3c5ef0fd067f86ee924521798c660be9e4584324a97d","sha512":"fee65971e4ac4a31fd5128adc676ac88dc7f230ab6b6651cfa7af7eb8b2cf9b9f9f7e03d58040ab488443e6464d3e5fa88375800e3e90a19a12eb7b1d19ba850","ssdeep":"","tlshash":"fcc0480e7600caa1508a51ea166208b632d715ff5b00f9e24e21ac97362b7a0381ccce","first_seen":"2025-09-14T19:08:52.605613Z","last_seen":"2026-07-09T02:04:42.843717Z","times_seen":73,"resource_available":true,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20250620/2025062047590.png","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20250620/2025062047590.png HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 4079\r\nlast-modified: Fri, 20 Jun 2025 05:31:54 GMT\r\npriority: u=4,i=?0\r\netag: \"6854f24a-fef\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLlQJcNDrHTKc3tBAOd3DWUVkt%2FCwuLvyCODLnvrZgTOG3x%2FE82sk5xXk9xokaPwlFDbxH6x7%2FuDCZs0V60gD8L3NK71bBk%2BjGiwXndXlr9rrRS5zEBXPuPXG%2Bz4o0Qa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400fcb980b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4079,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 180, 8-bit/color RGBA, non-interlaced","md5":"8eea66de7ff0024b185b204755ec4717","sha1":"5c92a43f77d67d6a38ea6fa116c9a4b9381cbbe9","sha256":"4210e5ba11586970edd26aeded63ab8204354d8c4ef327fc657127a77319228c","sha512":"01c900d769b21f169597e293e3b040ec8c394b54e09f4843d3a6411d1a0fdf922e10e945474919aa930ee30b96235f62456b292dadec4f275e2ecd0458cce400","ssdeep":"","tlshash":"7181a67a88202e1bcd8dfb5fb7f641155ea71f008a8760faff568506a2431f1c5a8dd2","first_seen":"2024-08-19T15:28:20.951286Z","last_seen":"2026-06-28T23:50:55.475713Z","times_seen":66,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getHomeNotice","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"OPTIONS /api/0ptP1e/getHomeNotice HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-max-age: 0\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyue%2FdJpuMk%2Bhsf2dSTRX4VQQ%2FNf0%2B914MQPVGqgHr50eZsRsrCBAFzlpGoI5gSQTBaEi4ks9roM4NTHLtZc3d%2FUDkksGq85jOdZg4zaKlVLxymNi03XLkcXphvIHXnA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc040051e63b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":563,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":559,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-11T00:20:42.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 00:20:42 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K8K0qB8RCxVgD4%2BkjlJ7l4TQB1gs%2BStMlWXHhBcX2DJIROPgHAl080P2b0jK6z3YFvG9DpaJAuG3WTlaHWFKTxn5cs2DoWHi1XlO9A%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9bc03ff37bce0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7605,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"014fa0b979e8f160e68cc500bbf9e7ba","sha1":"4d52ada0be091da7575b8591dc65be965b2fd1f0","sha256":"2eca58fec16a7905823c381af67907cd4389c55205e7473f8caa7a4a6b284e1f","sha512":"e6975ec226bb8efad74d8564ab7e0874a8f163a9584a9968def1e25c76f317a21fe4fb1bb3ec7a6e166f556bc99fe043cf9ddd0ca7004b54f8cb9cbfeddcf77f","ssdeep":"192:z5qN0gt7PTIWqqMyqqMEcDwcDdfjJXZfjJXaJxkKyJSJ0B0ZpW:z6EIJ0B0Z4","tlshash":"6df1209a5de344493507e0a84ff71b155238a00ba44bcd3e3b8d619ccfc5ae999e7bc0","first_seen":"2025-12-29T12:03:05.371599Z","last_seen":"2026-01-11T00:21:16.467797Z","times_seen":4,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":58,"dns":42,"connect":1,"send":0,"wait":400,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-Dp7nPZLb.css","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:42.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-Dp7nPZLb.css HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-3d063\"\r\nexpires: Sun, 11 Jan 2026 12:20:42 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13tkgZYsvtHZYO0jGdab6mOYZgQEWDRt3KMuAXHtfObiaonbQcG2mG%2F4phkLAZVlYeWth%2BtTtrgMhvT9XHi6OO9CHe%2FpJyPKjH5vmA%3D%3D\"}]}\r\ncf-ray: 9bc03ff71aab2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":249955,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65484), with no line terminators","md5":"97131c9e28fe1fb565302c0fec95315c","sha1":"6652d08fa5ca689fa6671ca9600b36b9c711db11","sha256":"1302bc133d018e69a0310289f9174aa3e81ce1637db1cdf8beaf273c02b270eb","sha512":"19378fef6a9df19e2f4335cf0c13de95c8f13a4d1d34adaf6ade0cf4eb0e6d97f1b7692a9692025089c066523ae4e76f14844b6df1cf54ca5a574d24c61c680c","ssdeep":"1536:eIWYGCwsBlDOFIxuVoxsuU2JM3in/j3YqS/yoNiCRN0zv6TmKEYWet0M51+yikr1:mClDsIxuVSq/yoNiCRNgmSadGW","tlshash":"e834d5a5ea9091bc7f1bb679a7c796dcf23cf960ed00daa4f10151180ec3bf5162361a","first_seen":"2026-01-11T00:21:16.468564Z","last_seen":"2026-01-11T00:21:16.468564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getPledgeMoneyDesc","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"OPTIONS /api/0ptP1e/getPledgeMoneyDesc HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncache-control: no-cache, private\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-max-age: 0\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8Mn%2FDQPEoXAqciqU401dP8Pq25VsctophBv76wvmTmO%2FD%2FK1bjs9URBXlCN0EtiURmT8aMPZAF%2FIio%2F9uzLDNGFjfCI9wXPCdSJvsqYniUHCWCMrC2%2By6QXnYdWcGSjK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc040051e60b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-D0tWWV-M.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-D0tWWV-M.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/index-1766537880937-BrMN9dhA.