{"report_id":"a657032d-68f3-45fd-aa68-2721d1258bf2","version":6,"status":"done","tags":["phishing","tycoon","aitm"],"date":"2026-01-21T16:07:23Z","url":{"schema":"https","addr":"www.google.com/url?q=https%3A%2F%2Fmedicinamexico.com.mx%2Foluwaserereplublic%2F\u0026sa=D\u0026sntz=1\u0026usg=AOvVaw247yzJjvl_yQ0wCd0xTUQW#?1187507008Family=YWFyb24ucm9rc3RhZEByb2tzdGFkcG93ZXIuY29t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"board.deadaiyio.com.co/jpo8oybp9tds17g?50a88a20eb3d5-b214a4ec61f853f38aea49e49f3-af5937b0d22f7be23aff15a41-121d0fdd2b8a495fe077d0138/","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"title":"​","dom":{"size":1447,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1445), with no line terminators","md5":"2546812c04d84b0900ac24c8511f0e85","sha1":"7504780f477da490fa909e5d85e9828d980a92a0","sha256":"2b198309d555900293013dad3e99eceb1278ec5a5f573972d97e78d4d388edd6","sha512":"2cfb62844c8c9af1e9fea2a25459970c1878a4fb3084c0215d17203a893333bb4eb64e8c8173c73af81d5414d90a736839087fa803f1e00cd0e10a54d3d7dcda","ssdeep":"","tlshash":"573186537532853c2725ade265e7f14e4ab8ad31b324fcd0424db50449cf6b4c4af5e4","dom_hash":"domhashf846483b6bcc2ea0f726e462dae5869c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"www.google.com/url?q=https%3A%2F%2Fmedicinamexico.com.mx%2Foluwaserereplublic%2F\u0026sa=D\u0026sntz=1\u0026usg=AOvVaw247yzJjvl_yQ0wCd0xTUQW#?1187507008Family=YWFyb24ucm9rc3RhZEByb2tzdGFkcG93ZXIuY29t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.38.100","port":0,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-25T16:07:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-18T22:30:25.777558Z","alert_count":0,"request_count":1,"received_data":90293,"sent_data":447,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":1,"received_data":1379,"sent_data":662,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pizza.noujeajouhiyoo.qpon","ip":{"addr":"172.67.146.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":580,"sent_data":471,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"medicinamexico.com.mx","ip":{"addr":"45.239.19.250","port":443,"asn":265552,"as":"Baja Datacenter, SA de CV","country":"Mexico","country_code":"MX"},"domain_registered":"2010-11-09","domain_rank":0,"first_seen":"2026-01-21T15:33:06.562242Z","last_seen":"2026-01-21T15:33:06.562242Z","alert_count":0,"request_count":2,"received_data":1787,"sent_data":1011,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"board.deadaiyio.com.co","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-21T15:33:06.563634Z","last_seen":"2026-01-21T15:33:06.563634Z","alert_count":12,"request_count":12,"received_data":125303,"sent_data":15285,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"73bded517dd27b626e9c44ea3df0d58a","sha1":"37af5d2ab62f4da269096a1f66204cfe976d0b93","sha256":"4c3e035a37b400972f87bb557ea576da43891a5a6fd9beecd51ab029ad388788","sha512":"c89534b7ebfa04e67664c676893900778bbe527feefb94aa58744b10ff6f6dbcb06259b985f58e3ff45049a344d5ecbcbc54864537ee0556cfb8bbd995021334","ssdeep":"","tlshash":"4661204fb5160231e672727a9ba7a608fe3b4127628082687ebc42947ff62510252fdc","size":3452,"data":"","first_seen":"2026-01-21T16:07:28.097302Z","last_seen":"2026-01-21T16:07:28.097302Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"438d183326a1ab27bd4139fa82f655b7","sha1":"cd433a0d51b67fe7c240a14231e28c142ee68e66","sha256":"12c0fd6eccd9087860d3690b6128f3cee28395e170f11be7a20eb75729176b1b","sha512":"2b7001b54225505de73b75e0f613b81e8cda9f4b0ecc504b636e59c6c85f9f40adf9d39d51619a7dfa85c06dccfc62424e2248a3ddbba9abc67c9f6905603afb","ssdeep":"768:KLJNIJ4GcCuCPbwYVixYdT8vsIX0n2QYQXVaGBrpKTjqSaD04izqUuuNWCpPj:KVjGlzP88MXi2FQXQWrp6ePlrUuQVPj","tlshash":"0d13f23b3ba84d38579db67c8aa2741edd3f741134a1baf4200c68c6853ed4d906bbb5","size":42133,"data":"","first_seen":"2026-01-21T16:07:28.099172Z","last_seen":"2026-01-21T16:07:28.099172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b7124b810d5bd4268002963f17b6c84","sha1":"1e6cf3acc75d1a05cb157e189fa93669516eb9cc","sha256":"499115372708d03f7dd0c35a4109e68451b3a72b9022210df1aafa3a91ad8044","sha512":"4e7c91497aa053b0cd8b105e303187b2353ece1c30e816a6118f8820d9f99ebd139ae283ade6976ab210710e629223a6aeefa6a9151d636b60b41b8fdde584d8","ssdeep":"96:rYDmrcRVRfmVOiHpmVAVBjNLZBMDC47UiC471v:rYDmrcRVRfmVOiHpmVAHNLLMe47UV47l","tlshash":"9291fe8e727b08a331e330554d87b32871b696d35948c101368cf4572f346be59eaf9a","size":4449,"data":"","first_seen":"2026-01-21T16:07:28.101076Z","last_seen":"2026-01-21T16:07:28.101076Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/url?q=https%3A%2F%2Fmedicinamexico.com.mx%2Foluwaserereplublic%2F\u0026sa=D\u0026sntz=1\u0026usg=AOvVaw247yzJjvl_yQ0wCd0xTUQW#?1187507008Family=YWFyb24ucm9rc3RhZEByb2tzdGFkcG93ZXIuY29t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"b3f2d080b61d89b19e9304d23a900aea","sha1":"96ddb4c3f19f14a320746bd28aeb37c9e813ec3f","sha256":"1d2d3df2c37c80cadeef8a3f0636fe70ee4e2b2e575cffbc9581d872a75b41f4","sha512":"01f63b2a151383f8e16ec5a6e0e4a0253ce6ff722fa7cbb03a33e1a762e74e11f975d868783bf401e3bb794a8de635487790af8f111d592bf2e3b4255152771b","ssdeep":"","tlshash":"03b012e3140c448603c36241cc916150503b74cf10967382d85418010a68ee8292b60e","size":92,"data":"","first_seen":"2026-01-21T15:33:11.359942Z","last_seen":"2026-01-21T16:07:28.102994Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"154ebd468999bc0dc6788aad422526a8","sha1":"c0ffd9a3cc5b055999c66435263e4da7a971c3db","sha256":"63a7623794f0f79400d2f389b0e0a9b919685a705f64e61aee35c02bd42a8492","sha512":"9472aad39e808b97fd8d55b859c1e7facaa1a9ae0826767c88f7545ca56e068ba92fc9d5e4679a6a0e5a2643acb4fa9eb1baffa6e0ca7be48a583e59c4b22ce8","ssdeep":"","tlshash":"7221c0a732c508324d8f64fb34a122cd75b085123fc684b0583e8812557eed992ffadc","size":1441,"data":"","first_seen":"2026-01-21T16:07:28.103782Z","last_seen":"2026-01-21T16:07:28.103782Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-03T01:07:54.195609Z","times_seen":681874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b8773b0e5f0cf9143c7e79b846b02c4","sha1":"2b0ac7d5f49fa7f7af2b9a32d3e58acc1c117e0c","sha256":"d01cb6bfe92ed5d855fe36319764b1b063ab8739f73261f83b0a074382ed7c98","sha512":"28fcf1aa787d83e466ab8f2f472d3180daed11ca8633635c68c6e9485a1afe7802aeac1a829707660fac710a403f7b6bb9dd471eac9a5f2bfe90be121f69b081","ssdeep":"1536:W75ivov05RukEfeOHfFQmzHk0by4eQPuzWaP98paaI4WQHbmg:WT05R3EmaNE0bhtaVnaIkb","tlshash":"a353e1990d403e28fe6c6300d1ee5b0d05a2abcf459138864b769e8f6ff3f8955261ed","size":64725,"data":"","first_seen":"2026-01-21T16:07:28.107258Z","last_seen":"2026-01-21T16:07:28.107258Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b2e00d5fa1ccadf30fa0e362382dacea","sha1":"0bf10fa028366448d963c1b7871c96189e178293","sha256":"e752eb318e96da8987272c1b699954c0e520342d9799c12e31ae8f92bf668285","sha512":"fe903a5fb7fe7e071b137769cbffd4fc06a8896f707703f1946e00c85b4aa855c11779205e726e235eb2f4a6ee45cf38b3077e1bd811825deddc13d7e51a4863","ssdeep":"768:mPupZiuzOace+Y14qGjMqYHF1aDvc14qGjMqYHF1aDvT:mPupZplce6qGlJqGlT","tlshash":"70d21a1a9d032e1e9360716764ddcaf49e3d57ce348200ee783eab84dbba9456cd19cc","size":30573,"data":"","first_seen":"2026-01-21T16:07:28.110615Z","last_seen":"2026-01-21T16:07:28.110615Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jquery@3.6.0/dist/jquery.