{"report_id":"aae1a8c0-4785-482e-87d0-041cf2956e5c","version":6,"status":"done","tags":[],"date":"2026-03-06T10:15:51Z","url":{"schema":"http","addr":"surfmine.com","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"surfmine.com/","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"title":"SurfMine - Secure and Profitable Cloud Mining","dom":{"size":311468,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (20904)","md5":"c4a376c5ee0c4e46abcaf81e0ba78afe","sha1":"0f36f2241038761de3704db2268567512e7ca03b","sha256":"165216effc8169e63bc6c251132b5dbe83812ae407b0994d735c2980724d0242","sha512":"9350bd57fe2d98c848dc93724397f2b3eb6d4a7b7cd50c273d351c4adeb3e2fcd41534d60dc807342884b09dc97a901b4b281fc5eefa39991a156cf93f991ee7","ssdeep":"1536:p1oKvDHN9ZCJFc1rRdlYlMd3t7IXyVwmtQhBmtrRdlYlMd3t7IXyVwmtQhBmyXef:puLZKEdVLTPfoEf3WlsU","tlshash":"6f6443bc19312cabc57f9ae6d52a167de1b15edbdc3b06207bad63082fa1c0099f5d10","dom_hash":"domhashcb2eece07f4cd8ae0a357183da6fcb9b","first_seen":"2026-03-06T10:15:56.353709Z","last_seen":"2026-03-06T10:15:56.353709Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"surfmine.com","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T10:15:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"surfmine.com","ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-03-30","domain_rank":2554310,"first_seen":"2026-02-14T18:41:18.827831Z","last_seen":"2026-02-14T18:41:18.827831Z","alert_count":29,"request_count":29,"received_data":1166601,"sent_data":13675,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":2,"received_data":112450,"sent_data":902,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"files.salebot.pro","ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-12-10","domain_rank":6277906,"first_seen":"2020-12-19T19:35:28Z","last_seen":"2026-02-19T13:48:09.371028Z","alert_count":0,"request_count":1,"received_data":10759,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-01T22:28:03.022415Z","alert_count":0,"request_count":1,"received_data":4596,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"salebot.pro","ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-12-10","domain_rank":164358,"first_seen":"2019-06-17T09:43:31Z","last_seen":"2026-02-26T11:01:25.05546Z","alert_count":0,"request_count":17,"received_data":1095150,"sent_data":9135,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":4,"received_data":150071,"sent_data":2140,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":3,"received_data":23218,"sent_data":1427,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-03-01T22:48:56.265504Z","alert_count":0,"request_count":2,"received_data":178304,"sent_data":807,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-01T23:26:21.00081Z","alert_count":0,"request_count":1,"received_data":26888,"sent_data":399,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"salebot.pro/assets/online_chat/chatbot_render-e4b2b7fe5b12da4f5a23776afbff63095c8577747f109fbee1e634c9b04d6c8b.js","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b166b04bdf3e8f5c4f3cfa4b39fe8768","sha1":"54e9f9acb4519a7c62b403b5f8b898cd2497cdcb","sha256":"469335a2b4dc615eea9d3447216609a50497cbcbeab57626ace624d7a30b0846","sha512":"ba7d4adafc68b0c0e1a2613f7228835925c21c4e0e1fb8f864fd75c5e7d4ae474b1d37d4036f146d7abceb5df639e87683e93e6c60bc29eccb8ceed5e797c8bd","ssdeep":"6144:AHgGk9F86bOF3KE39nhoRCsAB1yGH+BWjMkmffOPOkaM1Z:U40H+cMkm3OPOkaMf","tlshash":"8644e68aa3385d3f299f77d2d4b72f0de8a624065401c174f9fdacd65760a88217af38","size":267723,"data":"","first_seen":"2026-03-06T10:15:56.361109Z","last_seen":"2026-03-06T11:25:27.964655Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/js/scripts.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95f6eae4d95eb672fa600c86bbf90491","sha1":"80c58d2c879f714e26332eee64f5679ff6775be1","sha256":"a8c5126532941cfbce4d05d30bd724f11dbaf4676b7b4fd478a3229de81be67a","sha512":"cff5fbccc7019d30b9df5fc1f09d0db8c030d893aec3f856efbc4ea54b8b1af677d5cd00a7cf10cf703be52f9be6ec120e551c300a48a97e2473666a0f45afdb","ssdeep":"","tlshash":"17111265f2f619d5153fa4378277a50c259b847e7207832164e71f852e411786322668","size":1039,"data":"","first_seen":"2026-02-14T18:41:22.3365Z","last_seen":"2026-03-06T11:25:27.973485Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea57767e162e3f745631d350970eddd4","sha1":"20be1b56a6c7c770d423d35b2acddbc2d4fd27dc","sha256":"ae192c86b3dbb97177d15832986a4ff9dcab8f17e4508d37f2ae4d9075a0e2a6","sha512":"ecbed885b61ffa61d1ae1df0861120f606365bcf4decbfc20d8c38f974f7db31152f41d86e1fa5640600ea4c37835056af17b8043d139261a6f1e2024a533480","ssdeep":"","tlshash":"9690028468035f45007a08d04142170d021144524658160a19884684130047a11c6481","size":44,"data":"","first_seen":"2026-02-14T18:41:22.365841Z","last_seen":"2026-03-06T11:25:28.006361Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/js/chatbot.js?v=1","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e03e754deddc344dbfdb1e9e26acbe88","sha1":"4b438dec4783d9d537a63ab9435cd8a307dd8b08","sha256":"79a45afa22d55092e56a08b5f303961f7a6165786728dc23db97d8f6dba8aa53","sha512":"c8ffa036608bf3067c3cde8503093ae85362c139e5ea19712b046d82b22e42513269e8a5a00ead49a31a88e50f81b8997a470bba68d39e414c1635b6884dfe67","ssdeep":"1536:V/8i/vdr7uO09+g/fqwfGBxwsgO6FrARBQVJuZwym+51Ao7VMDi0ekI6IboF0xw2:V/8i/vWqwfGBxwWBQy7VMDi0ex6IboF+","tlshash":"8d93e6a963f10125828b716eadde92083572500f6a465c18bcfc45686fd0ee56bf2ffc","size":95479,"data":"","first_seen":"2026-03-06T10:15:56.372575Z","last_seen":"2026-03-06T11:25:27.997039Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/autosize.js/3.0.20/autosize.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bd5ce81bfb5b4f3e2ac487ac65f4daf8","sha1":"514dc1ea30ea9e4b84a55a689ba1f2c0fa7335c3","sha256":"280df42702ec950d12b698c40b45c507fc362089f53eb8376d3152dc1d5898dd","sha512":"10012889d2f384aadf560eea5fcc5914401e6e198132c5eb21c23487b54fc760b2032147b83bce014b3d0840130763aedbf92e5840ed96e115ad07235c1cbdcb","ssdeep":"","tlshash":"267166ea3760743451da4373261fa64fb22309cf679d40205629ecf42c74d992679ebc","size":3578,"data":"","first_seen":"2023-03-07T12:26:16Z","last_seen":"2026-08-03T12:04:33.773024Z","times_seen":2350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fancyapps/ui@4.0/dist/fancybox.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ce18f9ca64e6fdcac07ec7e97dac4c7","sha1":"603af3e02f381a658f135eb80f4eef78cc7e750d","sha256":"d1a7f655b0b8be63ec6bc38b04028198ba32b8aab86c194a2b628e80c59aca2a","sha512":"29b375fc71837e0090f63792b3c3b8b7725eab61b1bf6e0a4d6bde37d40aae4ffce1c9b97e953c6a7928b93e4db1ad4f9b1e123571d98486afc183269dbf721e","ssdeep":"1536:qlSed/3kDaF+oQi/86ZDmvFFRhzlTmtMDbg7MQG:G8Q86kvDRhLXPQG","tlshash":"32a3e62a724134318ae2b1a9911f6709b2766124a583c09d707edcd50fe8f8d30bbff9","size":105639,"data":"","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-03T18:46:29.372473Z","times_seen":3152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/projects/online_chat/script?online_chat_id=3878","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f4dd58b2e41b6688cad5a5338486b533","sha1":"e7b4935b507dc916c3318e7fb28e7e0bf0134000","sha256":"035ded95709760071c192c208229ae9d985718080466a1347e682f02e0c9ab84","sha512":"1d93c3a586b801bb37508e314a7b1fdf17ea9599cab9e84f98c08908930d1fabf16c43be73785d315cad78cee34ef0733c7682788209f7860cabe142ca7c1514","ssdeep":"192:fGlsYtD2mpOIStlomlbab4mg0xjXvxOSMYLYPuiZu1uILIAHBlASdBZo1KxhprMT:ulsYtD2BwMceVQMAhvbBhpw0EqLqtnp","tlshash":"7ba24275a6f80026435b626e5c8f6105b32120271d0e292cfc8ccaa92f5997d76f7fed","size":22888,"data":"","first_seen":"2026-03-06T10:15:56.405831Z","last_seen":"2026-03-06T10:15:56.405831Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/js/videotube.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"db83456cfc3eb814e603484d1d83f71b","sha1":"66f3f1ba05b2e398687605188f5e47c497cdeb46","sha256":"868cb58b465ae1c261549a87bd6331eb2267131ac03af837ac2013d2bf2f6cee","sha512":"f1e57296129415e9023d3b1a20f698312dd6473af09d8b88662e118a7ee97414b2367afeae4ed5d5db8d1cc24d59b466438f1e558fc9cb3aab18d9c6b86b4a9b","ssdeep":"96:0qXOXMV0OMULBO5MlqlwEUTq0S7l5N3gP5W5yMSmRm6z1+AJ:pX0fOyHlwEUT+lv6AZFZB","tlshash":"e981129aa2f70134a573a2bf2f4b52182b211217b38add947f6c93945fc5a1443f37e8","size":4202,"data":"","first_seen":"2026-02-14T18:41:22.325064Z","last_seen":"2026-03-06T11:25:27.99151Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-03T18:10:07.742281Z","times_seen":183684,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/js/slick.min.