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-12757\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Eb8bDn6w%2FcGe3adL9Pb9CQ%2FNqTVMZpatJ7S1QF6ehCJK%2BhSo9%2FBqHshVvW6YlDZiEgc0hae6ffJFI6J6aS6gON3ksxOKPIQjS2n%2Bg%3D%3D\"}]}\r\ncf-ray: 9bc040064cdf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d732d1b409840b260fb3546611e3b05d","sha1":"c266a8eaa8f67512f84eea6e46e17ebb1de0fb61","sha256":"7936138bdb33eb3b0444f217015faf0dfb433504371226c634af289578b782d8","sha512":"ba2e419b80d51d63167314ea276804e732a3b1a6af888b1a3707602f7f8a998bdc849251e395288658f80608a9465aa7bac2709f940de68a6894a8c7588aa49b","ssdeep":"1536:zCO/yrXfdOKD/yH5QeKIi5WlkiJxNFzgiHuoM+LadxT5K:zCOaxOKDa2IighzzgiHuoM+L01K","tlshash":"de736d8031b9a27047da90dab0b07302e224691cf85c843cf6bdcde7aa59e496737f75","first_seen":"2025-12-29T12:03:05.365956Z","last_seen":"2026-01-11T00:21:16.470636Z","times_seen":4,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":185,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/home","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"OPTIONS /api/0ptP1e/home HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-max-age: 0\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IgqcqSIi9E2gIQtNtEwQnaWQYElB8pJH8shfHI5k28fwEb4KryHvsCAi89gD3HVwq2H%2FdVJ5TTPqL456e6kLIlm6Fy5AlCpnn8ZiPHrsVBvMEhWCeNiFOzwZIl1J4mlrmA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0400998ceb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getChainList","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/getChainList HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: polbot66.top\r\nContent-Length: 64\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"data\":{\"wallet_address\":\"\",\"coin_name\":\"BSC\",\"language\":\"en\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IgbfFSAM%2FgSuj0Kp5HmNNUSWVOYNhIUt%2BAkhovy1ACWCJOrsX6OOsxP%2F375RuxPUqGr4N3KBIPe1dhF%2BbLTvzo9nQIgbuHf%2BzG3%2FT5l7JoZPeelWfF74wAHCkDkDnqd%2F2E8%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 55\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0400cf91ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":68,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"35936b6fc3e5840c1773f9f333841be4","sha1":"5dfa38d7a5134e3f297555b9e7e139ca09f18f07","sha256":"2a0f63e9dd93fa3612944417c3613d871cc0e57ffa5a0afd92687a670076defe","sha512":"9faa9b8d7f81f5e85d4f8cffd6902a260a69066154f63ddac5b84a1b39b28fdecc08f53fcb3bfb61e959780536a2279c019ce862cbb2dcb7e82720868adb8728","ssdeep":"","tlshash":"1da00247696fbcb3681741c8e96d4b4105e86540159686128d7c65627709cbba1106f2","first_seen":"2025-09-14T19:08:52.649617Z","last_seen":"2026-03-29T08:43:08.375044Z","times_seen":19,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":362,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20250627/2025062769154.png","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20250627/2025062769154.png HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 23106\r\nlast-modified: Fri, 27 Jun 2025 20:08:33 GMT\r\npriority: u=4,i=?0\r\netag: \"685efa41-5a42\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UP0IGcTkFar%2FcLXI9leDGC7j5wkssE7kDBpY%2F%2BkfZnnjGgXzkZLvcl9wxniPto%2BLBBLaOIi%2BPprqVuWz0KD3cy4hzyeCVXPeuKOC7MPJrkPrqzm8OnV5Ggrh20sY1r1k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400fcb960b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23106,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 180, 8-bit/color RGBA, non-interlaced","md5":"a4b2e2870fa8bf9104986a9da2605d1c","sha1":"824b30e396b06a84d40b36de80741065ebab7719","sha256":"1bcd8fb70948d7b492f4112e584e70f6a0f959c6583fe87f178de0bee714bb82","sha512":"06111b4a8ac904a94730ca3e2128dea07bf620ac8a1968e170268fa8a7f8be00e768cb07764339c393dc9dd4cce1bf3c2a52728c8ff749c2da33ea35c5aa137b","ssdeep":"384:tpntF8wdjdWX+9eGMBG45Pp+x8iWVBPVhXk+LATlpp72++N9rNq8vhNCOjeSGB:bQwqXUbMdPE87VhNh++N9J5BfGB","tlshash":"57a2e0a7e863d270222d92b61dc2550dab4321e93b81c50cfbdbca129c5067ecb6d2f1","first_seen":"2024-08-19T15:28:20.953887Z","last_seen":"2026-06-28T23:50:55.423326Z","times_seen":68,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-D0tWWV-M.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-D0tWWV-M.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-12757\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B69h0Bm0hkdhWYp2HkMglLTrm9%2B9Z4OkY2PVDfV24s9yOUZJTa8kb6lUQYQvkOOC%2BRPB7nhPzRk07g1we90lmpnAN1kjSaz1pqIX8g%3D%3D\"}]}\r\ncf-ray: 9bc040063cda2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75607,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d732d1b409840b260fb3546611e3b05d","sha1":"c266a8eaa8f67512f84eea6e46e17ebb1de0fb61","sha256":"7936138bdb33eb3b0444f217015faf0dfb433504371226c634af289578b782d8","sha512":"ba2e419b80d51d63167314ea276804e732a3b1a6af888b1a3707602f7f8a998bdc849251e395288658f80608a9465aa7bac2709f940de68a6894a8c7588aa49b","ssdeep":"1536:zCO/yrXfdOKD/yH5QeKIi5WlkiJxNFzgiHuoM+LadxT5K:zCOaxOKDa2IighzzgiHuoM+L01K","tlshash":"de736d8031b9a27047da90dab0b07302e224691cf85c843cf6bdcde7aa59e496737f75","first_seen":"2025-12-29T12:03:05.365956Z","last_seen":"2026-01-11T00:21:16.470636Z","times_seen":4,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/sha3-1766537880937-DVSzrknm.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/sha3-1766537880937-DVSzrknm.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/index-1766537880937-D0tWWV-M.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-27ea\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LVFzw2JQ2eBPfMnY9a6BDBehsmug9ojaE5SVnBTxVG4EGrK1%2BbFu%2FZsng7kz1NwhYWA2silCxfzkGmi0YILaTbDyE%2BLGj2yIgTcURA%3D%3D\"}]}\r\ncf-ray: 9bc040091d312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10218,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10217)","md5":"83b1b689d0c9364bd13e5ff43fba1c1f","sha1":"0fed4e0aaf332ad079b54ef4406ca0983ac34203","sha256":"0dec000be8e8018b5f7afbe02ab1fdb9e68c6df1f775f6c373f40d7aa4b29e6e","sha512":"e899543b212d62e33beeb008f60ff5237e4e3f0f0f4110c50f53650d76fe241ad1b7ba5f445e3a68648ae14711950b1dfa5ebbeaa8d9f1a1ca64dfaf51b530b2","ssdeep":"192:RCyXgWHWuZrR16ZPHrz6zj1ydi8LI9zMyZCLcbwENkCtUXCmOOlXJ3UoUFKD4SaH:MDWHWuZrR16ZPHrz6zj1ydi8LI9M7Lcf","tlshash":"f322888422c4a0a7a3d73de5447b401ad420bc30704a885cf75c4f6badea77d96f6e3a","first_seen":"2025-06-21T18:52:51.020723Z","last_seen":"2026-07-19T11:53:45.565274Z","times_seen":89,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/hooks.module-1766537880937-B3Nfv_UP.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/hooks.module-1766537880937-B3Nfv_UP.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/index-1766537880937-D0tWWV-M.