{"report_id":"a03dc792-1a50-4e4d-be72-7e8d74fb8e64","version":0,"status":"done","tags":[],"date":"2026-10-16T15:26:59Z","url":{"schema":"http","addr":"trumpcas.cc/","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"104.21.34.93","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"trumpcas.cc/auth/third-light","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"title":"Trumpcas: Create an Account","dom":{"size":16881,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11766)","md5":"f621d8a6bfe99f3edc09a1e54761dd4d","sha1":"30febb0d9f94781ffc6691a93578fca73eb954c2","sha256":"3c6c0619be83bc13ac8e693ff8f1a6a8998957308304e83357abf49691ff6391","sha512":"dfff0b101d6d3cc2f14fc8b34ba083282cd1e7212f676e284335f3006040b1774e41c8d6ec6cc446b065528a40b1447c6b45353ec4e1c8c79adb5fb0b3a8cecd","ssdeep":"384:wcTnGnBhpqC1u8wSxpeHuV0FbSjRK8J7sDpdT0:Vn41u8wS7eHhFbSjHJ7s9dT0","tlshash":"747219686103431ea06382e87ab1d71c535ee24bf513dc09b7cc61a92fc9dd9dca3ad9","dom_hash":"domhash2650c6e4cb9b6f34889019a1f3ff6b9e","first_seen":"2026-10-16T15:27:17.664227Z","last_seen":"2026-10-16T15:27:17.664227Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trumpcas.cc/","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"104.21.34.93","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-20T15:26:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"trumpcas.cc","ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":28,"received_data":1696069,"sent_data":15859,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"trumpcas.cc/assets/main-D-K2gyrN.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"02a1421b814552cf9c740c939097f203","sha1":"71e86c5d9901c561feac6140e7bd3bddd389b472","sha256":"4e8f0cbe3d42b8db2ee4a38f143a01496f5bab658621dfb0e58ab44a8f6b9255","sha512":"ba07a111a7bc24aa82f19f8a00a7f11112967e14310ac77c5027a31e5e4c05b5ad599e0c675dbb9f3c653fb9d71625d78e0597d73d501af1a110589c8dd12cd9","ssdeep":"12288:tAZX273I97+o91twkct69VKeOuuhZPB04XwJ3VQ7TCd6p3Pe6Z7mNpU7NCKo9VRi:WX2DG7h1tJct69VKeOuuhZPB04AJ3VQV","tlshash":"eef44ae87196b13647e306f5507f0106b2381961740d8890f26dedef3bb544aa2bbfad","size":752093,"data":"","first_seen":"2026-10-15T14:56:49.420694Z","last_seen":"2026-10-16T15:27:17.759412Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/route-joPllfQ_.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"86232d20a47ab77b5790a37aa6739932","sha1":"d447731add3cef68c9687350963dd15f0964804a","sha256":"0d8984d956f8fa40c5659c09e197cae6a4524dae2f9aba1be2466700062191a1","sha512":"7c70122fde2a953724ea5a9608e6f7402d24438a94d49cc7aaa7c5fcf914a7785dc1cd4243b63e3f50d5787402ff5bbbf6133a8a9e02e5bb5c01d46e7be3a42c","ssdeep":"384:gWnlMNVS2QLUmOw27GLPIRBlvLIaY5wKD6N6SlnpUxqUxboPhmhh:gglMNY2QyjBlvLIyKD6BhSqUxboPhmhh","tlshash":"f382f9e07291f2325f9204a2d839c164f0352d14301bd85cf1a96cab7967d8e7a77bfa","size":18345,"data":"","first_seen":"2026-10-15T14:56:49.406881Z","last_seen":"2026-10-16T15:27:17.760706Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/fpix.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43985de08c88d52fc0481e8022cbf130","sha1":"a6482492a7bc43ca9280e4fd032b17867333d17a","sha256":"b5485a734ca4ad4b548c66826c64f0e4056262dd5dfb2c4208d16d7e2008be7c","sha512":"d268bcfb6c6780a3cc9d035cb1bfa41ea6724ad74ffe7be67929645dcf4aa962c95dd9a42c6aa602c913d795a254a345b7e07bdbca2b7e148b8dd287e4768d81","ssdeep":"","tlshash":"70f09e191c46b0bd16ed607aa33bbd192217274474d1c4235acc81286ee0d255fb5ecd","size":481,"data":"","first_seen":"2026-01-31T21:08:57.336506Z","last_seen":"2026-10-16T15:27:17.716034Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/data-BF_1uSZo.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e739317f6937caae6e073257d1e43189","sha1":"87114b729b6279e93f252364ff7e58c748b5855b","sha256":"37aba2357587a24b24b4eff3d096de00647b292c7c3729dc3f2341f0cf732fe7","sha512":"fe41e9dbc38b8b992f36ea5af2eeac10f3d2888b9e85006fe1d8c4769a6fdc00584d0e34f64b926bfbe34c3ef110eb1bcfe94807b4e62d5cf95ffc943a12d680","ssdeep":"","tlshash":"06112301ccb224bce67245b410af0e3021cd5de9368d8440f1699ed977505a291d9f9d","size":919,"data":"","first_seen":"2026-10-15T14:56:49.38724Z","last_seen":"2026-10-16T15:27:17.703846Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/en-BnldJ70A.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"e7e54d64677a27ad0fe71e0fe2307217","sha1":"1ebe5bd5d9930cc44129e9210a43c4f03c261714","sha256":"4920557f80d31b6b8c0cef23e40a8542a3775adf0393b6f4d213f7326ab59295","sha512":"53d07274c5c8d9d216394526000bfe55e6b5f4f6ffdb73852077b57a1ba2865e05f31c79ce56cd823432e450a199ad3ef27a6a7ff7ec1e4c491d403ffe49161d","ssdeep":"1536:kCIrfRXrhJmaRalUjb+5FvhzSoiAbAvnPdXMT:qfRXFhalUjbmFvhSoic0tMT","tlshash":"d5331b0fcb0515a409d333513dca1b69bbfc014692e2c4695dde812d23f6d6ae63bbe8","size":50281,"data":"","first_seen":"2026-10-15T14:56:49.361207Z","last_seen":"2026-10-16T15:27:17.707886Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/second-BUiExJtl.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d1867a1890fca50cc0333e2dd3070147","sha1":"5a3d0bf6571dfd2bf78a2b69d74ac268b10a583b","sha256":"cfde546c24f8add47d5d4337848443fc8b9b3b36dd39c47bab8dd80b05588294","sha512":"1013655fa4db8c7ff1761bebbe9b512eb26d15d8d697df60161511826ab1a52908f32734a71048cfa61e28db551a2e94643bbc8540a07134a0de2a84af0c3199","ssdeep":"384:+8X+Aj0IXfoZjehqXevOe+TEmsmeaR1PZWOw6Ny2D8caCODIdSh0Pjq2D0BcFxjI:+8OAj0IXfoZjeWwONTEmXeGPQOw6fD8N","tlshash":"a2a28670a15072bde86334b5ac7dd65830099e44c62b4f9cf1a83c276eb549a7e83bc7","size":22122,"data":"","first_seen":"2026-10-15T14:56:49.422191Z","last_seen":"2026-10-16T15:27:17.681216Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/fourth-efL_M-Yz.