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-03T00:51:04.977589Z","times_seen":477063,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/jpo8oybp9tds17g?50a88a20eb3d5-b214a4ec61f853f38aea49e49f3-af5937b0d22f7be23aff15a41-121d0fdd2b8a495fe077d0138/","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c99c63fd2d5938a6b0cf87342187dd3","sha1":"8a9950cbbcd6fe74e9f11f97aa3e709dd49251ff","sha256":"aeabd1ace58e185dc426a059069b134eb5cb0c43eb82a824174a27cfaf18a749","sha512":"f2575f641cf2d104a51523133081d973a1b957a64059ec2ff52ba06c397330b4d43c743c8bec00728fb23fa878abdf33d9c31c8b9a58add8e023bd2f5a03a5a8","ssdeep":"","tlshash":"d32163576632923c17656ce7a0fbb19e896969367324fce0010db40089cf5b0c4af1e0","size":1180,"data":"","first_seen":"2026-01-21T16:07:28.113292Z","last_seen":"2026-01-21T16:07:28.113292Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-06-03T01:07:54.195609Z","times_seen":681874,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"beeffcb21b1a2dc47e70163b9f793542","sha1":"ca51867804f79be23b58ac435e35bdd53b1ce7e9","sha256":"578b5b3355c27870b019804cac2a75f9b3c6abc1bc094839c7abf25233a4e7ef","sha512":"4694196f6c70872eb19144bf5b6bff16ab7eaf4f6d4e8a495dbe572248aae04acb5c1e4da85c57df7e78134a1304ecad4a61bbb4e141f047fea23aef2ee2ae75","ssdeep":"","tlshash":"bfe07d7571e0a570418a742ce2d5cfe43f7764c81492d948241c8cb431accc41114dc5","size":312,"data":"","first_seen":"2025-10-16T10:39:23.804394Z","last_seen":"2026-03-28T21:59:21.711553Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"fa8fc175ac2c733b81191f9f9d899914","sha1":"cd0bab09292ee1653617949c136e27ad2510ff1e","sha256":"62dc10850145fec0834ff5b7f724157ab0cdeac781f62806f6e5e651c6fa4b0a","sha512":"3937ada83e757a035906aa6df1c4109e71905dbe4e448c6366f893422a6607b74f01dc38b3d3349f04ad5350f45f93bc265b144fdebbea3a1b0df4d4dd37ace5","ssdeep":"768:0c8ALJNIJ4GcCuCPbwYVixYdT8vsIX0n2QYQXVaGBrpKTjqSaD04izqUuuNWCpPA:04VjGlzP88MXi2FQXQWrp6ePlrUuQVPA","tlshash":"5f23d03126985838ba4ff67d96e1a90e3e3ea00278635ffc210c25d942dde8c456f7e4","size":48422,"data":"","first_seen":"2026-01-21T16:07:28.088885Z","last_seen":"2026-01-21T16:07:28.088885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"51d338cc72e059c6d3456d5f6e24ecb8","sha1":"17338b659b825f921aed155dacb540c11bf74e8e","sha256":"3387d54d4df16fe19ce5763ba13be0ec9f0c10ff4cd9735c13799ef975aac2ba","sha512":"51bf50b7243efd559b287f632e2ae03aa079d85b7f91f01fc9876c4910eff186a6be161ee2f6c4c139643761c2de1a1030d2b6fa8446e45b2e2a026529d01d8d","ssdeep":"96:7SGwRRiwgZZIxwIMUzZIxwIGqoTNcE7m9/:7SGwRR6ZqPMUzqPG9TNp7i","tlshash":"a2a1138e762a08a331f236658993b33cf97656e34940c101378cf4573f346ad96eaf96","size":4669,"data":"","first_seen":"2026-01-21T16:07:28.118037Z","last_seen":"2026-01-21T16:07:28.118037Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"medicinamexico.com.mx/favicon.ico","fqdn":"medicinamexico.com.mx","domain":"medicinamexico.com.mx","tld":"com.mx"},"ip":{"addr":"45.239.19.250","port":443,"asn":265552,"as":"Baja Datacenter, SA de CV","country":"Mexico","country_code":"MX"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://medicinamexico.com.mx/oluwaserereplublic/#?1187507008Family=YWFyb24ucm9rc3RhZEByb2tzdGFkcG93ZXIuY29t","date":"2026-01-21T16:07:03.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medicinamexico.com.mx","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 07:50:19 GMT","end":"Tue, 17 Feb 2026 07:50:18 GMT"},"fingerprint":{"sha1":"15:89:38:6C:B4:B3:53:AE:0E:24:93:DA:07:40:E6:84:55:A1:3A:20","sha256":"BF:5F:84:BA:6E:CF:29:88:6F:C3:06:8F:7F:A2:6A:68:E3:2F:27:F9:31:CB:9D:6E:25:37:46:CF:4A:42:4E:E9"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: medicinamexico.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://medicinamexico.com.mx/oluwaserereplublic/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 16:07:03 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nContent-Length: 355\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-06-03T01:11:07.561442Z","times_seen":38264,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T16:07:16.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IktEek1HQVdXMGNhUFBPaFh1cTc1cnc9PSIsInZhbHVlIjoiMHd1dG9CcTdIcFN0Q1ZkRVNTYVNsTlZuWXdwUC9QY2lWLzhHMktoS0VCalRvWW5jUEpST3hONWd1bFB3d2lKcmtDOGxqeVkyYTJNR3hkZFhBUmhYY0sxRDJMeGd1TGhEYUx1aDZ6eGM4S1g5LzNIOExwTStNc3BTdHFSVGQ0M3QiLCJtYWMiOiIzYzZhZTAwYzU5ZTdhMWY4ZTlkZmMwZjUyNWM4MTIwODIxMWNhODUzYTQyOTNlN2NhMWZmMzc5Y2JmODhlZjRiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikp2UVFwMDQwUjI2ZlRWUnJuRjB1cHc9PSIsInZhbHVlIjoic3BRbkgvTVhDbjkwZXRHRVI5U21sWDFpbmtFSWxBRjE0cHBBREtLSjdyVFk3SE5ISUVDRUxKTm52NUFZMThsRTBlUlBTN3Vad0ttd2xxZzB1Wm1oMHRlaXJtR3RMZVlxeTN2bDV2UWFqVVE2TE50U2d4R1JBOXJrc0dpL0tkb2ciLCJtYWMiOiIyMWJhZWYyZTRjOTcwM2Y2MDM1OGI2ZTFmNTk4NzU2ZjE0ZmFiNjZmMzBkNTNkMzM4ZGYwOGU4ZmU1ODJiMWMxIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hq4vmKI%2BhlanEQ1ESBTWdZ%2FReMg8SaKE5SKVQAOlmQP2AWP2gL8zlywsK1kND2IDQejsngmXOAhCJleKStYz9Sks5NWB0Gju%2Bys%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlBzMmJGWDJhMWZkcHBMRityZ3pQZVE9PSIsInZhbHVlIjoiaS94OC83SytNZFdsVVNDN2ozWHNKTDVpeUEyTCs1VS9pbTF2OFJhY3BVNjhFTmhhS0FaYk1FSEx6bHhLTkJ3MDNIN25IZXRvdnZGM3V6S3ptcjNRWTNxSDNMa3YxME1Da2E2SVhrOFNHdkwwbmVLYVpiYTdWdWRYckF3aVA2SEQiLCJtYWMiOiI2MDVlMGRmYjk3NGU0MjY1Yjc0ZWNhNDkyN2EyMGE2N2ZlOWJiMjI1OGQ0ODk2NmYzYTRjOTVhYmVkYWMzOGE4IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:16 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Ii9TV2xEYUxjMVJ0YlN3eEQ2Mko1SVE9PSIsInZhbHVlIjoiZExPeXBiZ1pzU1luejJMb2d0RVkyc24xQ2RUeHlIb09ZMlBsN3pGSmlHQmlEakhNTjk2Q0JUaUtXWVJUanR3QjA2cjd0YTdWUXJZWVAwZnpaSC9GUUd1RGJIblBuVy9SNWFsblpSRUdHZVEvcmlDVitka2hlMVdJZFgrMUNHaFEiLCJtYWMiOiI3NGQ5MjZiMmM0OThlNjZlNjg0ZGYwZjhkMDVmMjEwMWE3ZGY0MGM3M2U3NjlkM2I5MTY4MTJmNzg1MDI2ZjhhIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:16 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c1810480de356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1468), with no line terminators","md5":"55e83e6fb3e2bcc376ce5d40822f2684","sha1":"625b19feb56edb9320252ac4869adef8ac96a52f","sha256":"fe9e99b9b29cf4a23f7fc637e85a13036fbfbc0310ba749a675f4c8918a59d15","sha512":"87c852868deeee3cce22de12709dfe7b5e549b882e4b05b391fc459a4924ead83a6805146c55ceca6d83a6e4da7b0fe603ce732f99ebc8b0c5005ed8c0337c45","ssdeep":"","tlshash":"443171979822923c2b129dd274ebf25e87691d20b344fcd1468cb84409cf3b8c8bf5d8","first_seen":"2026-01-21T16:07:28.077241Z","last_seen":"2026-01-21T16:07:28.077241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jquery@3.6.0/dist/jquery.