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-3e5e\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0bAJa7oUOm2SUfQRbtvttfv7KED3oKq5FDfrUmlwKg2A3acPTTCWnef%2FsKDcFQkE7zcmK07ATJRVYT5X4ELocLvTOO3ygWnIkxgU0w%3D%3D\"}]}\r\ncf-ray: 9bc040091d322efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15965)","md5":"a1698e40b10ebfff2e1e13cd3dc8132b","sha1":"f5c0bb602b018cea790efa74ef21c02b0996bbf9","sha256":"ef797a7c794c8056a1d6846d367e7d9980c88b6a4a41562e132c3f95e620972e","sha512":"9d491098bbac625555b0b5b60b5f3f88111b8cff4d6b20acb415698ca9302ca33d40a1194fb234b87de3ce9dbb74c78f0156bb4f676416233c9cc0324d078d1c","ssdeep":"384:S2bbmL8jpNgbbxAmmPzRn4GJRlbh5qiJcVpoR4Ju:SH8jpNgLMRJ3h7GVpoR6u","tlshash":"8d62e8ec3078742053fa75b261bf5d0bb3761c1aec8d98a0a609e4ea3af044c5157fe9","first_seen":"2025-07-07T05:51:14.83681Z","last_seen":"2026-07-15T20:45:43.42817Z","times_seen":114,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20250620/202506206051.png","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20250620/202506206051.png HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 21459\r\nlast-modified: Fri, 20 Jun 2025 05:34:20 GMT\r\npriority: u=4,i=?0\r\netag: \"6854f2dc-53d3\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wu3Z9VSKeye5M6XB%2B5fuYHOmqL4nLKrOKZ6HbxKh7kow51UiIjBsHsY3WOqYPd%2F%2FzxNCkyImvz8At8UFFWc95hG54xNgMycwfFakIKqmD8%2BvskCTxC%2B%2BSHNPN6e1R1Vn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400fdb9e0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21459,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 180, 8-bit/color RGBA, non-interlaced","md5":"98e7ce2c460eb3ec50f714361b72c5bb","sha1":"d743999922fc7ce4e5faeab0f1247b0cb068f0c4","sha256":"8bb0c8548e1479b83a0e0c4934b43fab2d38917b5b8cf4fb5ec9caae3827e490","sha512":"e51e42f1703baa135ca28975b04ed521f4bb7ee5c981466c01739d9bced979e30aa7e86b2156f6ea6f35b265e6e2a4290febbb2e97a98a1a1815641ed979e5fd","ssdeep":"384:tpnMQapREoDFGMypHSzgsM3zGYzK/4tWXsq59JRE8E+QxYrQTMems:bhapEP3O/+ebE5x+QTMu","tlshash":"8ea2be00bc438b00a627dc485a4166fe94ff2bc5eb83aa68e6cc456f6d902e5d94d1c3","first_seen":"2024-08-19T15:28:20.959818Z","last_seen":"2026-06-28T23:50:55.462064Z","times_seen":66,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/function-call-1766537880937-D_4qpRIl.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/function-call-1766537880937-D_4qpRIl.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-4bb\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDNnD71aExdrI0x%2FL7NFPUEsz88UcRDAR70QsfB7Xm9k%2BmHhMXmeCpZyKWHyfIIaeu3RBpVxO8uEfwAZFNL0hKqBFHNxuHN7YphleQ%3D%3D\"}]}\r\ncf-ray: 9bc04008dd252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1210)","md5":"c30804eefc31281d53f14dbadd8df48a","sha1":"d43816e9b380cfda6f7b92f2daf6f89ad5835d29","sha256":"561dd32334eec78d8d2b1d1f2e8283e7d744ed92d099683a431aa11cab3302cf","sha512":"dd077f04e2491d210c66729cc61c361743b563c487d93884072036aa59bb6fbc88c0f92de70abadf5a989a51cc199e06b2f070b7841e9c7d4810aaad9633f7a8","ssdeep":"","tlshash":"a82114ecf4566f7ea05b81ecd6362d1068351a9cda3eebc4d17f352143814466a0ab78","first_seen":"2025-12-29T12:03:05.41824Z","last_seen":"2026-01-11T00:21:16.475913Z","times_seen":4,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"HEAD / HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"HEAD"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hp1KGX6NjL6oDAMX7zTC3jOSyXeo%2BlaAt8ml%2FNQaoznJML299vQFX4H%2FaqDPioImURXUJ8V1%2FJR8U80LfdklX9goiMdMq%2BW6uBXmUw%3D%3D\"}]}\r\ncf-ray: 9bc04009cd4a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":194,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20250620/2025062049475.png","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20250620/2025062049475.png HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 15068\r\nlast-modified: Fri, 20 Jun 2025 05:33:33 GMT\r\npriority: u=4,i=?0\r\netag: \"6854f2ad-3adc\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3PqgOJ7CgfGcvNEE9OOiG7bdMuf9hYzVfuf5n0f4X%2FmbP%2B6NFxMnvada1rCzm%2FKv16Qva8EpC6IKBHx%2Bfm6uPbb8SQdtVGRKxf8XNSz%2BAWL85Gsg8rrQFqgR5oxFZVWh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400fdb9d0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15068,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 180, 8-bit/color RGBA, non-interlaced","md5":"ac029eea88efe56ee5a76f099c4e36c9","sha1":"ad6037134ab298fc1f32623c2d7f03c4d6bd5b63","sha256":"56fce780dfbc08009874c68906bef95fd0607f6f9757a8c7d1fb3ee9e3669b7f","sha512":"c2e88112146a2e7484f60735bc29d472a63373e2df6b10b61ee7449ca48b54842b8eaca9545f0598f2168ee4bee53df2aa06d34cb4a77961ce7c0e870831464c","ssdeep":"384:tpnsV7jRcmGU1UCtN7kLn/rfqyloGKq8A0ie0DavOO:bGcm2Csr/lo7q2ik","tlshash":"2062c0ceadd1d8204911c68e1db52107947b9fd8c3f1f6da2dc684e394a06f2c2799c7","first_seen":"2024-08-19T15:28:20.955263Z","last_seen":"2026-06-28T23:50:55.41946Z","times_seen":66,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getPledgeDesc","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"OPTIONS /api/0ptP1e/getPledgeDesc HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:47 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-max-age: 0\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ojm8WJAhdt100cbXwYOo408zDW0j92XnLhiF7Jii52Y9ebH6iFMjM1hYBRtSGo7W6W%2BSLSb%2BnpB1zeiCJDa8evhlHxvFh79HnJAqcUTAR6ssm4cpGl%2BV%2BpMM8gcwT4lMFtU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc04010297db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":340,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getProjectId","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/getProjectId HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 11 Jan 2026 00:20:44 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXKBzeTYDy8DEyAYMEtEfcfCYEk5w6zW7xZZGlJ4U2T82B9A24FSicHqHoEoUsuIYUD%2BPdwgwlnzdX5mI6IgQj1oOCTVgAbWRFw0kq4zBZVwxAxP4dnTqwQRmZymOvMA\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9bc040006a81b4ed-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"328a23886241c4a0fd0429ec013387e4","sha1":"7b772e308d73a6ff33f5fe1d41da3722a1fc0cec","sha256":"d6d001ca61d60df306f7568dc8008b16899333e77a186ad23ed3933125c38aeb","sha512":"87b2f07e4cfe18f26afd76e229924cac21c7b70c9c7f2f33c980fa500a8ed211e7f0773782005c46dd313e44251a599f15dbc20fa69037ca8aac03c6d641492c","ssdeep":"","tlshash":"83b09246a56aecb3a4c6829a95680a40a8a554004699c5358eb85812630dc6f96029a2","first_seen":"2025-09-14T19:08:52.667824Z","last_seen":"2026-06-28T23:50:55.411938Z","times_seen":15,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":579,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/HomeView-1766537880937-TVqPlyRD.