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb27b481ef20d33b4b6e175fc4a37a2c","sha1":"f6cefc641ed291521b8de160e4570df3e30bf4c3","sha256":"47bfcacc426a3ff54718c3cd4dde9ffc941e23c9cf3d837780a033b3e9c6a173","sha512":"199ff09d4a3cde1cc2eea1e2053715591f974c845aab5be548ba27374f001d7ba40d11dc15655157b3707d04e8183a072de042a282dfc0e2ddf43cad23196ad4","ssdeep":"384:Uu5uKhgA/hNJCehT+yj9Itna7dn34ZdGX+omKqDdilluIJ285HiQQ/NdmksMFtiJ:f5uKhBJueR+yxItahn34Zd2+omKqDda5","tlshash":"24b29870a190b6edbd2234b5ac79c61834089d58da2b8e48f1ad7c2779744972ec3fc7","size":24332,"data":"","first_seen":"2026-10-16T15:27:17.709408Z","last_seen":"2026-10-16T15:27:17.709408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/op1.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","size":5906,"data":"","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-10-16T15:27:17.765389Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/emptyState-CO3IpeH9.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"442ded62ebe01fe6dfaa21621273344b","sha1":"63c0f90b1fb45162f86ec8d32941c9379cf5691a","sha256":"50dc45a9f15e7c050177ecc3dfde20f66df54a5aabe12a79aad2cf61687b4e88","sha512":"9e055643cb8971e9050bb32d808b6ba229dd7ecb007e75e0592155f1145b0dee75309a26629a8ff6baa4aeee1c367e21826e91e9bd514086c535c65a386d4155","ssdeep":"384:xCNbOr9ulxmY9E8IU4KErR3IWdv+PqHHfkbhEnZVXO4XFO+yX+H4:xCMr8lxtEy4KExd9HHfOhEnZNdO+RY","tlshash":"c68219d572117214abea4187a0be0604b1385a15a80f8c6cf1f9099fbe559c87bfff74","size":17660,"data":"","first_seen":"2026-10-15T14:56:49.364986Z","last_seen":"2026-10-16T15:27:17.67694Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/index-N2F1f-jA.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1bd8e8c7696bebde27707cf4837837e","sha1":"0693b5f85175abd8b91de4dcaaa563a06d17eef1","sha256":"3c8fe1fc5ed2850b3e95be409356737584a49ff215226890f2d34425feea56b4","sha512":"1dd1febbb14882aa5d60759ba1af38971834fd2d6d7e24cd4151eeefb46434d76c6ca28155b62edf3f90560278ac54d9d40421fe315a2ea026d46a999e6f043f","ssdeep":"","tlshash":"5331a686306571a5e34f18d6047ae504963a742d300f0ae42062dd5974b47ae67fbfbb","size":1826,"data":"","first_seen":"2026-10-15T14:56:49.414217Z","last_seen":"2026-10-16T15:27:17.708648Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/betsSectionSkeleton-TVcugmtd.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2abcc5b59515dc5c708239600aaaf4a7","sha1":"17fe3280a5775f916d5d2cf5114fb7d8ad55db2a","sha256":"1d3a6ac4fe4024123bfb2d63188631f64547eace1b98127942d8dcfb33141cbe","sha512":"74949c4ce666fd05a13265843f0d190a9a52b7ea8180fc39b26a99954ed3e841d17e44834203e793509ce3a9ccb45b6393245edb2e6599197f48791eb0fe05d4","ssdeep":"768:ezs3jbiWKEsMdRz/3x10q8FVccFDS1sn+tj2oaEzhvxi3XNTpmJLCqkglxCm4cSa:x3jbjKwBB23lnf8xadGHd","tlshash":"da13dab2a25873bcb98247740623a013a37e257f30cf51e4cb2d4964b98644de6779ef","size":45491,"data":"","first_seen":"2026-10-15T14:56:49.371192Z","last_seen":"2026-10-16T15:27:17.738709Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/index-CpjJew9_.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"429dc629a1ac2de9d84bb06b6833dbe3","sha1":"32918729079b9d7fb76390c2cbc735bbbe43f442","sha256":"6af1342c86f43c0878d57fa015a148d2c639ee35b4b6ca064539d8935643e942","sha512":"fcfb6cad3ce4561f6927dd471a42aca731cf3bed4c9992d3fbd7d54b970bd382d491e2fc615894b377054ceecc5fc65686e0cc442adab44584aebcdc83acdf8e","ssdeep":"384:yAHdv76O+Ty3hkV8ATWZvbd/bIjtsfI00GIU06cn2kU/miSXysPaoLDeyx9bb0mB:5cop/Tb7cn2H/7SZyo7pN0wdP","tlshash":"2b82641ed354a3bcee8687b0832264b1755e159f20f6d3789294856073d30ecd6be8ee","size":19252,"data":"","first_seen":"2026-10-15T14:56:49.359827Z","last_seen":"2026-10-16T15:27:17.687317Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"trumpcas.cc/assets/emptyState-CO3IpeH9.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.937Z","timestamp":1792164361937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/emptyState-CO3IpeH9.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"181d-/Qp2S3Ib1BxBgQireAam+REPgbc\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WVsT5qUOhpFlbKVtcVjpWYMwASSko3k5zpGGeqDI083OOU4nIaNAPpZVOHoqni1lvTgg9uVpXlPcmbmWEpqZNbzzLktvQm%2B7xcP9Lx7k%2BkE3AQLeBNrH0MSZRPMrzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e1b05120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6173\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17660,"size_decoded":6986,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10441)","md5":"442ded62ebe01fe6dfaa21621273344b","sha1":"63c0f90b1fb45162f86ec8d32941c9379cf5691a","sha256":"50dc45a9f15e7c050177ecc3dfde20f66df54a5aabe12a79aad2cf61687b4e88","sha512":"9e055643cb8971e9050bb32d808b6ba229dd7ecb007e75e0592155f1145b0dee75309a26629a8ff6baa4aeee1c367e21826e91e9bd514086c535c65a386d4155","ssdeep":"384:xCNbOr9ulxmY9E8IU4KErR3IWdv+PqHHfkbhEnZVXO4XFO+yX+H4:xCMr8lxtEy4KExd9HHfOhEnZNdO+RY","tlshash":"c68219d572117214abea4187a0be0604b1385a15a80f8c6cf1f9099fbe559c87bfff74","first_seen":"2026-10-15T14:56:49.364986Z","last_seen":"2026-10-16T15:27:17.67694Z","times_seen":6,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/second-BUiExJtl.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.941Z","timestamp":1792164361941,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/second-BUiExJtl.