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:17.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/jquery@3.6.0/dist/jquery.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.6.0\r\nx-jsd-version-type: version\r\netag: W/\"15d9d-uC0jjU4x/fYYuuisEabIEsA90NQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Wed, 21 Jan 2026 16:07:17 GMT\r\nage: 3809535\r\nx-served-by: cache-fra-etou8220137-FRA, cache-hel1410034-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 31907\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-06-03T00:51:04.977589Z","times_seen":477063,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":63,"dns":1,"connect":26,"send":0,"wait":27,"receive":10,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/lmRw633vw5yrl9DZcpQd5wqhgWM8ebfNf20Ifq","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:17.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"POST /lmRw633vw5yrl9DZcpQd5wqhgWM8ebfNf20Ifq HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 39\r\nOrigin: https://board.deadaiyio.com.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nCookie: XSRF-TOKEN=eyJpdiI6IkZhQlRYRkhsV1BLdnhUa3pZYnl3a0E9PSIsInZhbHVlIjoiUHIwSFlmQTJocFZQT093RUgxdzNzNnEvaFNXL0t0alB0RXB5UkN6NXMwNVRrRTh3ODBlRk5ucVBTTVlMMytRaVBtVnhqUERsR0RSbzU4NHhwZWNhZncwR1NLeTlKMElKQlNlYWJUQkhsRHhMeDNhV0htNXVmSjhhRExTZjhmQi8iLCJtYWMiOiJkOWMzYzliMjNlY2IzNTIzMTdlNjExYTYzMzdjOGQ1NzBhMjVhN2U2YjY3OGQ4Njg5ZDI0ZGJiMTE2OGZiMGNkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imw4NXRrV2YvMmJQVFJ0Q3pTTnFxNEE9PSIsInZhbHVlIjoidzNYMFpsTjh3K3dpcG5Lcm12NmZlTWZxSzkrWDRjaVQ5L3ZJK0xaMDhTd0JQZzdOUWJ4dzBpRDRVNnUzR1U4NzdtNDh2SjV0WmMxcUpDZFhmeDRXNERCanpLYXdReDI2ZFJHcHZ1cmdqVk44dlZ1a1Nmdm80bndQaGZLazN6Y2siLCJtYWMiOiJiYjUzYTFjZTc1N2Q3N2FkYzM1OGZjMjkyMjRmYzA4MjliMGI1MDc0YWQxZjdjZTQwNzRlMDU0NTg5NjBlMTY2IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":39,"data":"data=WQaaron.rokstad%40rokstadpower.com"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1H3DdZz3ZaYyBJIRa2zMWXmp57%2FQbhjkO3HO%2BWNhAHaHTGjioqsxEBeWz6l190Ymyotnfrwx%2FVTfqpiIdilDEPNMNTAUwy8XyhQ%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjE0WVhMZGJOYnVSNGVGckZzWDRQRHc9PSIsInZhbHVlIjoic1ZXVUFRTnJoaVBJR05GdU9wZHhHNXd4WVRRV01CSUoxQlFIUHVvelRTTTZTbHJZUFVQOEQwR2szc1JES2ZsblVLQUo5ekdXcjlyZTRKTjF1bEtYY0wvSmVTRzdNWDk3RUowUkN2WTM3bnJ2NEJKVGJLTGJEZ0ZMdk5jZThVNkEiLCJtYWMiOiJiN2MyMjk5YjhhZWJiOTQzZmNiZDA5NWZmMjBiNTVhNTgwYWQwN2FjYzk3ZGJiMzViMDY2NWNkMDE1OWEwODViIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:18 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjdaUENad1hMNmpydGFYQUtDMXF4MEE9PSIsInZhbHVlIjoiNXE0dVJUSXBIbGpOdjJZMlpNaDBQbTRwOHh3Qit0Ti95d2grUWF3MjVNaXZCTFBTSDVuU1oxclh1WmdQc09vYnBDQnBWMVBhNFhnSlgxTkNHSFN0SlNTRkVsNU1qcExkbjIzZU9BcHNBUDhScXRxQzBXb0JGQ01yeEhhM2JNNDUiLCJtYWMiOiIzMTIzYWNhZTVlMjEwY2YyZjdkMTI3MmE2NjM4YzI2NDRmNmQ5MDkyZjVkYmI3ZjBhNzkzN2Y2MjU4NTVlMzJjIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:18 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c1810512f5e56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"3ae0120ba80489722457ee56cdf07bdc","sha1":"8dd176bebcb81e6f72e55bef2ef50fc5974d9fab","sha256":"29f01c952068aa864f20be5e8447b581a2b0b9fe61e502f61b513634f6cbe75b","sha512":"6f08f022785b1501fac025aa488f93d6fa469124dcf7287576c676147d66ec5f1cb88e63d7390a0a4cb0bb76feded6629342e96614b4a943c8abed0debc60ff4","ssdeep":"","tlshash":"5ad097a8fce63a58f3ce100c20401c5785449619b441c04fa512810be6aa7632bbe858","first_seen":"2026-01-21T16:07:28.080537Z","last_seen":"2026-01-21T16:07:28.080537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/favicon.ico","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://board.deadaiyio.com.co/jpo8oybp9tds17g?50a88a20eb3d5-b214a4ec61f853f38aea49e49f3-af5937b0d22f7be23aff15a41-121d0fdd2b8a495fe077d0138/","date":"2026-01-21T16:07:19.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/jpo8oybp9tds17g?50a88a20eb3d5-b214a4ec61f853f38aea49e49f3-af5937b0d22f7be23aff15a41-121d0fdd2b8a495fe077d0138/\r\nCookie: XSRF-TOKEN=eyJpdiI6ImRuaS9yUHZIV0x6MVp0R2YvTUlWZlE9PSIsInZhbHVlIjoiSTVGeGF1aElqdDIxSW5XRVZVdzlNS3V1ckNWWEZrcHRuUzhwczdzbC9pMGNnaUd0RUFsOGtkbnpyY3Q4RHY4eGtkS3VmdGl3Zi9lVVNERTRxVVlzbUlYWWxlSDBuczhIWk9IV3VHSVp5cnduamZWSkVBeW5RY1NRVG5ONlNBWlQiLCJtYWMiOiJmZmZlODc5MzA2YWIyYWFkYWE4MzRjYWJhM2I5NmNiMjVhZTA4NjIyZDJkYTJlYWM1MTdiZDhhZWY0Y2YzMGUzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNwRXc3MFgzbThNekJYS2JYdStEV3c9PSIsInZhbHVlIjoicktSaHJhSCtPZmVKbHpod2hKSDU2QnFuQnBMcnpmMjhsT3FOTm5GUmNUdXpyZEI5T0h3QnB6WEh2WWkybDdGK2lkTzZ6bEtaODU2QWdMOXozQ3BNVnhYSkdYK1ZGWDF6YkVsaXdFMnZEVXZ6Z1JYMENhTXhZWHIrY1YvYWxURFQiLCJtYWMiOiI5ZTNjNzRmNTM5ZDdjNjAwOGUwODFmYzBlYmM3ZGQ2ZjQwNjAzYzU4ZDMzOTI3ZDc2MzVkYTczZjdlNzMzZTJjIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mFln8nwUjd5ezupgudvXTdFfgofKo3H4e5UJ3M5y42MfvlxHo1QXzbbaBvSad0OUnOal1fUKVUjDb0qWsdi98wUJjxxeMsih444%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InA2RXRFYUg3WUZVemVtaENJaXJXL0E9PSIsInZhbHVlIjoiYklBRWIvUTIwb1FZZzlkUHRlQnVoR0h5SzZPVjhERzlkcGdjZUVGVVZUV0VFK2hYU2pBY2dUTTZYT1JkZ2NZTUJDRFcvd3Fpd3lnUFQ3ZVJVdXgzNFZ0QWR2LzhwZWRsclZ4MWlVNTVrb1VKeEJNT21FSFJtU1Y0SUFMSVZUOFgiLCJtYWMiOiIwMmJkMTg0MTU1NDFkYjVlYTg3YmQ5MGM1OTNlZjA4OTBmMTIyZmU2MTA1NjUwZGE5ZWZlMDdjZjllNzg0MzQwIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:19 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6InpLNFFFSUtBQnRnZkpXTjlkd04xdXc9PSIsInZhbHVlIjoiekhaYldvcDlXU2VCc0RJaGw0a3pnNVA2STcxQUd4SEI0eUs0bHBWNEtJVldGK0RVUWZURjlXT1B0Wkx2UU9saTFQMDBTRWl4Nnd5WVdUZk5LODcyZFhyRFErSU1yMktQQkVwaDlYQXpKdU5CbEhIVmtEZGtlSkZmYkk2WlpQUEYiLCJtYWMiOiI5YmQ4OTg3NDhiNDAyOTA1M2ExNWI3ZjRlNmI4NjFjODRmZGFiMmU1MGVjZGY2OWI4OTRiZDM4OWQ5YmQwOTNiIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:19 