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"efe2dc57bf7b73137e9642e586ee272b","sha1":"ef584add252ef75060da8df06eb5e859caaedb37","sha256":"27bebe78e3b6a4b1664dd4fa83a8cd0187f051631a06248fefa3ef3991a5a92a","sha512":"5bed459f087e94f50bf65f4aac3b77314d2128c6f47480ccb3f405fd8a81e5352a68076d341a8d24572168afc5edcb447d590e7bbdcd834b3f87cbea13126f25","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYf:EPrYdlNixEePiYf","tlshash":"0513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42862,"data":"","first_seen":"2023-03-07T01:10:46Z","last_seen":"2026-08-03T11:12:52.049438Z","times_seen":8648,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/js/aos.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","size":14243,"data":"","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-08-03T18:47:43.519261Z","times_seen":11768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"383f4e71a819e1e393e4618cd0b5f153","sha1":"2e63571c42fb35a30eaa321efdac73bfc8be23b9","sha256":"b6d05354e32c1f2b95d963a9f84a87a73ef3a6147a50c096c58cb9906c9ea0f6","sha512":"19c966a5d7dc5975f409b90349f355c93d7a7e1f80fabb8691e4be23fc6937c2a4f2546626837b833ff18c306a88b5d4c01d0e1b974502b5fe6b3a7b77962c24","ssdeep":"","tlshash":"ab9002fa81575712506d154f3366410b01324036c02c4c7473c491649704104351794d","size":52,"data":"","first_seen":"2026-02-14T18:41:22.367484Z","last_seen":"2026-03-06T11:25:28.006969Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-03T17:53:58.463484Z","times_seen":496054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jquery.maskedinput@1.4.1/src/jquery.maskedinput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5c4fc94a985b8d3518d22f0a7182c92","sha1":"76828b1330003e7661c07d9dc7957978ecf72a7f","sha256":"fdca2d96e1ef11085a75adc583aeffbc556b7871392cccb0831bf82913a03c52","sha512":"18da979576df4e092c984b2348930c01d5d5727e300222d6e4aa172c8ac5eb4b6808f532215cd34b64245a0bf58d87b90f531ff3edf07a9dbb50b97f2f41bf21","ssdeep":"96:7hUtmapbdsmKcTMSr8q6sGKcE5OECLxxVh50sD9KL:6tma8mPT2q6sGKD5OHCL","tlshash":"8791c76dbddc721223f7587601afc06992367f15686bc690f421a8c0b87859b30a7d3f","size":4584,"data":"","first_seen":"2025-05-04T12:57:50.833979Z","last_seen":"2026-07-03T11:10:01.635777Z","times_seen":199,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/eth.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/eth.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p8WL61klz9ZRADwxTszWEHcCuLFoAijnO7Em9PzYzsfJQg60wjZvVUksxeN5TpBdAubmD5eoVuqYF0NsPJFD1d366HDG2SxQlzjwVQ%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"eth.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a9dff57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1053,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"15ce25f39db53972924105f7e8db5250","sha1":"5c3b8f7edae5ac9d42d40cc4db8b4e0543ed9bc1","sha256":"3edaf148f2cfeb5daa18586478caf7bc44ce6c2729abcd00bb6d974edc60a3d3","sha512":"8dcaf603ac043d981ad361189929fd253e8876a787a2ce7b49df2496d01d8ed75adf6485ad149ace2024176343d9ae88103acdf7a07b9913f35689c2a6e6159a","ssdeep":"","tlshash":"6e118cd6224cc104a94407a4eb8e6476f06bb5e8df850295baf01e1bfd888bf1c7e9d1","first_seen":"2026-02-14T18:41:22.341744Z","last_seen":"2026-03-06T11:25:28.003351Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/monets.png","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/monets.png HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncontent-length: 154457\r\ncontent-disposition: inline; filename=\"monets.png\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTTOZypTrWCNCcb8JFmhbvsl0GPiCKAk8YY4CMq9%2BmhPPbZkvG7Rn0rDyJSYN0BoUQaj1vXL4%2FKkLNaaJ0EQmV0IV0qxMaazLTbuag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099788dcc57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154457,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 851 x 703, 8-bit colormap, non-interlaced","md5":"109a172f4bad4c8f1a376dbf0ca6ce8b","sha1":"510b3292f0c77027ff4401e591f34ff518e2226e","sha256":"6219fadad83f1c1813f207faa2e83f422f60e11c28a5aff24dada13d9efbafbc","sha512":"fb1b64dfcfb1bb6ed837e7f8e8da3551ff5760144c233b0faa2ab4bd75c94e8eff7b20d239b3f64faf115a4fd5f80dbc8d0e80c2dbc626952151e95292bb027e","ssdeep":"3072:C2RauruLNvwhAW/kgiconL3eifOnP8x11KZ1zP7HfC2tmdS0X:TR7rIdh5vdfOnkx1gZP7Ha4m5X","tlshash":"2fe312ae9570a7a0f86da3343cd72140ffc8724760f6e7ee9912d390a9e24f90bd4940","first_seen":"2026-02-14T18:41:22.32597Z","last_seen":"2026-03-06T11:25:28.003943Z","times_seen":3,"resource_available":false,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/open_chat.mp3","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /open_chat.mp3 HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 156006\r\nlast-modified: Fri, 06 Mar 2026 09:50:01 GMT\r\netag: \"69aaa349-26166\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\ncontent-range: bytes 0-156005/156006\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":156006,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 192 kbps, 44.1 kHz, Stereo","md5":"1f56b356ea070d2c294fa2e8ef93e1cf","sha1":"ac58b70ff81bec463bf60a1d9602e4e416f80591","sha256":"d13b2c426827d2decfd551bbf2cde7108a739a0d4843e21b2bebef2edb5001f4","sha512":"2df495885972ab7cac0f1c6c0ac9a883073964d1faff76f54741fb35ca51d1362cbffa540081fd7b2c67a8356db32f7562934dca27ed2e7b26be1c35dce37f41","ssdeep":"384:wzYybxtJ/Wr8lRy9B6YodC2Q3MpEadmJRE3zTORK+T:wrdWoHy9QYV2WMpndmk3zTOhT","tlshash":"aee32b99334919a1d1db82fc00a7fb6bdba09c97cc6ad50df409772da9f9c1013d652c","first_seen":"2023-04-20T11:56:31Z","last_seen":"2026-04-22T23:50:21.205113Z","times_seen":22,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/logotype.png","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/logotype.png HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncontent-length: 16309\r\ncontent-disposition: inline; filename=\"logotype.png\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RRbDuoBPgA2tdIGOe%2F0zf%2BcDuLMY91EitmsY9%2Bjh8iAcZJJnElXzMfatPt8TXRp4T33zvyHW6Gzh5003ahmFcXcd%2FmUDontAl20t0Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099788dcb57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 323 x 358, 8-bit colormap, non-interlaced","md5":"ef3377f2acbd618c3adb02c60e98708c","sha1":"e565c20dd44190af7d08341702434da12b2186c4","sha256":"17180e9e12cc52976b7e3878bcb02ff5394805f5621ed360f24eef2a5d6828bc","sha512":"d6f777579d30afb3c2c624ee92e67ae50b628924da14d1ac46c9f646c926d4384e5f1bea72218c3817cf24223cf17d0b9e640715a608b19138e412f5d49e21ae","ssdeep":"192:BSXt2NHG/fxvGv5o22bCetoDUYkm93T9CF63EzIlsVESM2vfxWneEzujstRytAL9:oXMxKj6UW9jwTws+H2HxWeTjstZaAaQ","tlshash":"1b72d045e66157add82e337b1e06e0fa964034f818b5bd33f68f0a648da13d5da6a108","first_seen":"2026-02-14T18:41:22.334735Z","last_seen":"2026-03-06T11:25:27.996278Z","times_seen":3,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/idMining.png","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/idMining.png HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncontent-length: 39834\r\ncontent-disposition: inline; filename=\"idMining.png\"\r\nlast-modified: Thu, 15 May 2025 23:51:37 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=29%2FAkXJrYMain9QGaI2R%2BIFHgePYNM%2BjuvNGKRP2%2FDg04%2BlbT9uMpzDKAaghaXjLDLmr3UjeHo1py%2F000f2BOh3EldK3cSZPHMNAYA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099789dcf57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 598 x 282, 8-bit/color RGBA, non-interlaced","md5":"3fd4e6091448770c6dd32a813a0a43e6","sha1":"6c46d974e7d159d901b820f5afa644f5b871ea2e","sha256":"5d9c7ae0303d54127469733c4c77f464e0df8f2861b96b6801f336cc00ecb57f","sha512":"0bfdbf3a2ec7029a5cfc519b933c981d9ef7d83a9c943630a8c5ef31baa3c7f5186932ba7bfbe8e8874726ee33b96c81cdcda33f36c1068754ed4182ab29014e","ssdeep":"768:JnUycinVA4BmiTkct+7SQLVkVh+grgJI2gcMGsY3/VIvgXdBMyN1wmfPj+:JUvuNtfQRdgrM5vswtI4PMyN1nPj+","tlshash":"5a03f11014b6e122adec8b1f2ce81d365da84f057867ffeecdd8917940b113785a6e2e","first_seen":"2026-02-14T18:41:22.335676Z","last_seen":"2026-03-06T11:25:27.989294Z","times_seen":3,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/icon/chat-close-icon-123ba734315c6aee334413add0f9dafc52e52005bc7a0dcbf87062cbdfa1b728.svg","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/icon/chat-close-icon-123ba734315c6aee334413add0f9dafc52e52005bc7a0dcbf87062cbdfa1b728.svg HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 819\r\nlast-modified: Mon, 15 Apr 2024 20:16:03 GMT\r\netag: \"661d8b03-333\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":819,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"20515c9adea6bb42ac6cc66ff2cfb198","sha1":"57624cca14384a1c10ed5d17199b20c1fe7b5700","sha256":"05ef80b7a589363d14358b61bd67444ad5f5c18f01ea538e41042d2e51e398d0","sha512":"cb994d318d5280cfc3123274b820fc74f07a04087dc6b4afeecc7e6879a5e06d20369a7aa98ae70c1672e5bc0bf8dab5519cc0161296623d7947e55426dc0a13","ssdeep":"","tlshash":"73011b96a40b80f15a9e00ccbba4fdc8620cb0f7e39850cdb24992d2d9f3f85c4cb956","first_seen":"2025-10-06T05:29:16.934844Z","last_seen":"2026-04-22T23:50:21.209108Z","times_seen":14,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/online_chat/chatbot_render-e4b2b7fe5b12da4f5a23776afbff63095c8577747f109fbee1e634c9b04d6c8b.js","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/online_chat/chatbot_render-e4b2b7fe5b12da4f5a23776afbff63095c8577747f109fbee1e634c9b04d6c8b.js HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 25 Feb 2026 11:12:28 GMT\r\netag: W/\"699ed91c-415cb\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":267723,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32768)","md5":"b166b04bdf3e8f5c4f3cfa4b39fe8768","sha1":"54e9f9acb4519a7c62b403b5f8b898cd2497cdcb","sha256":"469335a2b4dc615eea9d3447216609a50497cbcbeab57626ace624d7a30b0846","sha512":"ba7d4adafc68b0c0e1a2613f7228835925c21c4e0e1fb8f864fd75c5e7d4ae474b1d37d4036f146d7abceb5df639e87683e93e6c60bc29eccb8ceed5e797c8bd","ssdeep":"6144:AHgGk9F86bOF3KE39nhoRCsAB1yGH+BWjMkmffOPOkaM1Z:U40H+cMkm3OPOkaMf","tlshash":"8644e68aa3385d3f299f77d2d4b72f0de8a624065401c174f9fdacd65760a88217af38","first_seen":"2026-03-06T10:15:56.361109Z","last_seen":"2026-03-06T11:25:27.964655Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/favicons/apple-touch-icon.png","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:30.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/favicons/apple-touch-icon.png HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/png\r\ncontent-length: 25800\r\ncontent-disposition: inline; filename=\"apple-touch-icon.png\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mqQVmsTy7FoUGPSqlUstr9QkogxkyAphEmxgc6vf1rq6bnktADM5yYQulO4WCU0PbUwbWtbe16C2td%2FZldb88Z2CEHdj8U%2FQZlUtyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997d8e4657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"0764d24f0d6335a650c969735f34eeeb","sha1":"0ea9bd0141a3f948d2905542cdd1588fb06f9ba3","sha256":"bc07a7c12c7e266031e8f5ec384b0313e16ca4f85f5d3718010628b7ecc76b8d","sha512":"fa56ccff16c36b89d28148aab6e9a9428394e171bc283c7fb4b9f9e3e4d37fe21b59cc8758c585e0900f2866eb2bb571f3a3f5676b05b250627bed9e77ab998a","ssdeep":"384:OdyYaIoapybc2p32VBj9yWCb8Y84dRWGDqLnvKWgs/4VDiANbtFwo:SXaIVuc2FuB9zCFRWBvrL/4lxNV","tlshash":"9dc2d0cf5a56cb5019673332081d72541077f4dcb6f4df23392e75a55e88e48d22a2ea","first_seen":"2026-02-14T18:41:22.343259Z","last_seen":"2026-03-06T11:25:28.000527Z","times_seen":3,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":105,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/youtube.jpg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/youtube.jpg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/jpeg\r\ncontent-length: 70086\r\ncontent-disposition: inline; filename=\"youtube.jpg\"\r\nlast-modified: Wed, 21 May 2025 01:27:11 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lyYFvLT5cX3T0ywad4supKR3YCBiPml8JtGedX4nhjIYo00dYpIkLnfWKU%2F%2FZQW1di8Xq%2BZ9UWkq7J4F%2FQ8VHOT8Nliwd3lt0Ve%2BnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099789dd057e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70086,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 851x510, components 3","md5":"7f31cc196741ce00cc9af460729d51ab","sha1":"74380908c58e9a776605926dd0044acd02de29f6","sha256":"9be999fa144344559fb5d4a2e77fe1dcd0cd033951f5074d83cc21dd2770e6d0","sha512":"bfb814015f8e7272d91a59ea85ab569c3cb5b7bea0e1e6731d82e90570ed53d08e77069e4aba53148b55df9a7fa7216be7da330283c34eaebbddacb449a4e558","ssdeep":"1536:4z9l51dsFbVJBKsMRt/x7PqSp5wFC52DgXDdDi86gQp8+tJDef:4z/51Gp/YsMRL/p5wFrDkb6s+tJC","tlshash":"a663f18ebbd9ff53f984f93e1afb1fa4b2c65039189f00b091744931a18d2674c498b9","first_seen":"2026-02-14T18:41:22.361001Z","last_seen":"2026-03-06T11:25:27.972969Z","times_seen":3,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/data.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/data.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2szvWVvZzF1KA7u0lbgbNFwtuDnleNim8IeLv1r7dxYwfkal0ylmTlG4SSdLiqqx4OkqUy53h80XHogTD3Xu%2FUb%2B4xuBFgbzOBBtg%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"data.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a9e0157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1446,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1b8feb68bb44cc9c941fe62a82be877b","sha1":"9f0e8e8d3e76b921e9f12a3a95f5a57a5046f743","sha256":"1447e47a0624ab81b740d4ea52721068693cc53de87a5a5ae703937687451541","sha512":"27ef47c226ffd9adbff15021b7b9db09e1fa93ceded7b58844a04fd3c4bdf15e893eea9de257f85f3725bbaf49bc8004d91d8e1c085c2f7b6f6ed6b01eb5e4d2","ssdeep":"","tlshash":"7c3127e56a40c2e13985df66ed75edaa313330bf3d25c99056f02328f52cded4b85982","first_seen":"2026-02-14T18:41:22.322478Z","last_seen":"2026-03-06T11:25:27.982595Z","times_seen":3,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/figtree/v9/_Xms-HUzqDCFdgfMm4S9DQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://surfmine.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 20156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 09:56:59 GMT\r\nexpires: Fri, 05 Mar 2027 09:56:59 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:04:00 GMT\r\ncontent-type: font/woff2\r\nage: 87510\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20156, version 1.0","md5":"202cfb54d4e66d1702404ade49339ceb","sha1":"57fd1acf8d9651d9c38c0d4af7b78bc399be0652","sha256":"4ba7d3d096695818fe0686be4f1e82c6b05134e18a22260336130335027462dd","sha512":"2b323bc185114cbb7b0e2d92b7daf844d5dbe1e79f65d5b358f50bdf973ea60e8303e45ce7af23ce09b5e64149402065f0194f795e22dcd55c86ce1e05a11451","ssdeep":"384:gqwJbbuIcjx0eifRE1S0B1FbjeXpvgwFU2F5TfB3Qj0UWAB3XZ/ol:SJrK+hqvBjbyXpvgMUuVFHdK3p/Q","tlshash":"0e92e0eb83b3abc474ccb2a1349002e960e3524213b79df0c59375f0e9bd7da1a8522d","first_seen":"2025-05-14T03:12:47.210807Z","last_seen":"2026-08-03T18:45:47.751449Z","times_seen":8656,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":89,"dns":8,"connect":9,"send":0,"wait":9,"receive":3,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Nunito:wght@600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salebot.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 10:15:29 GMT\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1907,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"eb51760846086ed2193349bcb3a9df90","sha1":"165938acd2a7390e8555b83ca07dc28f60bf0e0c","sha256":"d88dd3adb8ec2afb347a773e2357f23696c1b843f1ba1e9bc68682027ef79e06","sha512":"9cf6ea9c8bcd8ab724124ee576f2bcb183fc89f3dd15367c1acc1ca26f7ae058da970ea4754f39b60c67b8dc8eefccf17a1d38235bd9dcc0d638f246c0e5ee33","ssdeep":"","tlshash":"72419b91045bd6009b431cc267cf7f37ad5ea1117855d47aabfd8888edabc232224f1e","first_seen":"2025-10-06T05:29:16.913853Z","last_seen":"2026-07-20T08:37:33.22839Z","times_seen":52,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fancyapps/ui@4.0/dist/fancybox.umd.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@fancyapps/ui@4.0/dist/fancybox.umd.