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"1a69-avz6Ybl5kg+XPT3GYLEGOpeaUns\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YoPUVAbrDuozkq2QLg69YEuteAQH6PZftu8qIAVxqLh%2F%2FuXT5SAnARJ5poypoGwXF7Xwk6LoYeNHBYHwrVwJ6w5psWXduNUodDBqFXO4ml2q4dvZ2k4u2m99m3n9Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e1b0c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22122,"size_decoded":7574,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22086)","md5":"d1867a1890fca50cc0333e2dd3070147","sha1":"5a3d0bf6571dfd2bf78a2b69d74ac268b10a583b","sha256":"cfde546c24f8add47d5d4337848443fc8b9b3b36dd39c47bab8dd80b05588294","sha512":"1013655fa4db8c7ff1761bebbe9b512eb26d15d8d697df60161511826ab1a52908f32734a71048cfa61e28db551a2e94643bbc8540a07134a0de2a84af0c3199","ssdeep":"384:+8X+Aj0IXfoZjehqXevOe+TEmsmeaR1PZWOw6Ny2D8caCODIdSh0Pjq2D0BcFxjI:+8OAj0IXfoZjeWwONTEmXeGPQOw6fD8N","tlshash":"a2a28670a15072bde86334b5ac7dd65830099e44c62b4f9cf1a83c276eb549a7e83bc7","first_seen":"2026-10-15T14:56:49.422191Z","last_seen":"2026-10-16T15:27:17.681216Z","times_seen":6,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/fonts/Inter/Inter-ExtraBold.woff2","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.294Z","timestamp":1792164362294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /fonts/Inter/Inter-ExtraBold.woff2 HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trumpcas.cc/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVmh9yzaAxD%2BAVpw7jJJnd7zTpKdekZ%2BS2r7nOqPlxMDJBoGxvJfGVkQnnHc7k0rM%2BkEZrlqDQzh82JMWgYiRqeup2HH%2BmNB1wXSwWmYpxEjjtNLqPz%2BGee8KBCSDg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b5e4-vBgkDpT/DuQeN6BAwPQO9EYUI4A\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a4b814605c58120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46564,"size_decoded":47446,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46564, version 1.0","md5":"e0fcdc9608e1e7e3665003081e85d6de","sha1":"bc18240e94ff0ee41e37a040c0f40ef446142380","sha256":"d88c097ccc2ab790c8ee7cbdec23544920ea7ac4b085db891655e57c2fb61562","sha512":"73e2a3cfdc7185acc2e53f0b00a75deeccd7c29d4550b2f8d08a308527007b8fee884836d35ad34a3eb6a4bc4d14b1ec1c248e78d1332de619f9a63a9cb8406b","ssdeep":"768:CIpZRc0V4TPXxiKqNraAHkVUIWNcuHBMoLMC/JcFPdCyGipEQwcqcNK4xZib:tprePXxJW5NcuHBMYMCajCyGipEQdK4g","tlshash":"8823f292ba22e268406bdb391db92becf5d1447e13c630fbc230159b9d667c3d6c2251","first_seen":"2026-10-05T00:26:04.52171Z","last_seen":"2026-10-16T15:27:17.683194Z","times_seen":24,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/fonts/Inter/Inter-SemiBold.woff2","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.748Z","timestamp":1792164362748,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /fonts/Inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trumpcas.cc/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JMQ58e2XHTeBMM2N%2BCYknj29fDvniacjQBCNMlslCNiqlebwciBGbhp7JA%2BWuX0jF3P56RyaNfNczBYj3dULmhcM%2FQlOQ0l5dfmQfy9PeLFCFzaFEVvtWK76nbkdsg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b508-+tc9Gwp9v2AT/9RUAlxm4PY6Yi4\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a4b814632e71120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46344,"size_decoded":47222,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46344, version 1.0","md5":"1d0c3d4298ec4f8eff3f6bd9d141e230","sha1":"fad73d1b0a7dbf6013ffd454025c66e0f63a622e","sha256":"e59f2e8cb477a2f9dec360aecfbc08e6936f85eb7671e412cee8b26f06e44fb8","sha512":"7bc7d19b4e29802bc37b8c92c1c495abbdbb1f1952e807e735d50603497c10e080dc1464845391d496bc6903032d302a23217d93318cb1d146a988b587edb302","ssdeep":"768:v5pFaPuKskUL+GlFJEjT9pBW6xUkrbDBJq+1+GV616cI/entCFwr0EIO6YXYEV:v5DsIn9lFujBpB3SkrJJ41se0Ejom","tlshash":"4d23021d24aec9044636272cefd34d9f9ea7c21611ee5a3ab4c4222c79e581df425c7a","first_seen":"2026-10-05T00:26:03.800619Z","last_seen":"2026-10-16T15:27:17.685182Z","times_seen":24,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":131,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/index-CpjJew9_.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.944Z","timestamp":1792164361944,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/index-CpjJew9_.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"17f8-V76N31RhaSzKsgEnYMAZ9dVHiXE\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ThW%2FSOCpBZqdvGp%2FkCduP9oagVjg5UnrRwk5D3zYcTEzPzTnBk60cAL8LAcVvJFeVTr9FG1%2FyEyVnOdQ%2F62ibCunSIy3ZcNikeeiV0ldwi2t8EDkwpVn0vKMQSSQXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e2b13120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6136\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19252,"size_decoded":6953,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19251)","md5":"429dc629a1ac2de9d84bb06b6833dbe3","sha1":"32918729079b9d7fb76390c2cbc735bbbe43f442","sha256":"6af1342c86f43c0878d57fa015a148d2c639ee35b4b6ca064539d8935643e942","sha512":"fcfb6cad3ce4561f6927dd471a42aca731cf3bed4c9992d3fbd7d54b970bd382d491e2fc615894b377054ceecc5fc65686e0cc442adab44584aebcdc83acdf8e","ssdeep":"384:yAHdv76O+Ty3hkV8ATWZvbd/bIjtsfI00GIU06cn2kU/miSXysPaoLDeyx9bb0mB:5cop/Tb7cn2H/7SZyo7pN0wdP","tlshash":"2b82641ed354a3bcee8687b0832264b1755e159f20f6d3789294856073d30ecd6be8ee","first_seen":"2026-10-15T14:56:49.359827Z","last_seen":"2026-10-16T15:27:17.687317Z","times_seen":6,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/api/f/fpix","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.310Z","timestamp":1792164362310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /api/f/fpix HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nsentry-trace: c12c9bba37124d0192b0197e267cf241-babbdc58be36401f-0\r\nbaggage: sentry-environment=production,sentry-release=18d4b51,sentry-public_key=e3092b65957eea25c8f7db5e687d10bc,sentry-trace_id=c12c9bba37124d0192b0197e267cf241,sentry-transaction=%2Fauth%2F_landingLayout%2Fthird-light,sentry-sampled=false,sentry-sample_rand=0.27115034055527,sentry-sample_rate=0.01\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBCFFmIo7BPZIjysuiWU5eC87dzVzxoD3vSm739IE1YpWK4q47Fbx7ne8hLHTMa9mMW%2Bzq0LWzczsVSpRo5Pmq4YcGivEowNTEHwG9urrSXJ7rtTbfPMdSdJ6Hqldg%3D%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b814606c69120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14,"size_decoded":818,"mime_type":"application/json","magic":"JSON text data","md5":"f3b003dc0013501f0575f9607c83769c","sha1":"967c27a14d63a0ed3815a00af30ea57777410dad","sha256":"f45b6c39dd4c66a87836d584b6fad8719033a74ad4500f3ec7954f91bd162f51","sha512":"258f118ae54671e553a5a5d1f5dac6e38fa816be1fbbe808e2f90d5ae411de01de8d689ffd03a3b25b910db2553f70881d65ebf4d49603b438ff7f986341f31c","ssdeep":"","tlshash":"ae6000300c3030330cc0f0c0cc0000c3c000003000c000000c003c000c300c0000c000","first_seen":"2026-04-17T17:16:03.621056Z","last_seen":"2026-10-16T15:27:17.690126Z","times_seen":24,"resource_available":true,"data":null}},"time_used":230,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/second-design/logo_blue.svg","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.512Z","timestamp":1792164362512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /second-design/logo_blue.svg HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\netag: \"21d-rz3zMMh7ZsOPYV3cMGMu2LEf05c\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:41 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4m2VTXwE4l1aS8H5zliBfg2vrjiaWIxIliA4t%2Fi1su7n0RhiOGDGLOs5SXwwxOD0b%2BgEwNXd33s6jRENEDV8SNh%2B6vDuD2IxI7CrdfypBo0BeIuxNBYFWEXKSUf2g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b81461ad42120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1555,"size_decoded":1463,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8ec1594d32ef1e01bf0b313ce332be7","sha1":"2c1ea45657f677e2ac9e42eae9bfada889c5e7f6","sha256":"e5ae7767688696f53f5c59a09b9ae6b95ea37818d8b93d9113b043b6e82af744","sha512":"32493bf8ecdd493023a1b4425bf3dc33be0c30e463aed25e97a8ee4daf656803b2bf122e58c271d03d8b9eafa938d8139ee912014dee4697151fffd5a9a54704","ssdeep":"","tlshash":"fe311f79f499d836d224d26ceb94d425919482d7c4c58129b0c9ff2f582d8c31f1e3f4","first_seen":"2026-09-27T08:31:09.224562Z","last_seen":"2026-10-16T15:27:17.695148Z","times_seen":28,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/landings/second/hero.avif","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.714Z","timestamp":1792164362714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /landings/second/hero.avif HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=3,i\r\netag: \"1f31d-lp+rNMxewLdTlzSKlvXaJhjTAjg\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:14 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 396\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kLBqxblMx1oxwJrE8j98zyV6cpi%2FOp6%2FH0UMNa4jnMln2GS6HtKJXk4nMtQlpM%2F33jGhPCOvnHuEB%2BFFbwYXYYq043Zztg9IPCeon7uRKorNJD%2FRokYngGJfuPDhbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b81462fe4b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127773,"size_decoded":128686,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5833dede4aa769204a067b0f54bd20c5","sha1":"969fab34cc5ec0b75397348a96f5da2618d30238","sha256":"a348354e25d1e8b9a3e568ad607429030986fbe41c67477607aabdff43e29a5d","sha512":"74dca2e4c0d6f5bc385e6c56f0c4b962f74f9ead996f2bdfe9c10bf2d536dd74425278b4183cd89d5c3bfda18e8248bea0709fae346749df0d6ca861be4a63c3","ssdeep":"3072:cUfUcfjoiM0CeFd6oOcDssSGY7TH5SnXNRO+bYhN9xcRf:cHY5+SnXTOH/Pch","tlshash":"17c3121c812c4cdc361aa1efec955131311cd250c60acbaf9bc7b7ae799bd298498fd1","first_seen":"2026-09-27T08:31:09.234478Z","last_seen":"2026-10-16T15:27:17.698828Z","times_seen":28,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/data-BF_1uSZo.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.041Z","timestamp":1792164362041,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/data-BF_1uSZo.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/assets/second-BUiExJtl.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5u7%2BSTDlOBALLxQGKLdfrN%2ByYy6zECvgN1RGIdfRM0Z%2FzO88sgfK6QhWVYHDb%2FMOKJcyiNI%2BGqv3AF27x%2F9DIrJAJ3id8n8n3CMzVpZdHbRQhhDLf2HsLjTRGcxO8w%3D%3D\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"397-hxFLcptieek/JSNk/35Yx0i1hVs\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:07 GMT\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145ebb65120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919,"size_decoded":1442,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (881)","md5":"e739317f6937caae6e073257d1e43189","sha1":"87114b729b6279e93f252364ff7e58c748b5855b","sha256":"37aba2357587a24b24b4eff3d096de00647b292c7c3729dc3f2341f0cf732fe7","sha512":"fe41e9dbc38b8b992f36ea5af2eeac10f3d2888b9e85006fe1d8c4769a6fdc00584d0e34f64b926bfbe34c3ef110eb1bcfe94807b4e62d5cf95ffc943a12d680","ssdeep":"","tlshash":"06112301ccb224bce67245b410af0e3021cd5de9368d8440f1699ed977505a291d9f9d","first_seen":"2026-10-15T14:56:49.38724Z","last_seen":"2026-10-16T15:27:17.703846Z","times_seen":6,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/en-BnldJ70A.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.312Z","timestamp":1792164362312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/en-BnldJ70A.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/assets/main-D-K2gyrN.