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c181057de6156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11254,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (399)","md5":"b0d3b34294c0d3b11813cbb8e78ba653","sha1":"8cab51e4c66be92488ff439acae05f68ceccbd43","sha256":"ec7061bfec61b9c8f47dec071126c3b9c23786a752bd421d144e945854bb711b","sha512":"318e3dad27e022c001aea4a38501e15c884fc89e9e669be3962a5e9210ba3ad758a6e2bef061187ccebfb7b69d495ade1d662cd8183719d0b668a8ca4565f55a","ssdeep":"192:fvSJGOnWvXZ0IcQ8X2t56yTmhp52Ee83PDkLT6pejYlg04/ZlgdZOxU:XSqZ0IRd7Chp526rkLRsYuZOxU","tlshash":"eb32c83250a0743b2923e5d5f7a4178f75a1e113d9270b80b9fd92a48fd3ed2cea7149","first_seen":"2025-11-01T09:42:06.687375Z","last_seen":"2026-02-17T07:18:09.174033Z","times_seen":4573,"resource_available":false,"data":null}},"time_used":454,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"medicinamexico.com.mx/oluwaserereplublic/#?1187507008Family=YWFyb24ucm9rc3RhZEByb2tzdGFkcG93ZXIuY29t","fqdn":"medicinamexico.com.mx","domain":"medicinamexico.com.mx","tld":"com.mx"},"ip":{"addr":"45.239.19.250","port":443,"asn":265552,"as":"Baja Datacenter, SA de CV","country":"Mexico","country_code":"MX"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T16:07:02.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medicinamexico.com.mx","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 19 Nov 2025 07:50:19 GMT","end":"Tue, 17 Feb 2026 07:50:18 GMT"},"fingerprint":{"sha1":"15:89:38:6C:B4:B3:53:AE:0E:24:93:DA:07:40:E6:84:55:A1:3A:20","sha256":"BF:5F:84:BA:6E:CF:29:88:6F:C3:06:8F:7F:A2:6A:68:E3:2F:27:F9:31:CB:9D:6E:25:37:46:CF:4A:42:4E:E9"}}},"request":{"raw":"GET /oluwaserereplublic/ HTTP/1.1\r\nHost: medicinamexico.com.mx\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Wed, 21 Jan 2026 16:07:03 GMT\r\nContent-Type: text/html\r\nContent-Length: 1054\r\nConnection: keep-alive\r\nLast-Modified: Wed, 21 Jan 2026 14:45:34 GMT\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1054,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"f34404a5a63bcfa35167f5d73063077b","sha1":"69568fa55c559641a1b5d835e93d84e76ca2cdf1","sha256":"6778c1cb4be4476f07f752c5064971e019c8be42854dfb26b984dba74ee6b3b2","sha512":"bccd27a0ab4b8457f1ae7906785ed52b91feb7b7faf8f0e3df7fe79ff307597da775418e5489149558aacdbefd293b7e4245162c0dc425cc3de8d223bbee460b","ssdeep":"","tlshash":"b111c2d014b1335b0a388035f48ad290434157ecf6b5e9fff86866631bce99c4531780","first_seen":"2026-01-21T15:33:11.355643Z","last_seen":"2026-01-21T16:07:28.084322Z","times_seen":6,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":387,"dns":1,"connect":193,"send":0,"wait":194,"receive":0,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/jpo8oybp9tds17g?50a88a20eb3d5-b214a4ec61f853f38aea49e49f3-af5937b0d22f7be23aff15a41-121d0fdd2b8a495fe077d0138/","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T16:07:18.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /jpo8oybp9tds17g?50a88a20eb3d5-b214a4ec61f853f38aea49e49f3-af5937b0d22f7be23aff15a41-121d0fdd2b8a495fe077d0138/ HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nCookie: XSRF-TOKEN=eyJpdiI6IjE0WVhMZGJOYnVSNGVGckZzWDRQRHc9PSIsInZhbHVlIjoic1ZXVUFRTnJoaVBJR05GdU9wZHhHNXd4WVRRV01CSUoxQlFIUHVvelRTTTZTbHJZUFVQOEQwR2szc1JES2ZsblVLQUo5ekdXcjlyZTRKTjF1bEtYY0wvSmVTRzdNWDk3RUowUkN2WTM3bnJ2NEJKVGJLTGJEZ0ZMdk5jZThVNkEiLCJtYWMiOiJiN2MyMjk5YjhhZWJiOTQzZmNiZDA5NWZmMjBiNTVhNTgwYWQwN2FjYzk3ZGJiMzViMDY2NWNkMDE1OWEwODViIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdaUENad1hMNmpydGFYQUtDMXF4MEE9PSIsInZhbHVlIjoiNXE0dVJUSXBIbGpOdjJZMlpNaDBQbTRwOHh3Qit0Ti95d2grUWF3MjVNaXZCTFBTSDVuU1oxclh1WmdQc09vYnBDQnBWMVBhNFhnSlgxTkNHSFN0SlNTRkVsNU1qcExkbjIzZU9BcHNBUDhScXRxQzBXb0JGQ01yeEhhM2JNNDUiLCJtYWMiOiIzMTIzYWNhZTVlMjEwY2YyZjdkMTI3MmE2NjM4YzI2NDRmNmQ5MDkyZjVkYmI3ZjBhNzkzN2Y2MjU4NTVlMzJjIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qqbUCINibEkCor6rs8j3mV4f7UWK2pMKaX4aLC2hzTC%2BIsHmq52ahWkbpCR61YTerbCgs3C0bqx10YY1NTa15G1E%2B3xm%2FoQSuDI%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6ImRuaS9yUHZIV0x6MVp0R2YvTUlWZlE9PSIsInZhbHVlIjoiSTVGeGF1aElqdDIxSW5XRVZVdzlNS3V1ckNWWEZrcHRuUzhwczdzbC9pMGNnaUd0RUFsOGtkbnpyY3Q4RHY4eGtkS3VmdGl3Zi9lVVNERTRxVVlzbUlYWWxlSDBuczhIWk9IV3VHSVp5cnduamZWSkVBeW5RY1NRVG5ONlNBWlQiLCJtYWMiOiJmZmZlODc5MzA2YWIyYWFkYWE4MzRjYWJhM2I5NmNiMjVhZTA4NjIyZDJkYTJlYWM1MTdiZDhhZWY0Y2YzMGUzIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:18 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IkNwRXc3MFgzbThNekJYS2JYdStEV3c9PSIsInZhbHVlIjoicktSaHJhSCtPZmVKbHpod2hKSDU2QnFuQnBMcnpmMjhsT3FOTm5GUmNUdXpyZEI5T0h3QnB6WEh2WWkybDdGK2lkTzZ6bEtaODU2QWdMOXozQ3BNVnhYSkdYK1ZGWDF6YkVsaXdFMnZEVXZ6Z1JYMENhTXhZWHIrY1YvYWxURFQiLCJtYWMiOiI5ZTNjNzRmNTM5ZDdjNjAwOGUwODFmYzBlYmM3ZGQ2ZjQwNjAzYzU4ZDMzOTI3ZDc2MzVkYTczZjdlNzMzZTJjIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:18 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c181053ca1456b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1468), with no line terminators","md5":"9d682db44906eedd42a685b15d234468","sha1":"9044e1bbecead81823c351027d137d8142c3b449","sha256":"9821de28c9e83cf100d246a6378532ecaea7e621595f13439d77fbf8255bb4d9","sha512":"7541bcfce4c4b06e530e222fb9e2e64d1d83c530c8fc155eda47a88e465f910a751f77dc5428be398e67c9c08b76c91932eca788a1cfc9a8101acb5770f3fac6","ssdeep":"","tlshash":"1a319453b532853c1761ade265ebf24e4ab96d34b324fcd0024db00449cf2b4c4af5e4","first_seen":"2026-01-21T16:07:28.085257Z","last_seen":"2026-01-21T16:07:28.085257Z","times_seen":1,"resource_available":false,"data":null}},"time_used":516,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":516,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"www.google.com/url?q=https%3A%2F%2Fmedicinamexico.com.mx%2Foluwaserereplublic%2F\u0026sa=D\u0026sntz=1\u0026usg=AOvVaw247yzJjvl_yQ0wCd0xTUQW#?1187507008Family=YWFyb24ucm9rc3RhZEByb2tzdGFkcG93ZXIuY29t","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T16:07:02.