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-c1d6\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wFnUIeRoXrdpiv2u3zChW%2B9E8El7j0bfRt%2Bfk5lNI2cpD82hLM%2FjaJdORX6POxBprHJpboOL29qB6x2ObVaBftvgB487pyW1BXb%2F8w%3D%3D\"}]}\r\ncf-ray: 9bc040052cb12efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45500)","md5":"356a45730c4c09b6246667ce62147f5f","sha1":"5efcf6fa0686a03d17f96c9ed893bfaa250eac70","sha256":"12d5fd420d065b46cc6d533bde7e4567d1186da15670f59de49ce86775f5a874","sha512":"5eea4cc406a7f0907eaa90640268f44a96a79e926ad65073b04bd9d785a3a8cc9349bbf30785a15ecdc78c81cd6fa7f86decd82cef9097ebdf0d48df4229e8e7","ssdeep":"768:qghDaJsTzp7GDcap2Eib63FOycAeGxoFE/ZjN9Kek9xKUtEzDMUBduYFh1SrWYdH:qghIEm3lf9JixABdMGpG","tlshash":"55234b08f926893ed2f741d4641e6800a5282fdbe23448f5ba7e5c7b17d5c38376ab36","first_seen":"2025-12-29T12:03:05.387573Z","last_seen":"2026-01-11T00:21:16.478169Z","times_seen":4,"resource_available":true,"data":null}},"time_used":558,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getPledgeMoneyDesc","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/getPledgeMoneyDesc HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: polbot66.top\r\nContent-Length: 64\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"data\":{\"wallet_address\":\"\",\"coin_name\":\"BSC\",\"language\":\"en\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2B5IgmBuGYmi%2BfjwSM%2FjUHmG4sKLIeyT4fX4Vd6R4eavCZFwhNLDnSjSoJxcwIzCTT%2Fn4XZZY3PvxDyowN25ayXa1y0PFx32KHSUXVMhZd%2BMrlhGDGM4C6DYo4p7jvob5tI%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc040073880b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"12395ccfc1bf39e7ef2f87cbd50917e3","sha1":"31ff380c2ae50a4f071ff0737e793ae4cb3757d4","sha256":"820de68d8366cbebb600d48d5bef2771cb9d0f1307fcb10c3a1654b33104e29b","sha512":"29bed82c3850f6560ae76e052e52152824e99b03ea20af3cb22d55e95f601d086aba8c333ec9199e8b98d9e3c3911dfb4029f638f2f4e513b1c6c5904a178353","ssdeep":"","tlshash":"d1900232175c4487c94580c41a0999540279324150c286c02ea8513654899919411421","first_seen":"2025-09-14T19:08:52.623282Z","last_seen":"2026-06-02T08:59:05.254211Z","times_seen":68,"resource_available":false,"data":null}},"time_used":387,"timings":{"blocked":-1,"dns":20,"connect":0,"send":0,"wait":367,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/earning-head-1766537880937-BFz696-N.png","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/earning-head-1766537880937-BFz696-N.png HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 7249\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\netag: \"694bab26-1c51\"\r\nexpires: Tue, 10 Feb 2026 00:20:46 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ih%2BVRi18lBQ1CbtcyfzmAQZWsjz%2BrBPXzIhhkhiEiApxkmMq%2FZsODqTGXyxWawKPw0NusBpoUF0%2BHk%2FwI6KUPT0RhgesZHweMCJQSA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400f8e892efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7249,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 114 x 114, 8-bit/color RGB, non-interlaced","md5":"f434ffed85e97b88f03d087fad1c46e9","sha1":"4c7cea105ca56ae5db34a3709517d9a1679b9fbe","sha256":"d98eafb69dbe649056e01b07e7b2df4655313fdbde406fa2781add09f93388e2","sha512":"3fad15e921fc38186e2b21a2e9d59bdd923411bc5b68f3cc72b42309041d0e84c005b2df5395082b22c7ef9ad961ef43ab84f2d5bdc042c7af701d67c9c66849","ssdeep":"192:s84fOfyE4YcNklCO4aVJt7LsXC+Ks0tdLNG8LF0:Z4fO6E4YcNE9r5d+K5vLc8x0","tlshash":"c5e1a05bf9d57b0bd9b72ca609b226a444861fc6438d062a1b53b54c533cb4da4d061f","first_seen":"2025-09-14T19:08:52.619926Z","last_seen":"2026-07-09T02:04:42.926043Z","times_seen":72,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":388,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20250620/202506204839.png","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20250620/202506204839.png HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 41320\r\nlast-modified: Fri, 20 Jun 2025 05:32:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6854f267-a168\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxYcC0MxT8WF1DjTfw%2B2NkadE5GfaZLlCYbBzZ%2FJH0pfr%2BnXW0plMGKA%2Fs8dK4PYsJqNL%2B9Pi%2F2NMBU7OyiN16gR%2FDbH3rFjx1V85kd%2BlD5N%2BoxEtIPPyYPA9X5zd9pv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400fdb9a0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 315, 8-bit/color RGBA, non-interlaced","md5":"a23ad6ca1ef843647ff432953d671cc8","sha1":"24b4e67a5ffff3c09b7f31e967575a1fba647ea4","sha256":"f88877853f6f0de72c1a26be992039cf9e1b1e7e71f5c39dbc15640afb323b98","sha512":"8a520a32490ba36353496cdb6139fa46836e03205bf70b2cefdc5fcf0f8bb65cb4233fe9014308f90dd2754c0a1c3533794f91ffeb23ec6ed19eac7076140b43","ssdeep":"768:BoaldO3eD7A4ZjjH0H0BROAiq+Z7nflDL6+PNqP48imbdFYxWWhjuDaeo+gocl2T:BdOuDtxjH0H+UA3SfJL6+k5bdcJ5kmK","tlshash":"6803d05f6d05a587d383bfabd65d2a4236abb83527b92fc84d1da4df14010ecbc2e481","first_seen":"2024-08-19T15:28:20.955837Z","last_seen":"2026-06-28T23:50:55.389828Z","times_seen":66,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getDomainCoin","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/getDomainCoin HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: polbot66.top\r\nContent-Length: 64\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"data\":{\"wallet_address\":\"\",\"coin_name\":\"BSC\",\"language\":\"en\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqB87RzKIM97nf7F3mxR03tfr0FVwVE3O3gUJqMRPSvSzStWNelRDFoJr5MU3jn7KpURAcdI3wtJJ1gxHrRgh%2F%2FUkCI1pu9HXyYNVUa1zCufnXcod3%2FAKzYAoEF%2FbM%2Fhh7I%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc04008689bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2aafbff45355dbc9b6e8d4ea8fe508b0","sha1":"826d44ed86bd1166827352158a92ef8d2053f1f1","sha256":"0409c54b42de6cc1be33e6843a7c8039920be4c980d500b45c9b210f743582eb","sha512":"e6491441fb2da13b81ac825cb38cf278ac5f6daec10eb6f62e279bd0c76a3d389b6cdf994b72fe7b3599f9ef0595c51a9af5c5bcb8dec2c0f07c0deb79d23866","ssdeep":"","tlshash":"b4900244666e55a2a41301845908060140a832511a45c6105d7c5122560d07a9000630","first_seen":"2025-09-18T16:19:02.514263Z","last_seen":"2026-06-02T08:59:05.262248Z","times_seen":67,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":382,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getGasMoneyDesc","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"OPTIONS /api/0ptP1e/getGasMoneyDesc HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: authorization,content-type\r\nReferer: https://polbot66.top/\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=4,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\naccess-control-allow-origin: *\r\nvary: Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST\r\naccess-control-allow-headers: authorization,content-type\r\naccess-control-max-age: 0\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M7RcDKFnOTiM0nprb8%2F9vEH0JFlpWfQWh0IxPAE%2F8CWoY93noQS7%2FRK8vjvjK6WLa%2B24rnbE9son72w5w5CccuF2%2FvLlze%2BRaPnDdgh0u0NzscrYQ%2BGXW9TZ3o%2FNxU7yYqg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0400998cdb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T17:42:21.256573Z","times_seen":17532132,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/dayjs.min-1766537880937-CYRVggtZ.