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"3ba0-LETro9rYeboPd6JcCOKUAZ+SlTY\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RD99v6nmCRoZf66n%2FMNmbP94CQr2J8PYlWfEWxtin4ciyrtePyRRq%2FJK3pK%2F1T6yYkmSPwj7F8ByM6%2BGg6MBUZfDFRUI%2FPd595QaFFry110v%2Bvp4qPfID3wE9DTvzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b814606c6b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15264\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50283,"size_decoded":16086,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (12681)","md5":"e7e54d64677a27ad0fe71e0fe2307217","sha1":"1ebe5bd5d9930cc44129e9210a43c4f03c261714","sha256":"4920557f80d31b6b8c0cef23e40a8542a3775adf0393b6f4d213f7326ab59295","sha512":"53d07274c5c8d9d216394526000bfe55e6b5f4f6ffdb73852077b57a1ba2865e05f31c79ce56cd823432e450a199ad3ef27a6a7ff7ec1e4c491d403ffe49161d","ssdeep":"1536:kCIrfRXrhJmaRalUjb+5FvhzSoiAbAvnPdXMT:qfRXFhalUjbmFvhSoic0tMT","tlshash":"d5331b0fcb0515a409d333513dca1b69bbfc014692e2c4695dde812d23f6d6ae63bbe8","first_seen":"2026-10-15T14:56:49.361207Z","last_seen":"2026-10-16T15:27:17.707886Z","times_seen":6,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/index-N2F1f-jA.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.938Z","timestamp":1792164361938,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/index-N2F1f-jA.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"327-QrfKzh7M4Wc8HtXRKrY+9z0ncsU\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OWHvpF%2Bo1fbx2Tn2iMMMJ5ddOP%2FbaIIGfgaJ6bybbIeZS8PcIDhfFG416hNml4q%2FusD3wxnVEek0NTIIt2piFGMlh%2B1KAXW1IGYKkcOHmU2eT0aYcQpgsEeF4Gguvw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e1b06120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1826,"size_decoded":1622,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1825)","md5":"e1bd8e8c7696bebde27707cf4837837e","sha1":"0693b5f85175abd8b91de4dcaaa563a06d17eef1","sha256":"3c8fe1fc5ed2850b3e95be409356737584a49ff215226890f2d34425feea56b4","sha512":"1dd1febbb14882aa5d60759ba1af38971834fd2d6d7e24cd4151eeefb46434d76c6ca28155b62edf3f90560278ac54d9d40421fe315a2ea026d46a999e6f043f","ssdeep":"","tlshash":"5331a686306571a5e34f18d6047ae504963a742d300f0ae42062dd5974b47ae67fbfbb","first_seen":"2026-10-15T14:56:49.414217Z","last_seen":"2026-10-16T15:27:17.708648Z","times_seen":6,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/fourth-efL_M-Yz.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.940Z","timestamp":1792164361940,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/fourth-efL_M-Yz.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"1a8d-Te0F9sFJx3RI+qMxn4Lm/1AV+9c\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7FLuepQjfll6vnsDxnOiSN2I60EtPG50elbYs%2BOas1JBHimOVZMffgsYsooJZqVEcsA2rrnxqoUaTGrohmQwfidDByEP%2FcKqyPmr2E%2Bjz36ucquBdEeEw0lCqewhNQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e1b09120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6797\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24332,"size_decoded":7612,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24296)","md5":"bb27b481ef20d33b4b6e175fc4a37a2c","sha1":"f6cefc641ed291521b8de160e4570df3e30bf4c3","sha256":"47bfcacc426a3ff54718c3cd4dde9ffc941e23c9cf3d837780a033b3e9c6a173","sha512":"199ff09d4a3cde1cc2eea1e2053715591f974c845aab5be548ba27374f001d7ba40d11dc15655157b3707d04e8183a072de042a282dfc0e2ddf43cad23196ad4","ssdeep":"384:Uu5uKhgA/hNJCehT+yj9Itna7dn34ZdGX+omKqDdilluIJ285HiQQ/NdmksMFtiJ:f5uKhBJueR+yxItahn34Zd2+omKqDda5","tlshash":"24b29870a190b6edbd2234b5ac79c61834089d58da2b8e48f1ad7c2779744972ec3fc7","first_seen":"2026-10-16T15:27:17.709408Z","last_seen":"2026-10-16T15:27:17.709408Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/fpix.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.948Z","timestamp":1792164361948,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /fpix.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orRKMJA9uhvSdqaV%2Fk8lCJglskORdh1UaovllCg5pMESBOFTHKKg2Wz6pcTYUPFL3blivKeJCrsLWuHPcLNWyk1ZgLglutwindPbrasXa7JWLA3eSl%2BBvLacVHM8mQ%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"1e1-pkgkkqe8Q8qSgOT9AysXhnMz0Xo\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e2b18120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481,"size_decoded":1228,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"43985de08c88d52fc0481e8022cbf130","sha1":"a6482492a7bc43ca9280e4fd032b17867333d17a","sha256":"b5485a734ca4ad4b548c66826c64f0e4056262dd5dfb2c4208d16d7e2008be7c","sha512":"d268bcfb6c6780a3cc9d035cb1bfa41ea6724ad74ffe7be67929645dcf4aa962c95dd9a42c6aa602c913d795a254a345b7e07bdbca2b7e148b8dd287e4768d81","ssdeep":"","tlshash":"70f09e191c46b0bd16ed607aa33bbd192217274474d1c4235acc81286ee0d255fb5ecd","first_seen":"2026-01-31T21:08:57.336506Z","last_seen":"2026-10-16T15:27:17.716034Z","times_seen":125,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/fonts/Inter/Inter-Medium.woff2","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.753Z","timestamp":1792164362753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /fonts/Inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trumpcas.cc/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wWYKYXOXAAlEdQgZ%2Bz2baYvr1wLkcZE5wrTSUJkNpopObzOfMJq2XWbYGBPSv%2BcHJOfNdn%2B1hRvHEdhYgPGMk%2FJTcpPWRMcnFCCb4Zunm82I%2F4JjbOqN811OgMXdhA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b43c-32iwUiYmZJOjosXJ3ce7OQ+oXo8\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a4b814632e7b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46140,"size_decoded":47022,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46140, version 