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 30301\r\ncf-ray: 9d80997ceb66b1b8-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 4.0.31\r\nx-jsd-version-type: version\r\netag: W/\"19ca7-YDrz4C84GmWPE164D07veMx+dQ0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220044-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 11615\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5X3FJ5sqBMkqUFr7JE97CoOuy8Spbnkl90mDlUFLZ79miAAexuzmfpVSNBsJW%2FEiCsaiy6kLDgDteZKAUk2pcFiGIvrni7x7UXmSbi6NEcDt8HEJHDUNOmvDjxx8VoVD9zc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105639,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65502)","md5":"0ce18f9ca64e6fdcac07ec7e97dac4c7","sha1":"603af3e02f381a658f135eb80f4eef78cc7e750d","sha256":"d1a7f655b0b8be63ec6bc38b04028198ba32b8aab86c194a2b628e80c59aca2a","sha512":"29b375fc71837e0090f63792b3c3b8b7725eab61b1bf6e0a4d6bde37d40aae4ffce1c9b97e953c6a7928b93e4db1ad4f9b1e123571d98486afc183269dbf721e","ssdeep":"1536:qlSed/3kDaF+oQi/86ZDmvFFRhzlTmtMDbg7MQG:G8Q86kvDRhLXPQG","tlshash":"32a3e62a724134318ae2b1a9911f6709b2766124a583c09d707edcd50fe8f8d30bbff9","first_seen":"2023-03-07T01:10:32Z","last_seen":"2026-08-03T18:46:29.372473Z","times_seen":3152,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":18,"receive":2,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/online_chat_themes/pattern_theme_0-d76943810abb895eb35804c9cbe3d7ef898d6875451bc02050c900877e7ab3dd.css","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/online_chat_themes/pattern_theme_0-d76943810abb895eb35804c9cbe3d7ef898d6875451bc02050c900877e7ab3dd.css HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 07 Oct 2024 10:06:15 GMT\r\netag: W/\"6703b297-1ae\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (429)","md5":"0460da50c1adaae2f1056aa2ecaba93d","sha1":"f97557f0d565e52171780fadd87e6d39608d1aba","sha256":"21c6f87c78621db34c7037f9a2192d2fdf2d61d339b2a6253791bbc961702391","sha512":"2cd52b3f611cdc39c2c8fa62d3fc7af7a68e7ae200138985830c6a8479f86ad21f5471ab7f2542b93f11eacb004b65f3af591ee379a0484140d8c3981d1f80f5","ssdeep":"","tlshash":"fbe02b24d684ef1b9557661ca6c05ef1c8e8b58f3e76c567cc75b309363b8c6a000c27","first_seen":"2026-02-14T18:41:22.34391Z","last_seen":"2026-03-06T11:25:28.002156Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"files.salebot.pro/uploads/online_chat/icon_file/558353/support-service-customer-service-operator_349999-703.avif","fqdn":"files.salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"files.salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:35 GMT","end":"Wed, 27 May 2026 23:05:34 GMT"},"fingerprint":{"sha1":"B0:AF:3F:99:3C:1E:4F:7B:41:5D:73:07:FF:22:4F:F1:7E:C1:F2:AC","sha256":"99:A4:F8:E9:CF:EC:A1:87:A6:32:B5:03:8C:2E:85:3D:9A:FB:A2:06:E4:89:98:85:D5:F9:15:C4:C6:85:6E:5C"}}},"request":{"raw":"GET /uploads/online_chat/icon_file/558353/support-service-customer-service-operator_349999-703.avif HTTP/1.1\r\nHost: files.salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-length: 10367\r\naccept-ranges: bytes\r\ncache-control: max-age=604800\r\netag: \"dd66110bfed74a1cc1116c2d184de54b\"\r\nlast-modified: Mon, 05 May 2025 17:55:39 GMT\r\nx-amz-request-id: 499cb099bb613e20\r\nx-amz-version-id: null\r\ncontent-type: application/octet-stream\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10367,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"dd66110bfed74a1cc1116c2d184de54b","sha1":"f0f10bc5792478a4fcdedcff1a547c92d19d51b7","sha256":"7217efe2f47c98b1e763d91109f86fdff34fa1ac0fca948df0e78c32bd08e7a9","sha512":"38b0e53fec8723fe25593f08c34f973558ae59823013b9cf0df50acc6909f3b955c4b5f53249559397460f53793803b5d1f523bea4d5679262de3d870672f091","ssdeep":"192:rGCeZlp4axAVe4lceTXaQaq0CQWW4f63jq9d44dflsF9x1zqbHdpqQaP:rgJxAVueTaq7+4GWvVdu9xNqruQaP","tlshash":"e522c00eb00ff64fde6009b6ad2c67033d119a8e14566ff3e785750c61cda7aad29960","first_seen":"2026-02-14T18:41:22.333823Z","last_seen":"2026-03-06T11:25:27.96701Z","times_seen":3,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":98,"dns":6,"connect":45,"send":0,"wait":137,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/favicons/favicon.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:30.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/favicons/favicon.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\npriority: u=6,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kg7Z%2FrD%2FzW1JbY0ojQFiM35dBoJZ2YY3DrBv7XlvMW8i3kVqXhfLDSDmwGGNyOg7PNt%2BCbbvqc%2BzdooNhKQGd7nSHnbXlL17pEUvBw%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"favicon.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 2385\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997d8e4757e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93635,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38c211ae15b7b99eb032bc6ac480bca4","sha1":"7c7293ab34c9425f639489d30519c84d2be7ca0e","sha256":"aec4e4b8d3fb6e00072aae8c3dea153666e9c6aa87d0c72e11a7a8d2b67320ee","sha512":"10ee94a56bb5e06dc91c0403f54343c3a05f89726bc9be70872694d451fb18cb0205b576328dbd0bb0d55725504bcbebaaebe979ef6e3a94a5c73470fc4f0fa1","ssdeep":"1536:YJ7UxBRhAV9r1js/Y13WWKOCPrnwSOJI0YJOerCGQAHF4WHKaJ4RU0rMKXPvqoc:YWxbhAVnSu3WV5rnBSgOerAAHF4W9qPI","tlshash":"6a9312c0a5d4bc3f8244ed1ee33e5c72ca19ca295598f3a59dcfbd0a055df800a872b6","first_seen":"2026-02-14T18:41:22.357431Z","last_seen":"2026-03-06T11:25:27.994727Z","times_seen":3,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/doge.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/doge.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MhalqHsz1eq0DvqMiK%2Bd6zEWWOTXG%2BdGMCnV2X0aOA11S9xogCVIvSotIpwpGAHdk1t7LPedHveZ%2FNfzzvmfJcnKOIIlAaf5%2BkWQVQ%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"doge.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a9dfe57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1285,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59cc0a1793499a9d4a8aee466f303d91","sha1":"1c942f7b8575feceafce149333c504d2280b6c62","sha256":"78f73d679d998c445e76a9fd9ba7e63104c62226f280cd644f86e6f46e1e69e4","sha512":"a3d8ab402c1c63135850ae6f84814d150e84e794c2bc092fc67bb8b224d9ed68b6c78e9688e50f15aef7bd62b4b91ee73c8317fe09a4082bf670c7fb81b4c49a","ssdeep":"","tlshash":"942102cb73a1836cf88097f8c30a54b7353b39f6541a80943bb16d29f96513c184c9e2","first_seen":"2026-02-14T18:41:22.32922Z","last_seen":"2026-03-06T11:25:27.99897Z","times_seen":3,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/css/social.css","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /css/social.css HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:50:01 GMT\r\netag: W/\"69aaa349-1b71\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64506b6b5ae2e58b670f5835460b3a0c","sha1":"1e5957bec12ef3b18f391fbf9dc0de52c319f258","sha256":"63da7f8fb6df6b5c80709a0fd0b7ffdefc1888bcacf39e26a433091bc96f621f","sha512":"01da41e22414fc8fb9f315facc5661b46c63379ee29c34478de02b69d6028c720d3985dfe8b681470ac4d02a205b2b7a394cdbf37994172fe74f192112c05bd3","ssdeep":"96:zn1Fa79MU1UfURUeu/GgVYCFe2u2GSpXxI1Ivg+nSS8JHRveJU0IfCJx:z1cMU1UfURU9GgLe27+1Mn60UlCf","tlshash":"01e162636b545849b217f1642d74df9a572f0003bf1f0eaaa9a5346cc3cd2c929736cd","first_seen":"2026-02-14T18:41:22.361899Z","last_seen":"2026-04-26T21:39:51.527178Z","times_seen":11,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Nunito:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salebot.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 10:15:30 GMT\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5463,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"721a040ea564a6f1097d3c9fc78e4478","sha1":"969b3a763c65bbea8dd653387efe6482fd53f614","sha256":"1eab5e802b5f0457aaad88e630b825da8ed3ba340a35a34b5f6901d9d84bdad1","sha512":"44cce6feb92211ced4be081e6a2c9c0c63b0fc22a7243396544d0d88b4736d6e6d62ee3cad5136dda1b21e3f4eac55d6b465a0b28922df3565bc5bef366db625","ssdeep":"96:BOEabTxOEa7FZOOOEaKOEaQJc+uaOEaENqOxMabTxOxMa7FZOOOxMaKOxMaQJc+m:OH+yptkUkH0yXLkeLHbywkkdH","tlshash":"5eb17891045bd400aa432cc667cf7f37ed4e62113464c57aebfd9898ecabd272264b1e","first_seen":"2025-09-17T11:57:27.939025Z","last_seen":"2026-08-03T17:30:28.870008Z","times_seen":1614,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/js/videotube.