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/dayjs.min-1766537880937-CYRVggtZ.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-1bf4\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vGVWJbTJvNgw6a4yNhfzl158ifCOguYEUQKooTsEGan5KLKT4jjGEgQxu40Fk2v1LF6VudR8YLn9RecV1QV1N78X5EtsY5AhigTvCg%3D%3D\"}]}\r\ncf-ray: 9bc040052cb62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7155)","md5":"f3efa8af1c06c214b295c60afdf492cb","sha1":"e390130443966cd65ff11aa9b0ee15260c244bda","sha256":"1c7627144548c931fd4f1fb46591d66e9a1720b0207e79582ecaa75e0620ad69","sha512":"8473b7b87d1eb68aae70ec3651d4bb9284f8e23f4197ec3965af5b1f15fb7461b364d93384149547cf379f3bd1a24cca5edbf00d2858cbe09726d4551e94d79a","ssdeep":"192:mzlr0ZxBZNFp/URt3lknlUmktp5nzZVcfQ3l4:mzlrivZNFp/Gt3+l4tfzZSu4","tlshash":"d4e10ec9f1c7f1498393f568452f4006f66f4996685f896cf42ac5c3bc2484dc17bba8","first_seen":"2025-12-29T12:03:05.398296Z","last_seen":"2026-01-11T00:21:16.458863Z","times_seen":4,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/pdd-1766537880937-T_3oHWQ8.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/pdd-1766537880937-T_3oHWQ8.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"694bab26-18a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bn7cUdC6xCduwt%2BHOLA1tUlXMMxuAmM6QZO77%2FXCcNDFURGOq3%2FwmTzX1kZgjlt6QGaxKe7dXx8eaoM1LO%2FWecgZIBssisb7qEYPrw%3D%3D\"}]}\r\ncf-ray: 9bc040053cbb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":394,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (393)","md5":"8d90178259f212f754deed999e593222","sha1":"baaffebcb071bece883d0e107d7033537031b365","sha256":"ec034ff28dae75b49a24bacf43ceab825257decf54fe5e99dd502a62a5f9d4fe","sha512":"eb9f249b93faa561b0489f7b7fb30cb3802cf916c9fc0e9a7966a5d405750917c262b5e519455a15ea4e9d8f145b0b19e57eea7e64f7fc9bde5ecb05ca334510","ssdeep":"","tlshash":"e1e012b91246d8a2411b24b115678f3702d662fa9b20f5e92f3df94b2b2f360944998f","first_seen":"2025-12-29T12:03:05.389738Z","last_seen":"2026-01-11T00:21:16.462252Z","times_seen":4,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getGasMoneyDesc","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/getGasMoneyDesc HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: polbot66.top\r\nContent-Length: 64\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"data\":{\"wallet_address\":\"\",\"coin_name\":\"BSC\",\"language\":\"en\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SodseVe%2FGmEa9PCIsoAQTxEfqWCCqbvBIhpIyTpd0hHTJiU8idCYIBtXRLfGYqMZ1C7c436KihIXqz4meZUWk14oTtpJlbZXKpLUkVpKn1i%2BiufRzDmAFtsGl%2FUA%2BmQh8s0%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0400b98f9b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"12395ccfc1bf39e7ef2f87cbd50917e3","sha1":"31ff380c2ae50a4f071ff0737e793ae4cb3757d4","sha256":"820de68d8366cbebb600d48d5bef2771cb9d0f1307fcb10c3a1654b33104e29b","sha512":"29bed82c3850f6560ae76e052e52152824e99b03ea20af3cb22d55e95f601d086aba8c333ec9199e8b98d9e3c3911dfb4029f638f2f4e513b1c6c5904a178353","ssdeep":"","tlshash":"d1900232175c4487c94580c41a0999540279324150c286c02ea8513654899919411421","first_seen":"2025-09-14T19:08:52.623282Z","last_seen":"2026-06-02T08:59:05.254211Z","times_seen":68,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/upload/20250620/2025062094052.png","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:46.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"GET /upload/20250620/2025062094052.png HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 7005\r\nlast-modified: Fri, 20 Jun 2025 05:32:47 GMT\r\npriority: u=4,i=?0\r\netag: \"6854f27f-1b5d\"\r\nexpires: Tue, 10 Feb 2026 00:20:13 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\naccept-ranges: bytes\r\nage: 32\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vz449HlDgUQCJJ%2Fir%2BjHOp01LK6Ut7vklOB2%2FbAUkMuY0crraaD97fwS9wjhER4Jx5LaeJUcpAZRiI9PlowFk7d3AKWrz66nvbWtKKxB9wfOrC1TCgM%2FU4GykDeyPypB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc0400fdb9b0b06-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 180, 8-bit/color RGBA, non-interlaced","md5":"aad2a21031ffa35be64f570924affe37","sha1":"ff22992b9e0018a0b8fef2248d26ae47b8321b47","sha256":"eb30f5c4863be29728eb1fc435e72e0e896424065cad88b9317467dfa038fe69","sha512":"4c2337e2ded7e84343c844030cc872464989998ec1c14d2e6e75d8b6295e819ea84a6e7990f5f46ad96c4929e58708601d48960aa3a9d64a3c92b44832880b6e","ssdeep":"192:SSaknr1oDHGhoRcN9yLHeAzhs1x2CtTO5PBKc/uVXrc4:tpnheGScN9yreAVQ2CtT+P80uVL","tlshash":"5ce14d04fcb5f984f305995025f7d1226aab4f665b817657b8cde8f45840072c57e3e3","first_seen":"2024-08-19T15:28:20.952543Z","last_seen":"2026-06-28T23:50:55.420079Z","times_seen":66,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-MA5Ray2J.css","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-MA5Ray2J.css HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-631\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IBHQUOq4iHzQVaVMBP%2FLDAhiVfr99x0lNULBumfv9QDTXhmnywmgFKbrccZ4hX9Jfqjz0mHbQtbprVAiqlWxgmI5oI%2FKIRSdNDwjcw%3D%3D\"}]}\r\ncf-ray: 