1.0","md5":"9b221a9a56703f15dfc37c59bc64144e","sha1":"df68b05226266493a3a2c5c9ddc7bb390fa85e8f","sha256":"76bc13bfdb34d0cc66055091629e8e4c0fbb8a180a5eb23e81f355233d17b229","sha512":"78c173076fe123b4aa587b854c9ef773870e6a9af3370c4d23abe77b5e3a1182e04c9211ff3bea8e15ef5d67a8a8848adb606d0faddd64069d1a844dd4f7c632","ssdeep":"768:jPYQnk2U1gXt1qUah1pKx6hrVhpKyrHB3yQqZu1+x+xTCZSzn7PzCLjq:PnkZCXsh1IWhpKKHpqMdCZWDGnq","tlshash":"5623f1cbc134e6948a3370330ca73e1cb56673e365d25e4ecf19e00950519aae699ecd","first_seen":"2026-10-05T00:25:58.941641Z","last_seen":"2026-10-16T15:27:17.729053Z","times_seen":24,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/auth","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T15:26:01.298Z","timestamp":1792164361298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NqH23RDIDJUsl8E8TmMLmuvVmuDupt%2BwPKX7T1hBQnvB9isNWz5UvzCrCbwSVFXkwGW9zBc8tw1vD%2BBYh7hCBIP1aK1qtdSQ%2B5N20QwG1gj7prio9eDlXKH9KdAXxA%3D%3D\"}]}\r\npriority: u=0,i\r\nlocation: /auth/third-light\r\nset-cookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; Max-Age=31536000; Path=/; SameSite=Lax\nlanding_choice=3; Max-Age=31536000; Path=/; HttpOnly; SameSite=Lax\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145a18b8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; Max-Age=31536000; Path=/; SameSite=Lax"},{"name":"landing_choice","value":"3","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"landing_choice=3; Max-Age=31536000; Path=/; HttpOnly; SameSite=Lax"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T18:26:25.445628Z","times_seen":19150143,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/api/rum","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.307Z","timestamp":1792164362307,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"POST /api/rum HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://trumpcas.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"POST","post_data":{"size":67,"data":"{\"metric\":\"FCP\",\"value\":1075,\"id\":\"v5-1792164362302-1187744999051\"}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZQDxdbndJGc95xAMTfwaBea3cHkLuXf57m2GT14TSQpF1T5mAfY6qhPSwv%2BkiqBZlfAcwOIsLrC2MJWbpCpR3FYzAwc361Lz08hc3iM2RvHbtMFQ%2Fy%2BwxJN64v1Qpg%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b814606c67120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1358,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T18:26:25.445628Z","times_seen":19150143,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/landings/second/hero.avif","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.706Z","timestamp":1792164362706,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /landings/second/hero.avif HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T18:26:25.445628Z","times_seen":19150143,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/auth/third-light","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T15:26:01.457Z","timestamp":1792164361457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /auth/third-light HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5z2r4Silz78rnZtDYPo9j0s%2BpEzi1Sm4sFf1vXI8iX429hzz%2FSu6ItdK%2FuF2RXVM31bvfDcpnv9MyB3SdKAAbyiVYlvSjAc1r3G2qWaVZxqevaGMth4FiaPC8FLomw%3D%3D\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a4b8145b1941120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9076,"size_decoded":4456,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2680)","md5":"45a92408de51777f10bbe24472b1d57c","sha1":"fad138bc1b96fa65e33ea5e58103b77b5da3792b","sha256":"f754086995d8a3138f3dafb060c81219f1182523835b081272e544b735d4b66f","sha512":"dd0b916216f2b669511dac66b685b248c8cb76fef789b56d48145dd29a5988c04374de868c961abc5fd2814117fae34a33bdd7f7e0ed30a649913a79704dcaa6","ssdeep":"192:EACT1W0uDmJs897Yuz4n4AscI6Pj8VCh9vaL4vudL7k1:ycTn4AsWr904ALg1","tlshash":"67123c725413c1196132f6a9ffa9960802a5508bd405cd3db6cea25ecfc8dcb4dbae74","first_seen":"2026-10-16T15:27:17.733075Z","last_seen":"2026-10-16T15:27:17.733075Z","times_seen":1,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/betsSectionSkeleton-TVcugmtd.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.942Z","timestamp":1792164361942,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/betsSectionSkeleton-TVcugmtd.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"3210-nj9LIFQ+uM2mU/ndCwfBtzWGti0\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gb69LgQfqLD%2Fodep9UCvsCP3N9RJbQbxNUeT6ED%2B32NQ59pRigmQ1W08G7mY3k5jxpLYmHDKoP%2FtXfr5EsNqB0TbDrqcrtCaNoONMPgF5oggflRNYXEAizehUga%2B%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e1b0f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45491,"size_decoded":13636,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (45488)","md5":"2abcc5b59515dc5c708239600aaaf4a7","sha1":"17fe3280a5775f916d5d2cf5114fb7d8ad55db2a","sha256":"1d3a6ac4fe4024123bfb2d63188631f64547eace1b98127942d8dcfb33141cbe","sha512":"74949c4ce666fd05a13265843f0d190a9a52b7ea8180fc39b26a99954ed3e841d17e44834203e793509ce3a9ccb45b6393245edb2e6599197f48791eb0fe05d4","ssdeep":"768:ezs3jbiWKEsMdRz/3x10q8FVccFDS1sn+tj2oaEzhvxi3XNTpmJLCqkglxCm4cSa:x3jbjKwBB23lnf8xadGHd","tlshash":"da13dab2a25873bcb98247740623a013a37e257f30cf51e4cb2d4964b98644de6779ef","first_seen":"2026-10-15T14:56:49.371192Z","last_seen":"2026-10-16T15:27:17.738709Z","times_seen":6,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/styles-CUSEJlKH.css","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.946Z","timestamp":1792164361946,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/styles-CUSEJlKH.css HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"8cf6-T9+Tm6qUxEGseHDmVuHInaKtMEo\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:42 