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Tue, 09 Dec 2025 17:10:59 GMT","end":"Tue, 03 Mar 2026 17:10:58 GMT"},"fingerprint":{"sha1":"34:06:45:B6:D0:B1:68:BD:7C:B1:3B:A9:32:66:E7:CE:5B:3E:A8:12","sha256":"67:37:09:58:81:C0:62:BA:41:2A:A1:B2:9F:F7:0D:50:27:26:E4:C3:F2:F8:E6:B9:32:50:1C:04:E4:9F:36:99"}}},"request":{"raw":"GET /url?q=https%3A%2F%2Fmedicinamexico.com.mx%2Foluwaserereplublic%2F\u0026sa=D\u0026sntz=1\u0026usg=AOvVaw247yzJjvl_yQ0wCd0xTUQW HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlocation: https://medicinamexico.com.mx/oluwaserereplublic/\r\ncache-control: private\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ndate: Wed, 21 Jan 2026 16:07:02 GMT\r\nserver: gws\r\ncontent-length: 403\r\nx-xss-protection: 0\r\nexpires: Wed, 21 Jan 2026 16:07:02 GMT\r\nset-cookie: __Secure-ENID=31.SE=NzR5msBaOeJcWo5dVZudgsgxjH7iAgkbRYSF54V8N4yeQpzZMcHK1UxvAPmPNbsnd7TvQE4_O7DhIT7uC86iqp0vPGe8guUjiwxTR_aSPOuIu5SDjhVr-0MYR2I-YUiXckZUsBRyFp87xrFdzeYjxjFj-9mPctKRPmAJiEMwGwUI-YeuaSEvyadVM0mSRW41X_vEGVuKzRYROpaQrpCoZfBZiDy220hzyq9TsAmKXDatUOgzz-Enj6Ka23PQQyYobE0roliE1RJNund5; expires=Sun, 21-Feb-2027 08:25:20 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-BUCKET=CKkD; expires=Mon, 20-Jul-2026 16:07:02 GMT; path=/; domain=.google.com; Secure; HttpOnly\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":403,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"ea10a07f1cda8a39c2b0a915337b3751","sha1":"d2f63f62eb0b07f27890b064ebc98c7c4d427c3d","sha256":"f1e6f3965b8afa4a8f644b19da2ddfd345b0ebcee1d9990c31a43b5e16b8ce63","sha512":"8890720fe22b3f4f6f04656e0148b712b45721a6c6103310c072ac8de9dd4150cd8f387770963a718cdeda14354e2c1be4fca13150855b358be964dbcc5b6dd1","ssdeep":"","tlshash":"bde02bf21c8c001e5382b191ccc07211802a7cc6949e8fd6dc60195d0df8fe8616bb5f","first_seen":"2026-01-21T15:33:11.353445Z","last_seen":"2026-01-21T16:07:28.087071Z","times_seen":4,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":75,"dns":1,"connect":15,"send":0,"wait":49,"receive":1,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pizza.noujeajouhiyoo.qpon/autogen~hpjket","fqdn":"pizza.noujeajouhiyoo.qpon","domain":"noujeajouhiyoo.qpon","tld":"qpon"},"ip":{"addr":"172.67.146.25","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:15.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"noujeajouhiyoo.qpon","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 12 Dec 2025 12:02:36 GMT","end":"Thu, 12 Mar 2026 13:01:18 GMT"},"fingerprint":{"sha1":"19:A4:E6:24:EC:07:7E:CE:93:73:D2:7B:C1:4B:D4:91:EE:C8:84:29","sha256":"18:4F:73:9C:29:E8:72:A0:69:63:4F:5B:4D:EC:24:84:E7:71:C7:E4:CA:43:08:FC:BE:10:DF:D8:34:78:90:90"}}},"request":{"raw":"GET /autogen~hpjket HTTP/1.1\r\nHost: pizza.noujeajouhiyoo.qpon\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://board.deadaiyio.com.co/\r\nOrigin: https://board.deadaiyio.com.co\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uHKYbSRjorYx9V%2Fcu98AN6vfmZ2x5aKQ8m5epvwCX9Vj4bEnFuMdrU4PFVsRHkQLosFc699BX8d9%2FmvvhtmsmDieBP15MZ4uO0qkDVIxc%2BIt8ePZCNFY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c1810403856569b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-06-03T01:02:25.873661Z","times_seen":113811,"resource_available":true,"data":null}},"time_used":902,"timings":{"blocked":82,"dns":58,"connect":3,"send":0,"wait":737,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:17.019Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"POST /ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nContent-Type: multipart/form-data; boundary=---------------------------173197985537756076662700324891\r\nContent-Length: 63\r\nOrigin: https://board.deadaiyio.com.co\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBzMmJGWDJhMWZkcHBMRityZ3pQZVE9PSIsInZhbHVlIjoiaS94OC83SytNZFdsVVNDN2ozWHNKTDVpeUEyTCs1VS9pbTF2OFJhY3BVNjhFTmhhS0FaYk1FSEx6bHhLTkJ3MDNIN25IZXRvdnZGM3V6S3ptcjNRWTNxSDNMa3YxME1Da2E2SVhrOFNHdkwwbmVLYVpiYTdWdWRYckF3aVA2SEQiLCJtYWMiOiI2MDVlMGRmYjk3NGU0MjY1Yjc0ZWNhNDkyN2EyMGE2N2ZlOWJiMjI1OGQ0ODk2NmYzYTRjOTVhYmVkYWMzOGE4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9TV2xEYUxjMVJ0YlN3eEQ2Mko1SVE9PSIsInZhbHVlIjoiZExPeXBiZ1pzU1luejJMb2d0RVkyc24xQ2RUeHlIb09ZMlBsN3pGSmlHQmlEakhNTjk2Q0JUaUtXWVJUanR3QjA2cjd0YTdWUXJZWVAwZnpaSC9GUUd1RGJIblBuVy9SNWFsblpSRUdHZVEvcmlDVitka2hlMVdJZFgrMUNHaFEiLCJtYWMiOiI3NGQ5MjZiMmM0OThlNjZlNjg0ZGYwZjhkMDVmMjEwMWE3ZGY0MGM3M2U3NjlkM2I5MTY4MTJmNzg1MDI2ZjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":63,"data":"-----------------------------173197985537756076662700324891--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ltS%2BhZNkneC9MBgxNevDND3UY3mrJMXkZtxKS5tuwvSvsOUNHPGM%2Fz4CO58KzStiRb3qVTVdmsEto09Vv83niCOs0w4o85gQqs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkJtYmkrdXlKTW9DMGxFT2EzSmk1emc9PSIsInZhbHVlIjoiTWlIMGFkUXp5NFJ6d1hwSExsSktUN0lyMFlBZ3BnK1RvdmxDNVVSYWdsc1VCYndhM05kSlpCK0tDbU9LcCtFTmppWWNKQzRJSm9ycTJYZzVQaG5SaU1VUzVXRU9KRnhxVlpvMGJSTmdDV1pNcGE5MkJDRFlRZGt5emk0M1YyVGkiLCJtYWMiOiI1MTY2M2U5NjUwNzlmZTEyOWM4MDU2YWJjMDY2OGY5NzBmNjEwZDY0ZjgzMDI3ZTNlOGQ5ODcwYzIzZWQyZmM5IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:17 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IkdvVW1TdWs3YVpJd0huQy9mWWtvNkE9PSIsInZhbHVlIjoidWFUaGwyNGFnYWpUOWhVRERRWE5GakJFSXFFKzUxMHJnMEhPR3RCVjVDcFdBbGhNT1N3U0pteTZGZkFmVFNhRFRIKy9UOWp3VnY2Q1ZtZTlaeURwMFBXbXRtckpIZHdRalJqQlJ3YldHcVV2SytCTEVqNDBqSEVpNEEwdXVpcU0iLCJtYWMiOiI2YzQ1MzkyZDAxOTAxZGEwNzJiNTQ5Y2JiNjIyZTFmNmNhYmU4OWU2M2Q0NzM4NzYyMzUzN2M5Y2I3YTk3ZWE1IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:17 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c18104b69c856b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48422,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (48422), with no line terminators","md5":"fa8fc175ac2c733b81191f9f9d899914","sha1":"cd0bab09292ee1653617949c136e27ad2510ff1e","sha256":"62dc10850145fec0834ff5b7f724157ab0cdeac781f62806f6e5e651c6fa4b0a","sha512":"3937ada83e757a035906aa6df1c4109e71905dbe4e448c6366f893422a6607b74f01dc38b3d3349f04ad5350f45f93bc265b144fdebbea3a1b0df4d4dd37ace5","ssdeep":"768:0c8ALJNIJ4GcCuCPbwYVixYdT8vsIX0n2QYQXVaGBrpKTjqSaD04izqUuuNWCpPA:04VjGlzP88MXi2FQXQWrp6ePlrUuQVPA","tlshash":"5f23d03126985838ba4ff67d96e1a90e3e3ea00278635ffc210c25d942dde8c456f7e4","first_seen":"2026-01-21T16:07:28.088885Z","last_seen":"2026-01-21T16:07:28.088885Z","times_seen":1,"resource_available":true,"data":null}},"time_used":710,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":526,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T16:07:03.