9bc040050caf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1585,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1584)","md5":"24fced3240a4417a3babebe1a9fffd64","sha1":"c65f7c976f23ffa1a6d4f2658a7d9eff01c3c142","sha256":"fb59aa54b1f312174dbf3ef70917231067fcdf0381c343f888a7623d816162fc","sha512":"eaadd428e0489dba05a21d42c4e0e0171715b39a107b1e7f8d387be83a7dcaaa8d4aa728fdd9f34024454616ff7e16dd654a2ccd0e298e73d40f2a2d07302ded","ssdeep":"","tlshash":"3d310535fc905977ed227124b7e165c8a03cf1b17ea0899ab12d3918cbaf6f4071b20b","first_seen":"2025-05-03T15:25:53.057632Z","last_seen":"2026-07-15T10:26:16.180218Z","times_seen":130,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/service-1766537880937-CCNncb86.jpg","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/service-1766537880937-CCNncb86.jpg HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10502\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\netag: \"694bab26-2906\"\r\nexpires: Tue, 10 Feb 2026 00:20:45 GMT\r\ncache-control: max-age=2592000\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1n20vvGEPh3QADmAgcABUS1ckV3qD9OCbkQiWJkuLZW1leF7gKJBoQeXotfqH3px1CWoofFuSNlIQLKmj4OyqUwYkGCce3Bmu4jfCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9bc04004dca92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 225x224, components 3","md5":"b5186f7f7d2028d0e2fd41d3d300c75f","sha1":"0c52fc6697e8568dd8f2beb33695f781786f1cde","sha256":"bcc9783fc0a5b33cd05909cb1b729fe5266e455a9940943c882c1bb0ddc6cacd","sha512":"865305f892930cf3994750846922b2c44427ac316cd856cb9bb9b38b9c826ec9c168cad41af564e7388f05a0977f8076b4148efc6a377b66d212e58362566995","ssdeep":"192:dEtXYU8mMzm53hpFZ26dqOzrus5N03NMl8Q7/ly1x7KHA:dExP9h9dFTPtzy1xv","tlshash":"b522cf2e4748f46fe93df83ac459e6503a0038521ff465a56308c88307ab2b4e940e92","first_seen":"2023-05-01T23:49:23Z","last_seen":"2026-07-09T02:04:42.904983Z","times_seen":109,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/bignumber-1766537880937-DOH-f-tm.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/bignumber-1766537880937-DOH-f-tm.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-48b5\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JU41b%2FWUQYO4O3sDHCmyRs9QY%2BAlyyBWhkoRQvzJRugl1B9dcKcYAX89uiNby9afvjjoOuHUj2qW8Vll9vWV8tVEhdFEljj5oXhDg%3D%3D\"}]}\r\ncf-ray: 9bc040052cb52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18613,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18610)","md5":"c262f432e629a4d833314ccefdb40038","sha1":"c19d5bc607f5fd2d22de0e4b87021d8140b4af91","sha256":"200b81c2f39ba01c3f0b83838ef0cd4db9d1047e4cfa0d9eeaec28b96c185b81","sha512":"5bc3f02ccc9c96f85bdbddafe5e5d06a60d61a527ea66f046c5928b53056eaadc52bf4e5f3c58fe89c8fff8d5512f828eaea5c022f1ad691d4c566ecd62f698a","ssdeep":"384:7rPbXM1rzET1v30jIIzSlyD+CtKIlEmVemwibM/5RYwG2u5:TFuIIzUypAQYmwibM/5RbG2u5","tlshash":"c88209dc70aaf05a42fe389000eb9443e139bf56588c1966f24161a1b836dc7e2bff75","first_seen":"2024-07-18T01:10:46Z","last_seen":"2026-07-20T20:04:20.698023Z","times_seen":96,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":391,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/mount-component-1766537880937-Bn12xgOq.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/mount-component-1766537880937-Bn12xgOq.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"694bab26-1bb\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wrQA3iAM7O%2BVLBArn01jTrE5dJCHrwrree4EkOkD0iOPhe2o51o88Y013GbWfqkHKtCLQVDKNZXDPavr3RJSeBNu1k8Us48S7txPkA%3D%3D\"}]}\r\ncf-ray: 9bc040052cb82efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":443,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (442)","md5":"5d24c703aada588d6f8b1b6b4e9e3855","sha1":"37d7f6bc593d2a66c90f74d250f0b05941a28dc6","sha256":"fe1ee0bd0649b865df68e0440a287a076544623fc6d9e3cb3b1b02bff4386a4e","sha512":"0757479620c4faac57b35da1a82f5748d4aa8d006caa3aa7723261903d6408b8ce851ee29f1027a32391b3c1eb1cf4eff5e175d90e84c6da40b4ec86be9cc7f1","ssdeep":"","tlshash":"b9f05c5ca7104374815541f861b58f7cbab2191c785f5941f1dc58687af2842879ffb8","first_seen":"2025-12-29T12:03:05.360014Z","last_seen":"2026-01-11T00:21:16.448737Z","times_seen":4,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-CNHF6DvV.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-CNHF6DvV.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"694bab26-7a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r2FIfL8UQBjCtY4h9f%2B%2Fwey%2Bbg8nwZT8DIGHBiATj72bBffZZ7jjeX14kThbdvSK9KTQroOujhN%2FLZzfPTk5vubTo3jQjkMsHPXJkA%3D%3D\"}]}\r\ncf-ray: 9bc040052cb92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"c26732a373b66e765799e0ca940aef8c","sha1":"82fd11e9c74389b431270c1e64d2683740f2e784","sha256":"8ad80f6613721f85674241a13300a598da1ff23024c7bd39465b5c2634267bea","sha512":"e5eb96dd4678369a67f194e6d8be8d17f7a208b3539db875e106bda20f5df5280c380bcaae1bd20147f5017037195f8e7ecdcac8181da0f663f06c4401ca2082","ssdeep":"","tlshash":"8cb0228ff0822ef002230ebac80300ac2a3000b82b830280820c02200bfb0aa800fe0a","first_seen":"2025-12-29T12:03:05.356444Z","last_seen":"2026-01-11T00:21:16.48401Z","times_seen":4,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/hooks.module-1766537880937-B3Nfv_UP.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/hooks.module-1766537880937-B3Nfv_UP.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-3e5e\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZ%2FTBkqSHejB0N40EbNFmkrvkII9W6AUm9bAg28R%2F25kc498VfXdhFK8YXJpSHwnr%2FcRnGBrmf7eKPyBlG45rU3cD7BCZAf9a2nHdQ%3D%3D\"}]}\r\ncf-ray: 9bc040064cde2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15966,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15965)","md5":"a1698e40b10ebfff2e1e13cd3dc8132b","sha1":"f5c0bb602b018cea790efa74ef21c02b0996bbf9","sha256":"ef797a7c794c8056a1d6846d367e7d9980c88b6a4a41562e132c3f95e620972e","sha512":"9d491098bbac625555b0b5b60b5f3f88111b8cff4d6b20acb415698ca9302ca33d40a1194fb234b87de3ce9dbb74c78f0156bb4f676416233c9cc0324d078d1c","ssdeep":"384:S2bbmL8jpNgbbxAmmPzRn4GJRlbh5qiJcVpoR4Ju:SH8jpNgLMRJ3h7GVpoR6u","tlshash":"8d62e8ec3078742053fa75b261bf5d0bb3761c1aec8d98a0a609e4ea3af044c5157fe9","first_seen":"2025-07-07T05:51:14.83681Z","last_seen":"2026-07-15T20:45:43.42817Z","times_seen":114,"resource_available":true,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/function-call-1766537880937-D_4qpRIl.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/function-call-1766537880937-D_4qpRIl.