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/js/videotube.js HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CHgX3hp2ljA1YqSO%2BJxqEUwXu8uipetz8HiHIkN6IUIkiTWH0nCSjs%2BtQbKDGQjzY%2FEMD9aHWsBKjeWXZegzOrIlxGtfeZ11aldtSg%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"videotube.js\"\r\nlast-modified: Mon, 19 May 2025 01:32:34 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 2386\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099788dca57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4202,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"db83456cfc3eb814e603484d1d83f71b","sha1":"66f3f1ba05b2e398687605188f5e47c497cdeb46","sha256":"868cb58b465ae1c261549a87bd6331eb2267131ac03af837ac2013d2bf2f6cee","sha512":"f1e57296129415e9023d3b1a20f698312dd6473af09d8b88662e118a7ee97414b2367afeae4ed5d5db8d1cc24d59b466438f1e558fc9cb3aab18d9c6b86b4a9b","ssdeep":"96:0qXOXMV0OMULBO5MlqlwEUTq0S7l5N3gP5W5yMSmRm6z1+AJ:pX0fOyHlwEUT+lv6AZFZB","tlshash":"e981129aa2f70134a573a2bf2f4b52182b211217b38add947f6c93945fc5a1443f37e8","first_seen":"2026-02-14T18:41:22.325064Z","last_seen":"2026-03-06T11:25:27.99151Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\nage: 1004290\r\nx-served-by: cache-lga21978-LGA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 19062\r\nx-timer: S1772792129.428055,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-08-03T18:10:07.742281Z","times_seen":183684,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":37,"dns":11,"connect":13,"send":0,"wait":16,"receive":4,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/js/chatbot.js?v=1","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /js/chatbot.js?v=1 HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 06 Mar 2026 09:50:01 GMT\r\netag: W/\"69aaa349-174f7\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95479,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8468)","md5":"e03e754deddc344dbfdb1e9e26acbe88","sha1":"4b438dec4783d9d537a63ab9435cd8a307dd8b08","sha256":"79a45afa22d55092e56a08b5f303961f7a6165786728dc23db97d8f6dba8aa53","sha512":"c8ffa036608bf3067c3cde8503093ae85362c139e5ea19712b046d82b22e42513269e8a5a00ead49a31a88e50f81b8997a470bba68d39e414c1635b6884dfe67","ssdeep":"1536:V/8i/vdr7uO09+g/fqwfGBxwsgO6FrARBQVJuZwym+51Ao7VMDi0ekI6IboF0xw2:V/8i/vWqwfGBxwWBQy7VMDi0ex6IboF+","tlshash":"8d93e6a963f10125828b716eadde92083572500f6a465c18bcfc45686fd0ee56bf2ffc","first_seen":"2026-03-06T10:15:56.372575Z","last_seen":"2026-03-06T11:25:27.997039Z","times_seen":2,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":62,"dns":3,"connect":29,"send":0,"wait":57,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/cryptobg.png","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/cryptobg.png HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncontent-length: 114403\r\ncontent-disposition: inline; filename=\"cryptobg.png\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9kcWEP%2FyP4kNJyj06HiL34cS%2BKukRqboWAdjiWNxXraXRa8KfM%2Bl90iVDKkrDngqFWILngndoeI91KZAflZJ8UUFP%2F6ZPpq4Ho%2Fb3A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997aae0657e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114403,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 830 x 626, 8-bit colormap, non-interlaced","md5":"9a15eb421910ae4f8ba0a234f68c04bd","sha1":"3386236ef99883fb6ce44a7f4397017c460c3d13","sha256":"fed5f9ff11d972602f260a632c1a072af2d35356bc975447bf8c3eb8c2ddfbe5","sha512":"67436ba7137be572f6da631bc47f8fe6d1c6ab3d8001ab1d8a32fa56e9781d8ba204b31b92a71f68d9433c2a288f0540dcd815c243e5cf49e96f8c3840b033d0","ssdeep":"3072:lVOQtwMr54PgA1zbaIaOC+NtrRax280ufd2:zwNT9M+NPB8dfQ","tlshash":"3fb312e4c1d137ac19c60ba83e821a5ad31adffa4f5cc606365ab326ec775c031b19e1","first_seen":"2026-02-14T18:41:22.363203Z","last_seen":"2026-03-06T11:25:27.965639Z","times_seen":3,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/play-youtube.png","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/play-youtube.png HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncontent-length: 8923\r\ncontent-disposition: inline; filename=\"play-youtube.png\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9eiahmFq2Uut%2FhN2KkYjWJiae6A5%2Fw2kUEtKGqSUf2XYd9Xt%2Fu1oOUeNXV6MSBZ%2B%2BDhnx%2BGngydj%2BrJzOm9p%2BwrLGm62suf2Xj7gA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997aae0857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8923,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"e7b867af35055f79361e23ebd750f90c","sha1":"e96c82014a4f46055545cd34c6a0b662c52fcc8f","sha256":"188f28ab33d8520d5beffbacfe3c99621485344aceb95a08915db0fcc6ccaf21","sha512":"dafb8ae35194fe216fd234a0a0a96f2d6f17593698371ccaa5ea8d894adf7812bd8ccfce2cb76801699c957d8022de9bf1d0adc1e6caeef2cc17080a99638aa3","ssdeep":"192:v4E+31/iOGxVlSXTwZnNGs38HHUKiUZll03ZVxaDawoe0WbKqbiKgmgABNaEM+:vSXcZlMHHFZ83OaTe0Wb/biaXBNaS","tlshash":"c5024a2b53e090b0e64e586fb204533443114dec9f2e8b77aa6f8c5e37d9a08c791f66","first_seen":"2026-02-14T18:41:22.332564Z","last_seen":"2026-03-06T11:25:27.974483Z","times_seen":3,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/fonts/nexa-trial-bold-webfont.woff2","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/fonts/nexa-trial-bold-webfont.woff2 HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: font/woff2\r\ncontent-length: 25548\r\ncontent-disposition: inline; filename=\"nexa-trial-bold-webfont.woff2\"\r\nlast-modified: Mon, 05 May 2025 17:41:57 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=do%2B368b0kdI6fUIsYnjCVdf0bm54ct5JnACofA6nlV%2BbW%2BUVIWQKHug5vmpPmyqqozuGWKRDk4VVTj94JnklMNwhOi7mnSNNRfigcQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997ace0e57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25548,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25548, version 1.0","md5":"7681a6e45b93e9fb2d69dad892c06bdd","sha1":"6358ef0e773093daa0111c15de8495ef4cbaf1e2","sha256":"5ecddf6642357afafe76d5dc35a5d803de2b957dcb3b0d2580c918d9fc6527df","sha512":"fdc3cf012544cf1c626109acb971ba06e6aa81575858545313136eb149dcdde76ed4794dc1050da88baf9fcad311ae72854e08a619a3e1728f388bed3e754673","ssdeep":"768:jvctn4xl3cuw5w1IglyFOF47ZCQX68USmO9lQguesli2h:zctn4f3JGOIglyAF8ZC+6otBWrh","tlshash":"1bb2f1b8318846f9b2d97423042f710c1feddf4785b815bd90ac9e299eab25f31847b9","first_seen":"2026-02-14T18:41:22.330175Z","last_seen":"2026-03-06T11:25:27.966316Z","times_seen":3,"resource_available":false,"data":null}},"time_used":320,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":224,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/new_message.mp3","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /new_message.mp3 HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: audio/webm,audio/ogg,audio/wav,audio/*;q=0.9,application/ogg;q=0.7,video/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: audio\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: audio/mpeg\r\ncontent-length: 12757\r\nlast-modified: Fri, 06 Mar 2026 09:50:01 GMT\r\netag: \"69aaa349-31d5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\ncontent-range: bytes 0-12756/12757\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12757,"size_decoded":0,"mime_type":"audio/mpeg","magic":"Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 64 kbps, 44.1 kHz, Stereo","md5":"885369c456f39b0833834c3ff0e7769d","sha1":"8f5495db618f48c42eaaf353c4c27ad9455b5af7","sha256":"17a765450223dfdfcb5f0cbb53acc68803c1c2e599a32d735c231e74484cac50","sha512":"1a014ead65023c0037f2d65595a586569980ef6c4738ef0bc1ec47c51b2e92f731fb54a15b63e6575a1e3b5d0503b4042db99b29058d02981782fe2a089b7d6b","ssdeep":"384:oEtZrTJDrIOfbjtvLaTN4IYWPGVaWTx4I0q9YJACSv8:ourTJI15n2VTP0WYJSE","tlshash":"b842c0453dec5a6ff5228871ad72c2b9de500ccf3a9159e6d81c366016a70c8ab1fd2a","first_seen":"2023-04-20T11:56:31Z","last_seen":"2026-04-22T23:50:21.127704Z","times_seen":22,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/projects/558353/history?recepient=vt7w3qtsxz8","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /projects/558353/history?recepient=vt7w3qtsxz8 HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 6\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept,Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: ETag\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD\r\naccess-control-allow-headers: *,x-requested-with,Content-Type,If-Modified-Since,If-None-Match\r\naccess-control-max-age: 86400\r\ncontent-security-policy: frame-src *;\r\ncontent-encoding: br\r\netag: W/\"4601251960ce5df9580eb34a6e6269c8\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 67eab8f2-b38d-4a63-a06a-3065ecad5224\r\nx-runtime: 0.007780\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-03T18:07:39.969168Z","times_seen":313524,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/fonts/SFProDisplay-Light.woff","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/fonts/SFProDisplay-Light.woff HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: font/woff\r\ncontent-length: 156956\r\ncontent-disposition: inline; filename=\"SFProDisplay-Light.woff\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tv%2FUXm7fpKAUmeOZ0Dqhr06BsDwERF%2BDUlkFtQY2tpEI4x%2BL4rRh0%2F%2Bg1d6QOymWeXyStFSPTCLHW1uYZu5PTJE4nv0PJ6lCN0NVnQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997ace0d57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156956,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 156956, version 0.0","md5":"ee7481b4e87fdad06d71aeac1d173821","sha1":"bc9512801dd5fe0c634059f3121698697d1b8388","sha256":"5b733b4108828ff06692c07e42ec7ea09ac0101ab62b5b182b78cf0a9f4fb1ae","sha512":"3d2329998e6abc1fc1cc7b8b68c3e645cd854d4f0b6325cfceb33f6074840bad3d1577b96da46c92b3a366c2e89f75de15e4a746021beb47d95b6bbc62578b15","ssdeep":"3072:nHb9h5gYa3PWSWKVBYNnc5aoZHhKocl8NvhZfFU6NA5X:nHGF30KVB9zXm8FhFjNUX","tlshash":"d1e3120c819467bfa293d1f84624829e3b7d4754ab45947f572e005a7efde0d2e3702b","first_seen":"2024-08-29T17:20:01.831367Z","last_seen":"2026-05-18T08:20:26.092581Z","times_seen":17,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":308,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/online_chat_patterns/preview_pattern_opacity_0-ee68ef8ad29c5164882487843a351801edcce137bf9c5cd6e8e5dc98a21a3efe.svg","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/online_chat_patterns/preview_pattern_opacity_0-ee68ef8ad29c5164882487843a351801edcce137bf9c5cd6e8e5dc98a21a3efe.svg HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salebot.pro/assets/online_chat_themes/online_chat_theme-9d03577937a6aa4ba520b2fe3e6ed05e766586da520990fc2dd9d79084845990.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 42335\r\nlast-modified: Mon, 15 Apr 2024 20:16:04 GMT\r\netag: \"661d8b04-a55f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42335,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18133c200913251c288fa81dfeedca24","sha1":"67da0d542a7eb02aca9c53d27652d75b5046182b","sha256":"dc8988d38ff0e4d9f54f61a5e5e5db0d729e0d0feb5edee2fe3b43be8d009ab3","sha512":"76a351cd9b6b1903230c747fafcd6fa397c0179f962178a2e23f0c4a125470c11b3cc301f8910f579254a531c93e7fc2ab231b8ed309cca6e982e0afcc4f9e2a","ssdeep":"768:2mMm1o6C7G+ADvXU7ZayBht1JYlrYXcZCmFcu:N1oak7NrmZCmFcu","tlshash":"8e1382ee2b744df0d887d3fadb2915d5352a64fe26818b64d3a86e04385256ccc8adc3","first_seen":"2026-02-14T18:41:22.359408Z","last_seen":"2026-03-06T11:25:27.984558Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"salebot.pro/cable?recepient=vt7w3qtsxz8\u0026project_id=558353","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /cable?recepient=vt7w3qtsxz8\u0026project_id=558353 HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://salebot.pro\r\nSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: aXfbOedMGb3iUVj/jl9Unw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx/1.25.3\r\nDate: Fri, 06 Mar 2026 10:15:30 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Uws+m+1IStEHtmPLfx4jz4SboLY=\r\nSec-WebSocket-Protocol: actioncable-v1-json\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-03T18:30:15.702548Z","times_seen":17694294,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":1,"connect":33,"send":0,"wait":35,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/online_chat_patterns/preview_pattern_0-3b1f3d6fbcd458d917e83421e33cadc2b90fdaba390941ccb2ef00d4bb13aeae.svg","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/online_chat_patterns/preview_pattern_0-3b1f3d6fbcd458d917e83421e33cadc2b90fdaba390941ccb2ef00d4bb13aeae.svg HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://salebot.pro/assets/online_chat_themes/online_chat_theme-9d03577937a6aa4ba520b2fe3e6ed05e766586da520990fc2dd9d79084845990.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 42334\r\nlast-modified: Mon, 15 Apr 2024 20:16:04 GMT\r\netag: \"661d8b04-a55e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42334,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e7a0a231a418096082fed53fcda7367b","sha1":"8e98948c5229bc590daba6b2d2fe247b24d4cee5","sha256":"a8bb7acfffbb014cc306446fa940ab203e0870d963b58d304a87ba77395df7b0","sha512":"8de571b0ca78a196df102c21a3969f7dce7c8f8608c1ede9abc3ee7222d459f1ee639eb6edee8631f6600004f121aafed42de664fa816bef52df0bc9a35520e9","ssdeep":"768:XmMm1o6C7G+ADvXU7ZayBht1JYlrYXcZCmFcu:Y1oak7NrmZCmFcu","tlshash":"931382ee2b744df0d887d3fadb2d15d5352a64fe26818b64d3a86e04385256ccc8adc3","first_seen":"2026-02-14T18:41:22.3483Z","last_seen":"2026-03-06T11:25:27.967989Z","times_seen":3,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9d809978abb249c5-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1279279\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 06 Mar 2027 10:15:29 GMT\r\nlast-modified: Fri, 30 Jan 2026 17:33:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\nfly-request-id: 01KG7ZENXCTY1A38A3KMZZY6R0-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-03T15:06:41.078105Z","times_seen":42760,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":40,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/js/videotube.css","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/js/videotube.css HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2FlTVqPTXHD5ZAsEZOnJquUCSCp8SInCZ0R4U3oOTfdGq2OGUEwMuS%2B8VdTHnVjksr%2BjDD%2FRTa%2FWGLY3pEpNYP6JUPGXV3bxoV1Ehg%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"videotube.css\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099788dc957e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":999,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0c7b0b1b3fb1156118ee9aa1fd3f2d12","sha1":"658fdebec9a952679e8a1aad8b1d3e298057292b","sha256":"b43226ec1a52b08617bff80c492c5b3aca51d204882bb0c3dd84ff6d8a980fd2","sha512":"879073047d9d3106e36dcb875fab97862097b40a1a1c5806aad54d4352987a185b68f4c16c65a06fc3e6945a504a97f2dbfc28439143ae28f5cc78d9406d2301","ssdeep":"","tlshash":"2911ce108b7e2400a11f90a73e45bb22c53a4483ebdb5d2f111e25b5c2c315005f7bfd","first_seen":"2026-01-04T09:46:19.244319Z","last_seen":"2026-03-06T11:25:27.988712Z","times_seen":6,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/fancybox/jquery.fancybox-1.3.4.css","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /fancybox/jquery.fancybox-1.3.4.css HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 06 Mar 2026 09:50:01 GMT\r\netag: W/\"69aaa349-212e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8494,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"851e31c9e02f0e14f1de87c54897b399","sha1":"9cce998242e6008ce78312aef4cf05c400f3b3d1","sha256":"9aa3d7beea155d9cc9e89c108d05608bdecc6f1eae8cdff26343c11510e9517d","sha512":"bc7dbcc40827d808c0c3abe4fd4e8fea268a36c1a6cdff3ff531adcdc9b019457af9e5081a9876bf78a1294de08bdadac5d991355c40eba47dedf876ea797d52","ssdeep":"192:gjEAkcEki8B8Z+K7LydnHsUGmD8EPp4eZx4XOdmEyKi2AWSFHjUHfygkc2IS4om:gjQ0","tlshash":"9102cf1765d53549b439d9a4ffef9e09e23e3083660a4dfba84db86883c23c480e34d9","first_seen":"2023-04-05T11:08:54Z","last_seen":"2026-08-01T20:42:45.459144Z","times_seen":526,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/online_chat_themes/online_chat_theme-9d03577937a6aa4ba520b2fe3e6ed05e766586da520990fc2dd9d79084845990.css","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/online_chat_themes/online_chat_theme-9d03577937a6aa4ba520b2fe3e6ed05e766586da520990fc2dd9d79084845990.css HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Dec 2025 16:25:29 GMT\r\netag: W/\"693af079-9d0d\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40205,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40204)","md5":"8e02682f0f4a1433faaaef33bfd6cd4b","sha1":"3a179eff0efa9f4ad9685377f325e22d42c5841a","sha256":"92bb279573c4403e57e5fda2669a0b2be43a28edde27c5f1705de871b7d5013b","sha512":"232b7107794c4eda95352c4bf2514e0bf95c1f9284ade55f2ae761ef6d4ccba3b1e22160be60feb7cb463e3f2f09e9d6085f1a7035abbd5663bc78448f4efe2a","ssdeep":"192:ra8MRJaF7gxA6wTfS3PH51RJ7vmQQ4U/gWj97n7/0Swha52zs7c2loGkM/1Xw9K+:rM2Fbe5IX2xl5QIovHevQE","tlshash":"fb0318a1f3d0417b2517117e3b45e22c133bb050972b2ab2ea59abb06ba23d371d3f55","first_seen":"2026-02-14T18:41:22.344795Z","last_seen":"2026-04-07T03:20:38.042179Z","times_seen":4,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/trx.