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://medicinamexico.com.mx/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iGHDarPdKHPA8c8s9aqqhPDTZBIRvlqRWe%2BEjflRLumeJDiCpSaP3SNANtS9lu6TYVnhPhFsYck16uqgPn0o3jNELX%2B7Y1NaiJk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjlUN253S1I4STgrMGh6OWpWN2IzTlE9PSIsInZhbHVlIjoiZWUxbEt1UVo4Y0lxWk56VjNFemFTcDZUdHdWalNpbHlsR3Y4cjgrZUxKNTBXUWNGRWJGejJad1F2RVpyeHExRU91YXBBZ2w2c05vM2tLSmxvVkUxbEZObEZidVFUd1UrUHBHNzVoZGVmZ3ltbUVhRndjdUx6UXhJOXZUYW5uaDYiLCJtYWMiOiJhN2YzYmZmZmFkYWQ1OTg1ZGU3MTdiNTE5NGY0NjIzMzA2ZGViNmZjYjIyZjhkZTExOGFjZmU3YzhhZTY2ODJlIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:03 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IjJqd3Y1NWFWbldyWWhnWGJNc0dheGc9PSIsInZhbHVlIjoidzdSbS8xTW90aEZCdi9UVjlBTHg0bkRwRGM5dHF5YStqNlE4ZElLQmFYNVdDK1ZaWjdHRWZsd3dMWlVHZ2RPL215KzROeHNBWFBTQVpoaGVDSlY5TXlaZjkwbzZXL3N2aWhSRjI5Q1hCZ1JBWWNHS1RHZ3QxSGJjdXh2bFp6bVoiLCJtYWMiOiIzMTg3MWYwNGI2YjAzNWZkMTI1YzdkMTMzOGFkNGQ1NDQ3NTNlOGRkYzkyNzExNGM0YmQ0ZTBhZDNkYzY2NjI3IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:03 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c180ff46e3c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4128,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4124), with no line terminators","md5":"2478af97a45a4c5fdf72bae4b89337f7","sha1":"f3f70a741eb10611ebc0f496ff4a4af7f6f3abda","sha256":"1613844e645666b32335dde254d80f1470fc71209a7433439264585e32fa722a","sha512":"66f6af8b578d5635ec02cfda558fe18daa83692cd4d080777ccbced3e1593a90bddffd99012d8fc82ffbfeb9e51fcb4f770596d845d16e0ef51825159e7d3e1a","ssdeep":"96:rOvK4tLuGtoDHHyMNJdNqiViM71GNt71W8:rOvrLuGEaiViy1+tD","tlshash":"c081716731450832b1a7e2f839e1938f31b18253eb8655784df99064c59ee98caff6cc","first_seen":"2026-01-21T16:07:28.091429Z","last_seen":"2026-01-21T16:07:28.091429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":856,"timings":{"blocked":17,"dns":1,"connect":1,"send":0,"wait":822,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/favicon.ico","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:04.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nCookie: XSRF-TOKEN=eyJpdiI6IjlUN253S1I4STgrMGh6OWpWN2IzTlE9PSIsInZhbHVlIjoiZWUxbEt1UVo4Y0lxWk56VjNFemFTcDZUdHdWalNpbHlsR3Y4cjgrZUxKNTBXUWNGRWJGejJad1F2RVpyeHExRU91YXBBZ2w2c05vM2tLSmxvVkUxbEZObEZidVFUd1UrUHBHNzVoZGVmZ3ltbUVhRndjdUx6UXhJOXZUYW5uaDYiLCJtYWMiOiJhN2YzYmZmZmFkYWQ1OTg1ZGU3MTdiNTE5NGY0NjIzMzA2ZGViNmZjYjIyZjhkZTExOGFjZmU3YzhhZTY2ODJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjJqd3Y1NWFWbldyWWhnWGJNc0dheGc9PSIsInZhbHVlIjoidzdSbS8xTW90aEZCdi9UVjlBTHg0bkRwRGM5dHF5YStqNlE4ZElLQmFYNVdDK1ZaWjdHRWZsd3dMWlVHZ2RPL215KzROeHNBWFBTQVpoaGVDSlY5TXlaZjkwbzZXL3N2aWhSRjI5Q1hCZ1JBWWNHS1RHZ3QxSGJjdXh2bFp6bVoiLCJtYWMiOiIzMTg3MWYwNGI2YjAzNWZkMTI1YzdkMTMzOGFkNGQ1NDQ3NTNlOGRkYzkyNzExNGM0YmQ0ZTBhZDNkYzY2NjI3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:04 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVIZOFBE0WrYFCMBZlf1hsGvDTe%2FEOMSw9DgJrDbRR0dX0mC5ayRG696u5KKrxH7uqcYqrrTic9r14a%2BsQPhrFvGRmPfeehK7KM%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjUxbkRSY3RRQno1emlNWlpnRnQwWmc9PSIsInZhbHVlIjoiSERrcHNQQ1d5SHNZbVk5WGdiSnh0RENtMWhTa1RYcGhuSVdaVitzTnh1andpSHZOWjJzekNQRHRqYVVucDhtWVFKdEZqeTE5VXQ0QUNHd0l4ellySktadlBTZ1hqQUdlcDJEaXp2THFNMmpEdTE5UDJxTVlVN3BaWnlJbjZkWkEiLCJtYWMiOiJjZTFlOTA3YzcwNjZmNDVkNGJlNmRkNDM4YTRkYTJkNDRlZWY2YzFlZDQxOTkyNTNjZTBhYTA1ODdkZGExZmMyIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:04 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImVZOEZFZXpCYmVGMUZyUklteENYTnc9PSIsInZhbHVlIjoiMDhBaWVDb2pQWWtDd1pGT1ZkNFd5c1FHbkYvMWhxVDVrMEtKck4yVG5hTTBYYjFyN3hZNHdiOStZbWxGb1pNaXkyK1ZaQzh4OTdLeEVlT0JYTVNPWjVacG5JRmtxaXhFdDI4SE5KZVpXVFJYNkpHUndFWVFpRE90ZGhWc2FQZkwiLCJtYWMiOiI1YTFlYzkxNmUxZWY3ZTlmN2VmNDAwMTEyYmZhZDhlYmY1NGQzNDRkMTA5MDk0NDJkMDUyNjhjNzU1ZWRiYTQ3IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:04 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c180ffa38e056b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11254,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (399)","md5":"b0d3b34294c0d3b11813cbb8e78ba653","sha1":"8cab51e4c66be92488ff439acae05f68ceccbd43","sha256":"ec7061bfec61b9c8f47dec071126c3b9c23786a752bd421d144e945854bb711b","sha512":"318e3dad27e022c001aea4a38501e15c884fc89e9e669be3962a5e9210ba3ad758a6e2bef061187ccebfb7b69d495ade1d662cd8183719d0b668a8ca4565f55a","ssdeep":"192:fvSJGOnWvXZ0IcQ8X2t56yTmhp52Ee83PDkLT6pejYlg04/ZlgdZOxU:XSqZ0IRd7Chp526rkLRsYuZOxU","tlshash":"eb32c83250a0743b2923e5d5f7a4178f75a1e113d9270b80b9fd92a48fd3ed2cea7149","first_seen":"2025-11-01T09:42:06.687375Z","last_seen":"2026-02-17T07:18:09.174033Z","times_seen":4573,"resource_available":false,"data":null}},"time_used":803,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":803,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T16:07:13.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"POST /ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 5\r\nOrigin: https://board.deadaiyio.com.co\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nCookie: XSRF-TOKEN=eyJpdiI6IjUxbkRSY3RRQno1emlNWlpnRnQwWmc9PSIsInZhbHVlIjoiSERrcHNQQ1d5SHNZbVk5WGdiSnh0RENtMWhTa1RYcGhuSVdaVitzTnh1andpSHZOWjJzekNQRHRqYVVucDhtWVFKdEZqeTE5VXQ0QUNHd0l4ellySktadlBTZ1hqQUdlcDJEaXp2THFNMmpEdTE5UDJxTVlVN3BaWnlJbjZkWkEiLCJtYWMiOiJjZTFlOTA3YzcwNjZmNDVkNGJlNmRkNDM4YTRkYTJkNDRlZWY2YzFlZDQxOTkyNTNjZTBhYTA1ODdkZGExZmMyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImVZOEZFZXpCYmVGMUZyUklteENYTnc9PSIsInZhbHVlIjoiMDhBaWVDb2pQWWtDd1pGT1ZkNFd5c1FHbkYvMWhxVDVrMEtKck4yVG5hTTBYYjFyN3hZNHdiOStZbWxGb1pNaXkyK1ZaQzh4OTdLeEVlT0JYTVNPWjVacG5JRmtxaXhFdDI4SE5KZVpXVFJYNkpHUndFWVFpRE90ZGhWc2FQZkwiLCJtYWMiOiI1YTFlYzkxNmUxZWY3ZTlmN2VmNDAwMTEyYmZhZDhlYmY1NGQzNDRkMTA5MDk0NDJkMDUyNjhjNzU1ZWRiYTQ3IiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nSec-Fetch-User: ?1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":5,"data":"line="}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mc4K%2BicCaciRswDwJFUkMYKwWqNipqJSBo9AEhn%2FTRDCXpyuccJBbu0VR%2BmUDwr17HC%2FZzMMxif8M6WLTM7k%2F7aAqQCWGkGnNYU%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IlJXb0lxTUFtbm5PVW5FWk9HVklBcFE9PSIsInZhbHVlIjoid245c0hheHNydE9CamZWYi85K1NiQ2R6SUhBdTkwcmN4TFhTQ2pRaFBSRGpRMmgxUjdBSUVZMDZHZkN4RDNGUDdYODZpWG1naDhTZTZRd2RwdVd2M0lpSG9vNTFuUVJVY0VzemFkMmUxSnN6aFhPeUE3TTJwWWhEUmk1RVpjRmYiLCJtYWMiOiJiZDc4NTM3OGIwODU2ZDYzM2VkNzMxNDFhM2E0ODIzZmYzYmMxZmNjNjdkMDY2MTAxMTNiMzFlZDk3MDZiODIxIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:14 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6ImNLQ0lCOTNTejhDb29vMzVsUlNRRVE9PSIsInZhbHVlIjoiUDJMTGFKcGM0RmVKUzhtbytrNzkxS1pMSW1PdFExM0lOa0huaW9RYVMzNC91N01tOHpKNDNXY2ZRcGJKUWlGYWNGRnoybjY0MHlBcXZFN1hFaUloTWZjZ2I3NTZsMER0K3ZTZlduRUVlbjFkVWZOU0lDcVZrNlNTejBIK0l6R0oiLCJtYWMiOiIxNTkyZGEzMjQ1YzdkODU2MTg0ZWE5YmQ3MGQzMGQxZGM1MmE4YWRjZmEzZmNhYzAzNjM4NmI4OTg2NTgzNWMwIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:14 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c181036482b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with no line terminators","md5":"7828f7ae07241c0978ce44e5cc4a0a83","sha1":"a9c93817a15b03507c3c21021fba863d3ac62b7f","sha256":"a65713ab569fbcda76f7d8cd7827b5cc51b58eb5d1b03b50c91924ba9c785fd9","sha512":"3bb6311f102cc50b6e8f2d2739185b17fb0715f94d0100cb7636c76e59e79dd2bbb58046e0e13679efc7c1b92696e68b09354010992d96af34399577f443ab39","ssdeep":"","tlshash":"69b002df0c4182453af211129a537359357350eb1804f05255515510756cb8f972fdde","first_seen":"2025-06-23T00:01:47.918545Z","last_seen":"2026-06-02T21:13:59.23222Z","times_seen":41098,"resource_available":true,"data":null}},"time_used":792,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-21T16:07:14.