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=izQt0mjVTmvc8K4P2JaA%2BD%2Fwvh%2FGgvhx2NRiYcnNntYd2FtqeNGb7LWrPRL4znYUEaDdRDe7UxYZ2qowZGjr%2FlhEf%2B7IepgplmkeKAFY5wzZ9zR9oXvoGP%2Bkw7AgOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e2b15120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384612,"size_decoded":36901,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"567eec84a23092bb7ffd493843682b90","sha1":"964b5feca732fe098ca26af1f13c3a8630b3f0e0","sha256":"1aa87143becffdcce87b653980bc0b80b7ab41ddd47fa0a90885f1f5cc4d631c","sha512":"7d005b2865722da953a23beabf5c616941d18856812fedc4eb915d54338d7b909cbd46d9aec245ed0b2026e074e4a619d96c42d200e9001259242db4c2bb2802","ssdeep":"6144:HcmDL+pazx68c/O3jchNU4hQlH6wDMgOKE0QCno1yKGI+MAxoK/KCYc97yReuYBo:BlK","tlshash":"3e84a490f119e0bb7d1bb4fda38cf89dd205f081de3a4ba9f951912123d3bf26962614","first_seen":"2026-10-06T02:08:22.87631Z","last_seen":"2026-10-16T15:27:17.740703Z","times_seen":22,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/api/rum","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.423Z","timestamp":1792164362423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"POST /api/rum HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://trumpcas.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"POST","post_data":{"size":67,"data":"{\"metric\":\"TTFB\",\"value\":604,\"id\":\"v5-1792164362302-2949866513664\"}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHJBYUP26WWT9QeyAGxWNtU09oD2rzgoTvdj%2Be2S73sp5hMqW3e7wXxUxsXrzfBS60yUFtK1FP1IQM7vsCIETtlJ61%2FD20q40dMEDjsbt7W4zCQDQJuI%2Bm%2F8w6hhgQ%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b814611ce9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1360,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T18:26:25.445628Z","times_seen":19150143,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/apple-touch-icon.png","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.510Z","timestamp":1792164362510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\netag: \"158e-E2xpKcekYMhDj6KT9vepXXpIXO8\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:11 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8JxTaOxd1x7XTP26Juq%2FtI20ykc9%2FglA3MQ3StDoIKZBJ6p1zMEhjOuc5qswSszRbsX8%2BDlAIoR6wvKomDh%2FP4RuxrOh%2B2uVkmP50HGUACC8aL%2BvIJxu0%2BSXPxKlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b81461ad40120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5518,"size_decoded":6424,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e412480e2b0a49f248aa87a6d248efc9","sha1":"136c6929c7a460c8438fa293f6f7a95d7a485cef","sha256":"16576dbbf6e56e33a6444cf780ac417641ef24f030e46d3fa2c15839ee331163","sha512":"aedd1821d9af2f2b1f079b212c437bd4a304ce731b0b01867d082190d86a8848ad905023cf73333a6d0ed4678b143b3f2f81191427f02459a27b632ef2759f76","ssdeep":"96:oIluHoXhT1GFWT6xh0Y8NCchKqV5mMPrUSk2xUpfAtjjKsRb9L34umvAfJy6peqi:uoGm6xqVjhoMPQt2xpPKC6Ide8/vo","tlshash":"94b16de1b933e5d88993cd3b838ae73c4e1fb23a174b30b99969555005315c49d7a3b4","first_seen":"2026-09-27T08:31:09.232244Z","last_seen":"2026-10-16T15:27:17.742267Z","times_seen":28,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/fonts/Inter/Inter-Regular.woff2","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.751Z","timestamp":1792164362751,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /fonts/Inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://trumpcas.cc/assets/styles-CUSEJlKH.css\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=myXsw4%2Bleqh31kN3hFPGZsl5RnueX7kgO%2FmUVfvEfn55wHkKXk5M1emob1VhhboE77ZjgzhMOKDoFFg2Jo4hGFChoBYYlp1J9RNG395n35RAlT2AqG82E9Tf%2BTxg5Q%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"b14c-o8AN3P0PJ4g5ujAw+uj7zyRQlus\"\r\nlast-modified: Mon, 12 Oct 2026 13:49:59 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncf-ray: a4b814632e77120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45388,"size_decoded":46266,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 45388, version 1.0","md5":"4dfa4c83f23fe6251cc925fb1d57d268","sha1":"a3c00ddcfd0f278839ba3030fae8fbcf245096eb","sha256":"e530f99e7f301f446c085173be6c462c2a3b6253cf3f4558dcffa9cffafa1e6a","sha512":"867d7aee0001e6abc0c7cb47543b7d63d7c55a7717349ac3bfb09a5d3bfe0b4a2d78f12a5e67559a07bcfe06eac19ed7d889323c182e875e6a1bb0bd6b9d0fd8","ssdeep":"768:+sipLI9Wcb8r6EaBOTvq5sfyTQb4uj3qW5/dGAUJl38BUZo5tt1QgiFM5D8iqmJQ:2pI9W88r6Ovq6fy8bfj3qW5ldtB15j1O","tlshash":"3813f135e5ecc3db1d67ad7f0dc27f7e74b139f252b7a2c216021c94918895226a282f","first_seen":"2026-10-05T00:26:02.109573Z","last_seen":"2026-10-16T15:27:17.755Z","times_seen":24,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/flags/US.webp","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:02.756Z","timestamp":1792164362756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /flags/US.webp HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\netag: \"6c0-HNyZyZ9nlimVryL8nIEflLctU6w\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:12 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bAYGIiR8tnfdr%2FQFCfB0AAatkDEHqzwGXvC%2F5DRNdajbllUZ6JSdT9IWDbl3%2Fuq7m5TvmSx0ZytlZAGK77dzzGRK4ott7KXMuq4vP25K%2Fd7oOhjwnk8pEvmPdbFmog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b814633e80120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":2625,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5b2ad4da5657d21695de35554777081","sha1":"1cdc99c99f67962995af22fc9c811f94b72d53ac","sha256":"e3a1cbe55c01edaea1f1715a1593ff2a0685067bc0c5d77aeca7f27fe3a630b4","sha512":"c69e0989ba173bf00495affc2ee10a77cd8a5dd8a05426985c0db982ce8cdc22f376449fd57f97966526fbd4ca0332be02decdf91a0f8e4436cace537a20e39d","ssdeep":"","tlshash":"653128758f3056cae7dc0d60343094e0a3efeddc8b280e293088fe0364f1626785aa60","first_seen":"2026-01-11T01:55:53.490895Z","last_seen":"2026-10-16T15:27:17.75767Z","times_seen":146,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-16T15:26:01.047Z","timestamp":1792164361047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTuz3lfGaxmwjHrX14zJre1EcXePA44wMwXar2qM59Jc7EbdHapC%2BZd21RGZF0SG2pWNULKXkQOhf%2BZQiXL%2FB0T3R2AKXVjMhM9bVitzZUqZuRBgAcovUiyYR8wBRg%3D%3D\"}]}\r\npriority: u=0,i\r\ncache-control: private, no-store\r\nlocation: /auth\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b81458efef120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-16T18:26:25.445628Z","times_seen":19150143,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":43,"connect":16,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/main-D-K2gyrN.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.931Z","timestamp":1792164361931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/main-D-K2gyrN.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"32deb-IoBDz0i2ZBjBmfooht+87Z5Ro2o\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:34 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8QqqR5F9lID%2BtbJP8d8g71kUfdT9rosAYPPU3VvTqoDIhEwXD0%2B5ae9qDJ2yHQ6lMRXp8HhYYi%2B7SP0oDyQ8be86TwA3c6MTVivUBz4xmEQjYYExtfRsFgn85AZBaA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e0af8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 208363\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752093,"size_decoded":209181,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40733)","md5":"02a1421b814552cf9c740c939097f203","sha1":"71e86c5d9901c561feac6140e7bd3bddd389b472","sha256":"4e8f0cbe3d42b8db2ee4a38f143a01496f5bab658621dfb0e58ab44a8f6b9255","sha512":"ba07a111a7bc24aa82f19f8a00a7f11112967e14310ac77c5027a31e5e4c05b5ad599e0c675dbb9f3c653fb9d71625d78e0597d73d501af1a110589c8dd12cd9","ssdeep":"12288:tAZX273I97+o91twkct69VKeOuuhZPB04XwJ3VQ7TCd6p3Pe6Z7mNpU7NCKo9VRi:WX2DG7h1tJct69VKeOuuhZPB04AJ3VQV","tlshash":"eef44ae87196b13647e306f5507f0106b2381961740d8890f26dedef3bb544aa2bbfad","first_seen":"2026-10-15T14:56:49.420694Z","last_seen":"2026-10-16T15:27:17.759412Z","times_seen":6,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/assets/route-joPllfQ_.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.935Z","timestamp":1792164361935,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /assets/route-joPllfQ_.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"186e-6m9UOUM816yQkQ4uKT7tIQS4www\"\r\nlast-modified: Mon, 12 Oct 2026 13:50:32 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jthAPNC6oKeqJ7oDoNeGvdrpaihrAj5VvapFKf0E3xI0XIgQ1E1PJj6L2kX0T%2F%2FPtxzHYLavlL%2B%2BdnRb8M5gW0sxuTOzUi8hXv%2B5hKrfcIQentHsFd3a0dC7amuogQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e1b01120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6254\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18345,"size_decoded":7073,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18344)","md5":"86232d20a47ab77b5790a37aa6739932","sha1":"d447731add3cef68c9687350963dd15f0964804a","sha256":"0d8984d956f8fa40c5659c09e197cae6a4524dae2f9aba1be2466700062191a1","sha512":"7c70122fde2a953724ea5a9608e6f7402d24438a94d49cc7aaa7c5fcf914a7785dc1cd4243b63e3f50d5787402ff5bbbf6133a8a9e02e5bb5c01d46e7be3a42c","ssdeep":"384:gWnlMNVS2QLUmOw27GLPIRBlvLIaY5wKD6N6SlnpUxqUxboPhmhh:gglMNY2QyjBlvLIyKD6BhSqUxboPhmhh","tlshash":"f382f9e07291f2325f9204a2d839c164f0352d14301bd85cf1a96cab7967d8e7a77bfa","first_seen":"2026-10-15T14:56:49.406881Z","last_seen":"2026-10-16T15:27:17.760706Z","times_seen":6,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trumpcas.cc/op1.js","fqdn":"trumpcas.cc","domain":"trumpcas.cc","tld":"cc"},"ip":{"addr":"172.67.202.156","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trumpcas.cc/auth/third-light","date":"2026-10-16T15:26:01.947Z","timestamp":1792164361947,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"trumpcas.cc","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 09 Oct 2026 18:19:20 GMT","end":"Thu, 07 Jan 2027 18:19:19 GMT"},"fingerprint":{"sha1":"93:B0:F9:0B:71:1F:89:BD:50:CE:06:55:B7:18:F8:58:91:9B:8F:DA","sha256":"B9:4A:F0:4D:84:74:CB:CF:AF:73:78:C1:E5:F9:6D:A4:E0:08:41:AB:97:A4:8A:1C:68:DB:72:60:F8:6D:85:F6"}}},"request":{"raw":"GET /op1.js HTTP/1.1\r\nHost: trumpcas.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://trumpcas.cc/auth/third-light\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-625ae8811c5a4f708d5a5574dfa0b6c5; landing_choice=3\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-625ae8811c5a4f708d5a5574dfa0b6c5"},{"name":"landing_choice","value":"3"}],"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 16 Oct 2026 15:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"7ef-4X5NhZNKJU2qAzl29j6Dsyi4/K4\"\r\nlast-modified: Sat, 03 Oct 2026 03:02:41 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UlvSfB31I5zz%2BDNyNy13i8UNhqdgfrfiJincIDq9jyOW1NSebpSaik4UlFVaWdwuocrUEcOp3jwjJtLU5hWcyoZ1HXZIZ6NM7Y8kfRbKqe8wvvSsuXgkw41OAgUDVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a4b8145e2b16120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2031\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":2967,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5905)","md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-10-16T15:27:17.765389Z","times_seen":315,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-16","alert":"Sinkholed","trigger":"trumpcas.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}