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-4bb\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qhNFXqPuWGo60N5hK3VIyfgKxbWJ%2FA4QTqpB25Op60jCaUx70%2FgzC2H51UdtBaEsxJK80uo%2FfZjmtlOu7JdTRahyg%2B2gkjkm0CHf5Q%3D%3D\"}]}\r\ncf-ray: 9bc040052cba2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1211,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1210)","md5":"c30804eefc31281d53f14dbadd8df48a","sha1":"d43816e9b380cfda6f7b92f2daf6f89ad5835d29","sha256":"561dd32334eec78d8d2b1d1f2e8283e7d744ed92d099683a431aa11cab3302cf","sha512":"dd077f04e2491d210c66729cc61c361743b563c487d93884072036aa59bb6fbc88c0f92de70abadf5a989a51cc199e06b2f070b7841e9c7d4810aaad9633f7a8","ssdeep":"","tlshash":"a82114ecf4566f7ea05b81ecd6362d1068351a9cda3eebc4d17f352143814466a0ab78","first_seen":"2025-12-29T12:03:05.41824Z","last_seen":"2026-01-11T00:21:16.475913Z","times_seen":4,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-Bi-K0ek2.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-Bi-K0ek2.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://polbot66.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-17728a\"\r\nexpires: Sun, 11 Jan 2026 12:20:42 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvuoqu3rG4AW%2FtD4O73v0UPwUSUoTTJfPGU45OtDTWqVGX9VBSGyrPMrqgjLFz7ZxKDFYJzM6QvIuRr5IWZctzIAV9t6Twpbu8B9sA%3D%3D\"}]}\r\ncf-ray: 9bc040063cdb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1536650,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41061)","md5":"bd4efcc05f008dc1bf7c9b06165657cb","sha1":"0f1243c944e37c620e3b6577f2aeea5a4be09b5e","sha256":"87dbbd3193442985c636d659ad9cb7540c6a7938cf72e3857272ed71b5d8175f","sha512":"c1d0e4d9ee1495dcabadf7a610a44edca7e0f5047f71149934cf6cbce330732554402c98d8d4ac64f9bf9ddd0a5be4b7d3ab7599612375769c330434dbc945d2","ssdeep":"24576:wo2cx2vv9A6splph7zJziqqilLXB5y9TP3s89M9XNg7OkMkhv:P2cx2v+6splph7zJziq9lLR5y5P3s89/","tlshash":"a6254c8072a1b43203e755d964771101f2385855700ec0acfaec9debbf9a88a967ff79","first_seen":"2025-12-29T12:03:05.396335Z","last_seen":"2026-01-11T00:21:16.484778Z","times_seen":4,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/favi.ico","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.310Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /favi.ico HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:44 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Wed, 14 May 2025 15:25:58 GMT\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6824b606-10be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ygdc8d8tiZzDouaN9m2yBmOu%2Fp1SOX7byU2cFCZSMTnsMC5HfaemGz%2FEZVE16W%2FqdPHQcPxEd%2FjZ9J83Ui8r3Wu%2Bpj4qclWfCMZ5Ng%3D%3D\"}]}\r\ncf-ray: 9bc04000fbfc2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"f76e7ecd00ba8b51cc030be992a5cdda","sha1":"b58a4f08cc1ed198b2bef989aa58b3dc0deec152","sha256":"b6fdd54475306f7bb13151502eeebbff636c3d5637960996c8b570ea93041089","sha512":"f33753b1b244d8e8bdf842ffd7be80ff3f9b3c40c4d84479acd76b390f3421c4dcf8bec0f9d63ecab1edda5c0ca230f5a7cfb8799ba0ab1548a9f8cd1c1b5856","ssdeep":"96:YwlWCMN8q0b9BksFE5aXIDvgdKzMVt0XXH:YgWCHTBc5aXOvGKzMn0H","tlshash":"ea9177f162ae31d6c82d0cb2444b6fc8c5fa8c9789145675eec23913793b5a0379ad63","first_seen":"2025-09-14T19:08:52.615307Z","last_seen":"2026-07-09T02:04:42.859142Z","times_seen":74,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":193,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getHomeNotice","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/getHomeNotice HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: polbot66.top\r\nContent-Length: 64\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"data\":{\"wallet_address\":\"\",\"coin_name\":\"BSC\",\"language\":\"en\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ve4b0NrVPk1lTaCE4ekAabZm4pFdTwdfgn0mLEYSG1GyRZorov8FoXuL%2FzAVXE2wVInXloW59lcr0alg1Ear%2BLSh6%2FJXTMzj2Qj3ldyt6kIB6TwCpU7w9DSZT%2B4UzTz16N4%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 57\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0400898a1b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"902b534c9944da15e289b431f1641367","sha1":"4949dd3f7b63b3cd0b7d946c585ee5db3cbcfb82","sha256":"39238b1b2a87d44277df228a9560bf9b6f0e2d3ceecdb3eb70f4c398ca6297d3","sha512":"dab19d7fb3f06b9257947766f89a1647cea9de1155faa627ea784beaf58af3d9626733bf06aaafd2af2bf978c3a290248e0dacb4b4cb542d6b4757ed4dc9bcf5","ssdeep":"","tlshash":"3c900002aa2e8ce3ac2220c82e0c0b8022f832800080cf00ce8ca228820a0b3b083a30","first_seen":"2023-10-23T01:55:05Z","last_seen":"2026-06-02T08:59:05.290539Z","times_seen":80,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-CNHF6DvV.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-CNHF6DvV.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: br\r\nage: 0\r\ncf-cache-status: HIT\r\netag: W/\"694bab26-7a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=emMInlOOHP4IsbGXmC1NjqgMkwufbmEiJEBuQ8QoCXO%2F%2BJGmYbHLUtyzEuwdGaJ7IhRRrRhBXhmf1Y%2B1%2BMEEG2ZsIaKk1tWSkA6JvA%3D%3D\"}]}\r\ncf-ray: 9bc04008cd242efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":122,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text","md5":"c26732a373b66e765799e0ca940aef8c","sha1":"82fd11e9c74389b431270c1e64d2683740f2e784","sha256":"8ad80f6613721f85674241a13300a598da1ff23024c7bd39465b5c2634267bea","sha512":"e5eb96dd4678369a67f194e6d8be8d17f7a208b3539db875e106bda20f5df5280c380bcaae1bd20147f5017037195f8e7ecdcac8181da0f663f06c4401ca2082","ssdeep":"","tlshash":"8cb0228ff0822ef002230ebac80300ac2a3000b82b830280820c02200bfb0aa800fe0a","first_seen":"2025-12-29T12:03:05.356444Z","last_seen":"2026-01-11T00:21:16.48401Z","times_seen":4,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arkcp.aibotvnrijinbaiyiyilufa.life/api/0ptP1e/getPledgeDesc","fqdn":"arkcp.aibotvnrijinbaiyiyilufa.life","domain":"aibotvnrijinbaiyiyilufa.life","tld":"life"},"ip":{"addr":"172.67.190.85","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:47.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aibotvnrijinbaiyiyilufa.life","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 14:37:51 GMT","end":"Thu, 12 Mar 2026 15:36:09 GMT"},"fingerprint":{"sha1":"EA:65:1D:81:C2:19:FF:46:27:40:45:72:CE:61:99:5E:DC:00:8C:79","sha256":"D5:FF:DE:02:91:A6:17:CE:DF:3F:5C:4C:01:AB:FE:4D:FD:A0:ED:5E:77:5F:47:20:A4:60:16:23:D9:29:E2:68"}}},"request":{"raw":"POST /api/0ptP1e/getPledgeDesc HTTP/1.1\r\nHost: arkcp.aibotvnrijinbaiyiyilufa.life\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nAuthorization: polbot66.top\r\nContent-Length: 64\r\nOrigin: https://polbot66.