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nCookie: XSRF-TOKEN=eyJpdiI6IlJXb0lxTUFtbm5PVW5FWk9HVklBcFE9PSIsInZhbHVlIjoid245c0hheHNydE9CamZWYi85K1NiQ2R6SUhBdTkwcmN4TFhTQ2pRaFBSRGpRMmgxUjdBSUVZMDZHZkN4RDNGUDdYODZpWG1naDhTZTZRd2RwdVd2M0lpSG9vNTFuUVJVY0VzemFkMmUxSnN6aFhPeUE3TTJwWWhEUmk1RVpjRmYiLCJtYWMiOiJiZDc4NTM3OGIwODU2ZDYzM2VkNzMxNDFhM2E0ODIzZmYzYmMxZmNjNjdkMDY2MTAxMTNiMzFlZDk3MDZiODIxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNLQ0lCOTNTejhDb29vMzVsUlNRRVE9PSIsInZhbHVlIjoiUDJMTGFKcGM0RmVKUzhtbytrNzkxS1pMSW1PdFExM0lOa0huaW9RYVMzNC91N01tOHpKNDNXY2ZRcGJKUWlGYWNGRnoybjY0MHlBcXZFN1hFaUloTWZjZ2I3NTZsMER0K3ZTZlduRUVlbjFkVWZOU0lDcVZrNlNTejBIK0l6R0oiLCJtYWMiOiIxNTkyZGEzMjQ1YzdkODU2MTg0ZWE5YmQ3MGQzMGQxZGM1MmE4YWRjZmEzZmNhYzAzNjM4NmI4OTg2NTgzNWMwIiwidGFnIjoiIn0%3D\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:14 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MFPTq5YKJ6%2FDOkN3C4JV%2FZsahE7CqJOQEmTB5RqvKjACD5dLgDL5eLwJilmP32lUvvGLI71qzErfQWdtZ6mcHtkQ0tiaimcL\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjNDOWV5S3lBbkRLLzJNTzhKdXNqSWc9PSIsInZhbHVlIjoicFBGTktCMDNiU1NDaEVXc005ZldmZTYwK1BhUzV3YUNmV0hrbGM0RDA4Vmt3ajJib0dZQ1VHaFgwcWxYazh1MEtwdmFmWXpnbzVjdGJLbWRUWjBQVDJ0bVRDcE5XdERYVW4rb0czenVvVFpHRWVDanpGUWJ0VFFWdXZnUm5ybkkiLCJtYWMiOiI5NGRlZDlhMmRkMDE5ZTMyYTdiZWE2ZjA2NDVlMzJjM2RmODlmODQxZjg3MWMyZDdhNDllNDM1NzUwOGY5ZDg2IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:14 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6InZJV2JieTFEL3hyTUZOOEFtMThQZmc9PSIsInZhbHVlIjoicHBqOE1UWGNibEcyN1A3Ylo0c0c1cjNwK3pXOHA0VDZwM25lWkx2aFhwb05CRmdmVjNSQUQ0aEtmYmQzcCtsWE9YbHRpc09KbC9iQTFiMmNyTHBsWDVxYUdmR1A0V2JuRWh3LzdiTEo1TVoxSU9pcHRRc0w1eHRzam9RQm9QdkUiLCJtYWMiOiI5ZWZlZTE5NGIzMzhlOTU1MzhhN2UyYjQ2MWIxZDk2ZDBiN2I5ZDNjNzlmMWYwNmNjODI1MmZjMmFlZmVmNzY3IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:14 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c18103b7e0156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6286,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (6286), with no line terminators","md5":"73a041a0f0f2aa35d7e6d045dfcacb86","sha1":"e92dfcdade1fb6f0ddea8b0f06b6c5a829cfe863","sha256":"fef9dbd68b728dfd8db45fbc82b47769f12b10e38d1f3d65a5a9b37530f9b080","sha512":"a1e6216a17d715e1e4578615dde45192c048d85e14c12c909521e3d3ef4482646a832c7130aeb08ed8f54374942c5ce688cfcc157d94739a3443e866915b1fee","ssdeep":"96:sE3AUUweo/l0XM4F33JOUtn2Us8CQT697lplegnfbA43w:zwH4K8C33JOgn2U3CQT697tnfbA4A","tlshash":"cad14b96632897bc5873dcfb5c83e0961964e961322094cd1eed88c2454eeddb0eb7ec","first_seen":"2026-01-21T16:07:28.094454Z","last_seen":"2026-01-21T16:07:28.094454Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/favicon.ico","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:15.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNDOWV5S3lBbkRLLzJNTzhKdXNqSWc9PSIsInZhbHVlIjoicFBGTktCMDNiU1NDaEVXc005ZldmZTYwK1BhUzV3YUNmV0hrbGM0RDA4Vmt3ajJib0dZQ1VHaFgwcWxYazh1MEtwdmFmWXpnbzVjdGJLbWRUWjBQVDJ0bVRDcE5XdERYVW4rb0czenVvVFpHRWVDanpGUWJ0VFFWdXZnUm5ybkkiLCJtYWMiOiI5NGRlZDlhMmRkMDE5ZTMyYTdiZWE2ZjA2NDVlMzJjM2RmODlmODQxZjg3MWMyZDdhNDllNDM1NzUwOGY5ZDg2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InZJV2JieTFEL3hyTUZOOEFtMThQZmc9PSIsInZhbHVlIjoicHBqOE1UWGNibEcyN1A3Ylo0c0c1cjNwK3pXOHA0VDZwM25lWkx2aFhwb05CRmdmVjNSQUQ0aEtmYmQzcCtsWE9YbHRpc09KbC9iQTFiMmNyTHBsWDVxYUdmR1A0V2JuRWh3LzdiTEo1TVoxSU9pcHRRc0w1eHRzam9RQm9QdkUiLCJtYWMiOiI5ZWZlZTE5NGIzMzhlOTU1MzhhN2UyYjQ2MWIxZDk2ZDBiN2I5ZDNjNzlmMWYwNmNjODI1MmZjMmFlZmVmNzY3IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:15 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fq%2BZTYMRN7Ap3GQXxEh7lVgcw9zBAwYR3pCGWn33e3icS9sNi1Zl81cRjHm5oxzjDwaCpVlTnh8wdS2803IcTe9UhEcom9KFljg%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjNBa2wwc2crOVJlYXpKOU5tMVhFeGc9PSIsInZhbHVlIjoicitTaHgyQXY4L3Fka0ZyUlR6eXRRbnMxZVVqZEdUZks1ZzdHbE1OYjRXNWozYVhTczZUU0NyYUMyYkVaMVlJVzBPTUx3Q0dqS0psWWZnN0ZJNGtpVFoxTCs5MVlaRWR0THhqNnRoN05iVFJqeWU0Qy9oQmpEZkdBczNkV1k2b3IiLCJtYWMiOiIzMmUwN2U0NmVkMjkyOTBhZWQ5ODY5NDA3MWE3MGI2NDliZmU0YjE1ZTU5ZDVkNTQ1Zjk0ZmQzMjU2MDNmMjRhIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:15 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6IlY3Q2tnZWRaOUQ2c3ZVWlFIM0Z4NGc9PSIsInZhbHVlIjoiTCtXb1hMWk9DWTRRK2JwQjNVV2k5Y3V0UGdKYlkrYWZmbGNHaUNpUjF2TVk3eHJ4ZEJYUk9WcUd5SHJOdlY1ZWJ0SDhncHFVbDJRaytKbVFDWUFoZ0VOSlFmVWFaeUc5UkhEZWxtTzFYVFdWK2xRZmduOW1zbHAyVGl1N25wU2wiLCJtYWMiOiI3NjgyZTZiODYzMDdkZGI2MGJkNjUyNDAwMmJlZTUzZmNjYTAwNTUwNDNjZWZmM2FiNDE1MmUzNTAyOWYzNzczIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:15 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c18103eca0656b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11254,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (399)","md5":"b0d3b34294c0d3b11813cbb8e78ba653","sha1":"8cab51e4c66be92488ff439acae05f68ceccbd43","sha256":"ec7061bfec61b9c8f47dec071126c3b9c23786a752bd421d144e945854bb711b","sha512":"318e3dad27e022c001aea4a38501e15c884fc89e9e669be3962a5e9210ba3ad758a6e2bef061187ccebfb7b69d495ade1d662cd8183719d0b668a8ca4565f55a","ssdeep":"192:fvSJGOnWvXZ0IcQ8X2t56yTmhp52Ee83PDkLT6pejYlg04/ZlgdZOxU:XSqZ0IRd7Chp526rkLRsYuZOxU","tlshash":"eb32c83250a0743b2923e5d5f7a4178f75a1e113d9270b80b9fd92a48fd3ed2cea7149","first_seen":"2025-11-01T09:42:06.687375Z","last_seen":"2026-02-17T07:18:09.174033Z","times_seen":4573,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":778,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/eyIT8aVbOQlsEGvIL4qhmjy6rNXWwcgnc7rWpr","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:16.