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/trx.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ubMA%2B0UFGaKcPCgFy49nKWJYG%2BnCWZbGjwfHmTSAHDfdEtMT51yVyXPsYjpK5Uz4Z5WXBotDpWwuImCei8LJQ%2FoLxKYgkYHkP2Xu7Q%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"trx.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a8dfd57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":848,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8a25508ec9617a0af4234b8f4825bde2","sha1":"40ca12664171ca1a98870108c125bf260bfa7b72","sha256":"1df00cd84844e042ba7eed81ad610887e108fd06f40722422e892a5ca89a003c","sha512":"856af86bb7799cca3f867c6a391fd9045d73d1ab6fdc1383cd5ecbe66d895caddd00804d7bc0e5f14ed759212d9ef12b625e87705b494e4cdd40f3792e9c51c9","ssdeep":"","tlshash":"e801c2d157ecc305f8408770f5471079746a70c5b50cc6a5bbe06917eeb447d49695c9","first_seen":"2026-02-14T18:41:22.327985Z","last_seen":"2026-03-06T11:25:27.993374Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/calendar.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/calendar.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rnXQnWGMNgr8qHox9QlJuUgVYRKN1xooyP0MSp%2Fa7Cn9Cg1gSnd4JqpPARAybadaiR5U91Q4DEwfRwfYqNNlyjLZqhyoeJU6Yp25Xg%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"calendar.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997aae0757e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1821,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"94683a2a16e1ac3be6fea4ec4be765d9","sha1":"31cef9c0b5a76a5a2b79ca43192f0b165d08590f","sha256":"44459c170b2e7078fec6220c99afa272dad335c723251e8fbb3daac43a5d7260","sha512":"77e2c32112028deca02b80176c1bac71d189ab88205c3db08531507d6c88baeb24a01f468fc23848b714798f1540fb8ec979ea97ef8e877a3b04120c5d7144d7","ssdeep":"","tlshash":"4b3168f6adcca9d085ca4b49c9329532b72bec3d2fd543828234d6b8f525c88c4e995d","first_seen":"2026-02-14T18:41:22.323352Z","last_seen":"2026-03-06T11:25:27.979626Z","times_seen":3,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/online_chat-a94a7f10f1a13e0b5bd110b66def662230b3b5fc44eaa302bd1410c0c0828675.css","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/online_chat-a94a7f10f1a13e0b5bd110b66def662230b3b5fc44eaa302bd1410c0c0828675.css HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Feb 2026 09:04:43 GMT\r\netag: W/\"699c182b-37a69\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":227945,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b983c5ca3b7851312f3608f15c2a0bf2","sha1":"a24da71b9701ca8707bf5cfe06e5ef1cc1b4fa4a","sha256":"375d290678ed44254635cc89903a15081019532730b31d05d4b060c8967dc458","sha512":"79b36c35bdd7ffd41c87c1a15407183ce567bb29e89aa783bbbc68dbeb61a24bcf38df8f2b86f61f766305d5fc1d2d2881b612ef401689aaf16b6ce656cc02df","ssdeep":"768:HyFK6jU+4bixaACagl0NFpmUZ9im5qOB3CmQwMw+x7CLvoA4cYzwFkpbA3JfGZOw:HyFYt0wkMERcws+m3BCabFMdF1Tg","tlshash":"d524270180c16268d93bf619a09d5c84f8356b17dc337c5a5acbd7adb3878ec4a66f83","first_seen":"2026-03-06T10:15:56.386606Z","last_seen":"2026-03-06T11:25:27.999671Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/js/scripts.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/js/scripts.js HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Am6KZXxm6C7xGse%2BkAE96MlWnqxSFdeyOZCDYSZ7XodzN6z6oC3Nr7oIgORkg7KqLTQnLvvcQp0rNwqKLLQsTTO%2FsjkhXlI5%2BwTZDA%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"scripts.js\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 2386\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099789dd357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"95f6eae4d95eb672fa600c86bbf90491","sha1":"80c58d2c879f714e26332eee64f5679ff6775be1","sha256":"a8c5126532941cfbce4d05d30bd724f11dbaf4676b7b4fd478a3229de81be67a","sha512":"cff5fbccc7019d30b9df5fc1f09d0db8c030d893aec3f856efbc4ea54b8b1af677d5cd00a7cf10cf703be52f9be6ec120e551c300a48a97e2473666a0f45afdb","ssdeep":"","tlshash":"17111265f2f619d5153fa4378277a50c259b847e7207832164e71f852e411786322668","first_seen":"2026-02-14T18:41:22.3365Z","last_seen":"2026-03-06T11:25:27.973485Z","times_seen":3,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/js/slick.min.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/js/slick.min.js HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qotv%2F76S7X%2Fel4%2BWeGj9dGIWbuFSS2aV%2FVlUEZt6sGymFWj%2B%2FYj8Prk9wMh5MQPc6sdMTMnMDk2JXsbSw%2BQP1spwVu0gmn96DfyibQ%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"slick.min.js\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 2386\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099789dd157e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42862,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42862), with no line terminators","md5":"efe2dc57bf7b73137e9642e586ee272b","sha1":"ef584add252ef75060da8df06eb5e859caaedb37","sha256":"27bebe78e3b6a4b1664dd4fa83a8cd0187f051631a06248fefa3ef3991a5a92a","sha512":"5bed459f087e94f50bf65f4aac3b77314d2128c6f47480ccb3f405fd8a81e5352a68076d341a8d24572168afc5edcb447d590e7bbdcd834b3f87cbea13126f25","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYf:EPrYdlNixEePiYf","tlshash":"0513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:10:46Z","last_seen":"2026-08-03T11:12:52.049438Z","times_seen":8648,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/driver.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/driver.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4MkLn88oi1VMNs7duJFG6LsBIZTX14Qz5khy9TvgTckVVJuBgMF6eHn%2BkmWJ8vtFb%2FIZ0cpDPF%2FyD9KdVJEWmM8UV%2B6HEYWr4msRg%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"driver.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997aae0357e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1603,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b3c401910a8b3ef5b8493ca38ab6c0c6","sha1":"72a011c4b664aea1c7cee443aba2b90048fab018","sha256":"42b8f7b9044e307c4ff9a013e90fadb4f9ce8d6a9ccc88ec8d20e0777add96f4","sha512":"535747b90ff42f45d3c5c6f006df7b9ba6854f73e317d3c822b941487a619de4042df0ab57d41321065b2ad0d7c4d43c80840e1a14b6ce7c1544a3ca7bda92b5","ssdeep":"","tlshash":"5131c4e68ac4cae23082efd2ed76a99d600bb0bf2ea54c4546f06370d1b84dc0789c57","first_seen":"2026-02-14T18:41:22.35865Z","last_seen":"2026-03-06T11:25:27.979052Z","times_seen":3,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/projects/online_chat/script?online_chat_id=3878","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /projects/online_chat/script?online_chat_id=3878 HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 30838\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: ETag\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD\r\naccess-control-allow-headers: *,x-requested-with,Content-Type,If-Modified-Since,If-None-Match\r\naccess-control-max-age: 86400\r\ncontent-security-policy: frame-src *;\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\netag: W/\"48b9f4fed8d6833164ee325433962821\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: 1994b574-1a34-401a-a8c3-d700b0c4f076\r\nx-runtime: 