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":64,"data":"{\"data\":{\"wallet_address\":\"\",\"coin_name\":\"BSC\",\"language\":\"en\"}}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSKENOEdjbMaBY0MMVuy0YOGZAf1Nhujy8iXKGGM%2FO1HYZMJZhOFecxlIaUsJiknAj8Xofr9gRqrcuNTnqgvM2Y0vNagXlUJO09UX%2BGpdwitLOeURPB4jkZ9UAyXe9zaWEM%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: no-cache, private\r\ndate: Sun, 11 Jan 2026 00:20:47 GMT\r\naccess-control-allow-methods: HEAD, GET, POST, PUT, PATCH, DELETE\r\naccess-control-allow-headers: \r\naccess-control-allow-origin: *\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 54\r\nx-nginx-conf-id: arkcp.aibotvnrijinbaiyiyilufa.life.conf\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9bc0401249acb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"12395ccfc1bf39e7ef2f87cbd50917e3","sha1":"31ff380c2ae50a4f071ff0737e793ae4cb3757d4","sha256":"820de68d8366cbebb600d48d5bef2771cb9d0f1307fcb10c3a1654b33104e29b","sha512":"29bed82c3850f6560ae76e052e52152824e99b03ea20af3cb22d55e95f601d086aba8c333ec9199e8b98d9e3c3911dfb4029f638f2f4e513b1c6c5904a178353","ssdeep":"","tlshash":"d1900232175c4487c94580c41a0999540279324150c286c02ea8513654899919411421","first_seen":"2025-09-14T19:08:52.623282Z","last_seen":"2026-06-02T08:59:05.254211Z","times_seen":68,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"arkcp.aibotvnrijinbaiyiyilufa.life","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/index-1766537880937-BrMN9dhA.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:44.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/index-1766537880937-BrMN9dhA.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/index-1766537880937-Bi-K0ek2.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-2063\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vWKqDg6FVJUsUsZkFgAc%2Bnb4oKXl3wbIzO1PZ5kaZVHI9QH1vLvHs60fP%2B%2BV5M%2F2Ol%2BhGi6rDJ5ktcmD5tJuuCOMuSJdsBKfNY%2FfPw%3D%3D\"}]}\r\ncf-ray: 9bc040050cad2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8291,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7836)","md5":"ad63b31537f50c64b21810dbbfb35c56","sha1":"be09d8a33e8de499c71f49ba3f5240f0e82f4471","sha256":"3df050720c19336ab64b9f89db6976aba5f264f67f67afdf71f882d5f2d75816","sha512":"16599e6c8c13e90084885bda831aecf02d4d9354f4d0300f99fa2e05c7617107656f71e2ec9ab558750d2598595775ada1a4f1525da552c4f3a9b5e45d97e149","ssdeep":"192:MK14y6oPJNJHUpEjvMT7sFAn1TJAlJ6bagRkj6fEN4v7Uyy0iIGg8tfLlhnIN:/f5HQIETwFAPb1RobWDVX+tkN","tlshash":"4d0296f0729f49f052d5094c78225a04a02445ace91cd07dbf9c19fad9afa438e5ffe6","first_seen":"2025-12-29T12:03:05.408631Z","last_seen":"2026-01-11T00:21:16.487022Z","times_seen":4,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/HomeView-1766537880937-TVqPlyRD.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/index-1766537880937-Bi-K0ek2.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-c1d6\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNns2BlY6dAKRHd0YrcgbkM2XYObuPM5BwhHfdZqsDqj04AyGIorRgrg2IVVcQkRZKHTyIayZnyoE93MpAMFtn0TQiJpuDzfP%2BkoVw%3D%3D\"}]}\r\ncf-ray: 9bc040069ceb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49622,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45500)","md5":"356a45730c4c09b6246667ce62147f5f","sha1":"5efcf6fa0686a03d17f96c9ed893bfaa250eac70","sha256":"12d5fd420d065b46cc6d533bde7e4567d1186da15670f59de49ce86775f5a874","sha512":"5eea4cc406a7f0907eaa90640268f44a96a79e926ad65073b04bd9d785a3a8cc9349bbf30785a15ecdc78c81cd6fa7f86decd82cef9097ebdf0d48df4229e8e7","ssdeep":"768:qghDaJsTzp7GDcap2Eib63FOycAeGxoFE/ZjN9Kek9xKUtEzDMUBduYFh1SrWYdH:qghIEm3lf9JixABdMGpG","tlshash":"55234b08f926893ed2f741d4641e6800a5282fdbe23448f5ba7e5c7b17d5c38376ab36","first_seen":"2025-12-29T12:03:05.387573Z","last_seen":"2026-01-11T00:21:16.478169Z","times_seen":4,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":180,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"polbot66.top/assets/function-call-1766537880937-MjiqYbDf.js","fqdn":"polbot66.top","domain":"polbot66.top","tld":"top"},"ip":{"addr":"172.67.214.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://polbot66.top/","date":"2026-01-11T00:20:45.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"polbot66.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 22:14:52 GMT","end":"Sun, 29 Mar 2026 23:12:19 GMT"},"fingerprint":{"sha1":"70:1E:0A:8C:23:A6:E1:09:3E:2C:48:6D:C9:79:C1:5E:D7:89:B7:A0","sha256":"13:95:26:39:64:CC:89:32:BE:CE:77:94:25:84:08:AD:06:46:BF:B8:6D:7D:32:98:EE:F9:9B:1D:9E:CE:1B:86"}}},"request":{"raw":"GET /assets/function-call-1766537880937-MjiqYbDf.js HTTP/1.1\r\nHost: polbot66.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://polbot66.top/assets/HomeView-1766537880937-TVqPlyRD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 11 Jan 2026 00:20:45 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Dec 2025 08:58:14 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"694bab26-b35\"\r\nexpires: Sun, 11 Jan 2026 12:20:45 GMT\r\ncache-control: max-age=43200\r\nx-nginx-conf-id: www.aibot-vn.vip.conf\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LYLbwZgEtZ%2FvxnKBHE3w5Vxfk8rr7MMtN%2Fx6zuiOya5d9dj6vksz3T4YwhJdANUsAkUD6qws%2FgLZiRHHPc43JLJ3fp4Bs%2BblUfFG7g%3D%3D\"}]}\r\ncf-ray: 9bc04008cd232efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2869,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (2868)","md5":"011d2ec7ad0e7b2254251e800c31ce32","sha1":"c8d4daf8ed1a4351306ba03d1a058746a0c97c0d","sha256":"416ce613a6e4f3ce0572151cb8a949c323e2796fb40d67629d05938fba82583f","sha512":"749b00534246676c5e17247d1bd8406ed580943194dfe26f69a7f0e5e25f1a6490ac7edc5588dcf77fa8ca180d8459338844e17301b46acd9972e83923959155","ssdeep":"","tlshash":"7c51c9d9f04d973d918740e4907b68a0b7280f4eed3c01c1f2ad6607a3a06c753aafd8","first_seen":"2025-12-29T12:03:05.405844Z","last_seen":"2026-01-11T00:21:16.457956Z","times_seen":4,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2026-01-11","alert":"Sinkholed","trigger":"polbot66.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}