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"POST /eyIT8aVbOQlsEGvIL4qhmjy6rNXWwcgnc7rWpr HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nContent-Type: multipart/form-data; boundary=---------------------------101243264416111854728467649\r\nContent-Length: 320\r\nOrigin: https://board.deadaiyio.com.co\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNBa2wwc2crOVJlYXpKOU5tMVhFeGc9PSIsInZhbHVlIjoicitTaHgyQXY4L3Fka0ZyUlR6eXRRbnMxZVVqZEdUZks1ZzdHbE1OYjRXNWozYVhTczZUU0NyYUMyYkVaMVlJVzBPTUx3Q0dqS0psWWZnN0ZJNGtpVFoxTCs5MVlaRWR0THhqNnRoN05iVFJqeWU0Qy9oQmpEZkdBczNkV1k2b3IiLCJtYWMiOiIzMmUwN2U0NmVkMjkyOTBhZWQ5ODY5NDA3MWE3MGI2NDliZmU0YjE1ZTU5ZDVkNTQ1Zjk0ZmQzMjU2MDNmMjRhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlY3Q2tnZWRaOUQ2c3ZVWlFIM0Z4NGc9PSIsInZhbHVlIjoiTCtXb1hMWk9DWTRRK2JwQjNVV2k5Y3V0UGdKYlkrYWZmbGNHaUNpUjF2TVk3eHJ4ZEJYUk9WcUd5SHJOdlY1ZWJ0SDhncHFVbDJRaytKbVFDWUFoZ0VOSlFmVWFaeUc5UkhEZWxtTzFYVFdWK2xRZmduOW1zbHAyVGl1N25wU2wiLCJtYWMiOiI3NjgyZTZiODYzMDdkZGI2MGJkNjUyNDAwMmJlZTUzZmNjYTAwNTUwNDNjZWZmM2FiNDE1MmUzNTAyOWYzNzczIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":320,"data":"-----------------------------101243264416111854728467649\r\nContent-Disposition: form-data; name=\"bltpg\"\r\n\r\nj66IPU\r\n-----------------------------101243264416111854728467649\r\nContent-Disposition: form-data; name=\"sid\"\r\n\r\nxdYh86DUBjFHG5Cxfc9tYARetos6aekx541hS7l1\r\n-----------------------------101243264416111854728467649--\r\n"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:16 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=621QPStZqhPPFpdX4WJ67PcTA3XkZYvipdvYJ7GR6FtBh2mayTJSFKyVEHq9wOuQcRPj0q1BP1gnprjInM0D2TV3%2FAGMHRcTSC8%3D\"}]}\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IktEek1HQVdXMGNhUFBPaFh1cTc1cnc9PSIsInZhbHVlIjoiMHd1dG9CcTdIcFN0Q1ZkRVNTYVNsTlZuWXdwUC9QY2lWLzhHMktoS0VCalRvWW5jUEpST3hONWd1bFB3d2lKcmtDOGxqeVkyYTJNR3hkZFhBUmhYY0sxRDJMeGd1TGhEYUx1aDZ6eGM4S1g5LzNIOExwTStNc3BTdHFSVGQ0M3QiLCJtYWMiOiIzYzZhZTAwYzU5ZTdhMWY4ZTlkZmMwZjUyNWM4MTIwODIxMWNhODUzYTQyOTNlN2NhMWZmMzc5Y2JmODhlZjRiIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:16 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Ikp2UVFwMDQwUjI2ZlRWUnJuRjB1cHc9PSIsInZhbHVlIjoic3BRbkgvTVhDbjkwZXRHRVI5U21sWDFpbmtFSWxBRjE0cHBBREtLSjdyVFk3SE5ISUVDRUxKTm52NUFZMThsRTBlUlBTN3Vad0ttd2xxZzB1Wm1oMHRlaXJtR3RMZVlxeTN2bDV2UWFqVVE2TE50U2d4R1JBOXJrc0dpL0tkb2ciLCJtYWMiOiIyMWJhZWYyZTRjOTcwM2Y2MDM1OGI2ZTFmNTk4NzU2ZjE0ZmFiNjZmMzBkNTNkMzM4ZGYwOGU4ZmU1ODJiMWMxIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:16 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\nvary: accept-encoding\r\ncf-ray: 9c1810454af156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5820854f62a6eb3d38ba7ba0d1b3ea75","sha1":"639df0b84fe699b4a290a713fd6b9a94bd4deb95","sha256":"912d0c07da7bdb22cdae025b96da26d01523aaab7362edb28544e3949deb369d","sha512":"4452c0a26fa81357f95bf6160c3f5d35ff39f62e03d5faa1e69eb9dfdcb2c83eda4235463ee4065dceb534cc497891a05535467337ad84693e5fa48c317dbbbb","ssdeep":"","tlshash":"f67000020000208008803c0000000a203ae00aa0822a00c0802c00288e08088f08a000","first_seen":"2023-03-13T15:21:35Z","last_seen":"2026-06-03T01:04:16.096102Z","times_seen":91340,"resource_available":true,"data":null}},"time_used":424,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":424,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}},{"url":{"schema":"https","addr":"board.deadaiyio.com.co/favicon.ico","fqdn":"board.deadaiyio.com.co","domain":"deadaiyio.com.co","tld":"com.co"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com","date":"2026-01-21T16:07:17.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"deadaiyio.com.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:48:59 GMT","end":"Mon, 06 Apr 2026 22:46:19 GMT"},"fingerprint":{"sha1":"90:02:88:4E:0B:DC:71:76:4E:0E:AC:AC:F8:D9:BE:B9:EF:D6:C7:5E","sha256":"09:3D:41:22:94:B2:C2:C0:9C:C6:C1:6A:F6:7D:CD:F2:8B:7A:AA:6D:98:15:2A:11:D9:A0:F3:82:42:7D:0D:AE"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: board.deadaiyio.com.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://board.deadaiyio.com.co/ecvVPHGAbgZkd@F/$aaron.rokstad@rokstadpower.com\r\nCookie: XSRF-TOKEN=eyJpdiI6IlBzMmJGWDJhMWZkcHBMRityZ3pQZVE9PSIsInZhbHVlIjoiaS94OC83SytNZFdsVVNDN2ozWHNKTDVpeUEyTCs1VS9pbTF2OFJhY3BVNjhFTmhhS0FaYk1FSEx6bHhLTkJ3MDNIN25IZXRvdnZGM3V6S3ptcjNRWTNxSDNMa3YxME1Da2E2SVhrOFNHdkwwbmVLYVpiYTdWdWRYckF3aVA2SEQiLCJtYWMiOiI2MDVlMGRmYjk3NGU0MjY1Yjc0ZWNhNDkyN2EyMGE2N2ZlOWJiMjI1OGQ0ODk2NmYzYTRjOTVhYmVkYWMzOGE4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii9TV2xEYUxjMVJ0YlN3eEQ2Mko1SVE9PSIsInZhbHVlIjoiZExPeXBiZ1pzU1luejJMb2d0RVkyc24xQ2RUeHlIb09ZMlBsN3pGSmlHQmlEakhNTjk2Q0JUaUtXWVJUanR3QjA2cjd0YTdWUXJZWVAwZnpaSC9GUUd1RGJIblBuVy9SNWFsblpSRUdHZVEvcmlDVitka2hlMVdJZFgrMUNHaFEiLCJtYWMiOiI3NGQ5MjZiMmM0OThlNjZlNjg0ZGYwZjhkMDVmMjEwMWE3ZGY0MGM3M2U3NjlkM2I5MTY4MTJmNzg1MDI2ZjhhIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 21 Jan 2026 16:07:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, private\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76Fuc6mCoV3Yzn85pV50EeVv%2FSys0u9qvCChIKplOAOE284Cq6nZvptjejWkqZu4ZKHCzvSid4jcf9az%2FURXbXxLlQitoFRdjF4%3D\"}]}\r\ncf-cache-status: BYPASS\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IkZhQlRYRkhsV1BLdnhUa3pZYnl3a0E9PSIsInZhbHVlIjoiUHIwSFlmQTJocFZQT093RUgxdzNzNnEvaFNXL0t0alB0RXB5UkN6NXMwNVRrRTh3ODBlRk5ucVBTTVlMMytRaVBtVnhqUERsR0RSbzU4NHhwZWNhZncwR1NLeTlKMElKQlNlYWJUQkhsRHhMeDNhV0htNXVmSjhhRExTZjhmQi8iLCJtYWMiOiJkOWMzYzliMjNlY2IzNTIzMTdlNjExYTYzMzdjOGQ1NzBhMjVhN2U2YjY3OGQ4Njg5ZDI0ZGJiMTE2OGZiMGNkIiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:17 GMT; Max-Age=7200; path=/; secure; samesite=none\nlaravel_session=eyJpdiI6Imw4NXRrV2YvMmJQVFJ0Q3pTTnFxNEE9PSIsInZhbHVlIjoidzNYMFpsTjh3K3dpcG5Lcm12NmZlTWZxSzkrWDRjaVQ5L3ZJK0xaMDhTd0JQZzdOUWJ4dzBpRDRVNnUzR1U4NzdtNDh2SjV0WmMxcUpDZFhmeDRXNERCanpLYXdReDI2ZFJHcHZ1cmdqVk44dlZ1a1Nmdm80bndQaGZLazN6Y2siLCJtYWMiOiJiYjUzYTFjZTc1N2Q3N2FkYzM1OGZjMjkyMjRmYzA4MjliMGI1MDc0YWQxZjdjZTQwNzRlMDU0NTg5NjBlMTY2IiwidGFnIjoiIn0%3D; expires=Wed, 21-Jan-2026 18:07:17 GMT; Max-Age=7200; path=/; secure; httponly; samesite=none\r\ncontent-encoding: br\r\ncf-ray: 9c18104c0a6356b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11254,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (399)","md5":"b0d3b34294c0d3b11813cbb8e78ba653","sha1":"8cab51e4c66be92488ff439acae05f68ceccbd43","sha256":"ec7061bfec61b9c8f47dec071126c3b9c23786a752bd421d144e945854bb711b","sha512":"318e3dad27e022c001aea4a38501e15c884fc89e9e669be3962a5e9210ba3ad758a6e2bef061187ccebfb7b69d495ade1d662cd8183719d0b668a8ca4565f55a","ssdeep":"192:fvSJGOnWvXZ0IcQ8X2t56yTmhp52Ee83PDkLT6pejYlg04/ZlgdZOxU:XSqZ0IRd7Chp526rkLRsYuZOxU","tlshash":"eb32c83250a0743b2923e5d5f7a4178f75a1e113d9270b80b9fd92a48fd3ed2cea7149","first_seen":"2025-11-01T09:42:06.687375Z","last_seen":"2026-02-17T07:18:09.174033Z","times_seen":4573,"resource_available":false,"data":null}},"time_used":430,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":430,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Tycoon Phishing Kit","verdict":"phishing","severity":"high","comment":"","tags":["phishing","tycoon","aitm"],"meta":null}]}}]}