0.040959\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":141308,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (7133)","md5":"283148bbbb5a123d9443eedfeeab3024","sha1":"d254a5c684640c61b07962c5c0db865017366350","sha256":"baf89018005d58706ae0c41247e0b06c5e7065adecaa3657148cf386c9628003","sha512":"34cfe1867727c0056501e80ebbfadb99ca622648936aa5147f1463ac14568a47ef842a8e0a54d91deeae724bb2bb084705389462756dc3a0655fd7647b5f802e","ssdeep":"768:LQBYimMm1o6C7G+ADvXU7ZayBht1JYlrYXcZCmFcgvTV5Vm8c0oEkNlsg2BwMFam:b1oak7NrmZCmFcgpjFc0oEulsZ1","tlshash":"c7d363b41d22647386cfa9e4683e0a7b3af192d6cd7b4710b3ae47485f90d14af67c81","first_seen":"2026-03-06T10:15:56.391149Z","last_seen":"2026-03-06T10:15:56.391149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jquery.maskedinput@1.4.1/src/jquery.maskedinput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/jquery.maskedinput@1.4.1/src/jquery.maskedinput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2079\r\ncf-ray: 9d80997ceb8fb1b8-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.4.1\r\nx-jsd-version-type: version\r\netag: W/\"11e8-doKLEzAAPnZhwH2dx5V5eOz3Kn8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230140-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 3733871\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=0EWl44WkG7xLIqWjQmwDUnYXajA93Rf%2Ft74KTayoF0afhVTw2GQwpCkEiWYrpj%2FJb5eV3i%2BsOJu9DPy%2FGGP62vCt%2F5sq9R%2Blu4eYzT2L1RMglEVZ3CIey0F5RWdfWLtJFkA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4584,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4235)","md5":"f5c4fc94a985b8d3518d22f0a7182c92","sha1":"76828b1330003e7661c07d9dc7957978ecf72a7f","sha256":"fdca2d96e1ef11085a75adc583aeffbc556b7871392cccb0831bf82913a03c52","sha512":"18da979576df4e092c984b2348930c01d5d5727e300222d6e4aa172c8ac5eb4b6808f532215cd34b64245a0bf58d87b90f531ff3edf07a9dbb50b97f2f41bf21","ssdeep":"96:7hUtmapbdsmKcTMSr8q6sGKcE5OECLxxVh50sD9KL:6tma8mPT2q6sGKD5OHCL","tlshash":"8791c76dbddc721223f7587601afc06992367f15686bc690f421a8c0b87859b30a7d3f","first_seen":"2025-05-04T12:57:50.833979Z","last_seen":"2026-07-03T11:10:01.635777Z","times_seen":199,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":13,"dns":8,"connect":1,"send":0,"wait":13,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/wallet.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/wallet.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5T7VJC7ZjXat8SUfB9B9awaGlPMSeesFyrPVcI5P4WbUPlBlotvaeM47Cl1gCU6c5%2FDjulZh0Mw4vSJCzKTqstJ7DmLa6jPFxEUs2w%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"wallet.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997aae0557e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2229,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2034fdec93c517ed8779cc964c3b8b86","sha1":"47eb80a1dce8588bf2f2953972cac8d04e08f4bd","sha256":"48863cece839c1cf5b65078aed9c6436c12af0153359f1186a28dd9c78f4699e","sha512":"86d83e1d288fdabe1103c6e21ab68262437aef145c467fa3f78485c9469058c94cee114aa0872b30b6e45e085759411070ba3ddc8cd8c4ff5d2feeabc7702748","ssdeep":"","tlshash":"b64149ebaaccc6f099d8e7e07d37e8d1161b74bf3d23ca800ae14360f1611ed8819556","first_seen":"2026-02-14T18:41:22.355748Z","last_seen":"2026-03-06T11:25:27.973965Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T10:15:28.959Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LXzcoPZEZR6OgiCUnVw5SNWTOCBE8HuQmdvT1PDST8cqY6QC%2BRCFhR3bBrM8RSAISgONg74sUC6qDXJs4WRQNaDlApp8L%2BHZZ5zIIg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9d8099763ab5c0a2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]}],"data":{"size":16728,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (953)","md5":"8629d7173020ee88faa725129430cef8","sha1":"47cd32b3e87cf0ef728de6083ed385f979b53cac","sha256":"ea50f188f03cfdead1858d614e08ef1e7f76371966e0fc191decc91d224532e5","sha512":"95129e7fac603526dca6c1eba65496c5041c313eedfd68c8acd7a3217f467a72de5d93f0ac7b00077911cf71e6dd74caca9ebab9f1bbe08520259a232adadd24","ssdeep":"192:ex2O69+JIHbHHyEePzNe4vOquFEDTi9at1ydWNJmXdjLaWrpqJWl:exajrlkFvOFeqS0dWNJY0WrpqQl","tlshash":"6a720c7374b4c2660a4342c79a1f76156aa5f36bd63a0280bdad21f99fc1cf1ad3361c","first_seen":"2026-02-14T18:41:22.349606Z","last_seen":"2026-03-06T11:25:27.985232Z","times_seen":3,"resource_available":false,"data":null}},"time_used":297,"timings":{"blocked":33,"dns":1,"connect":8,"send":0,"wait":230,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://salebot.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 15:16:23 GMT\r\nexpires: Thu, 04 Mar 2027 15:16:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 154747\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-08-03T18:30:58.539777Z","times_seen":43255,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Figtree:ital,wght@0,300..900;1,300..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css2?family=Figtree:ital,wght@0,300..900;1,300..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 10:15:29 GMT\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13830,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"a5fc5d5111f14ad374f65d760b15671d","sha1":"dcf87f1223bd8d12fa8866bdbb6c981583da5cf6","sha256":"efb81c01d630c6bf468bcb928bb2b895a6fb6cbc2f53e07afb05c35da45d2954","sha512":"a55d9af30e13c3a4c8fe587cdda8dab70a9ffa27ebeb6ed27d09ea435a79a382cdd593519a54439cfde528c9ffb09d30b2f45876b0e5abc7e05399fa6a943e2a","ssdeep":"192:cIh9I1chLfoOfcfLf9L5fMfgqvfZbqGIwV49fOnf+ofjCXXS2asrqAnbqGIwV4uk:cyPQOkTltULv1qY49GnDu6SqY47","tlshash":"7e524e91041754409a831dd233de7e31ee0fa2617044c0b9abfd5bdaeedad6aa3b435c","first_seen":"2026-01-27T07:38:04.438578Z","last_seen":"2026-05-12T10:31:29.296968Z","times_seen":7,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":182,"dns":0,"connect":8,"send":0,"wait":22,"receive":0,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/checkmark.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/checkmark.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BLdYKPg%2FcoIgwvecEErDXsvR29opdlfEYJTj%2B%2Bzdn2%2BadfxFGzXkiBBXVk9WNMZU4jaWjVs0pEZooyHy3GVnjkUGfREVm2EinnY7wA%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"checkmark.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a7dfa57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9198192448bb1e823f07ec64a0df7494","sha1":"68edd2bd52ca784ebb5b91a0030e084962a77ef8","sha256":"170de86686564ec4c8acfaab768a93c1ed3f642d40ea8eca42e996fec6b40aca","sha512":"a89c76b8d3e606b7271372affb2b2738b2268821892b576e9145ab1d6720376b6b2732c240d67ce4c3976a29db169ec022429c7c48cfc51bd2a2cea7c661eec0","ssdeep":"","tlshash":"98e0c026321d8b2cc9308b8ce3ede5c82087f0e24f58009cf740350562f55d3a41965f","first_seen":"2026-02-14T18:41:22.34618Z","last_seen":"2026-03-06T11:25:27.975689Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/btc.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/btc.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aad31rKaAaIcALPCEEAhxAoBkqVnFf4QYc3EcF2EdtcMYNdi24m9hovuGR1ZhV3ysbG4dVBa%2FlV%2B4WeLh3DpvO%2BsHG9%2BQUMK%2Fe%2Fbdw%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"btc.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a8dfc57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2044,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9e0195bd7de9e4a0e14b16f72003ed4","sha1":"eb6091c32a91f8062a89522d8c183019f4eda86f","sha256":"4ac6c0f24b8256eb5148a0551bd5e7183466e3a547b2e0c84c884918f9eb8e93","sha512":"f49156da07419531053d1549603c6fe64035e4135f1ec80855ad62a986899b96abda040a743ccdbda96640df5965d9d7f21839f34fcddf4bd43d5ec501e1de7a","ssdeep":"","tlshash":"704183c593aeb295f444d3e08a461460706638f53d3ac0aeaff53e95df9006d04ec4d6","first_seen":"2026-02-14T18:41:22.346925Z","last_seen":"2026-03-06T11:25:27.971963Z","times_seen":3,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/gift.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/gift.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6Ulz29gMKA8B9uvhFlcmF6LBnfQrKLX0goTyDqwdDpFvlcjdoylMlkyAfCxwBjzJDKOzSvCgwn9cgFXyC4F3FMnvR2Hwr3nnSBK4w%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"gift.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a8dfb57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2559,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"847f2d622b818b2f9a6f4b38062da320","sha1":"af368c1a98546d6e9d79e8151a1848676f6edd2c","sha256":"de4b3ecd55cc0635039139d149a2a5be77476095847a09d75cb36c60c3ab3393","sha512":"4dbe10c776c345d78fc6b17c487ceed68a1376667c5a65f4ad7599690c272b1662f3a23b2ebebc3b419b756db8108b3ee403cc0e05e14a1131d079c8db20aee0","ssdeep":"","tlshash":"4d512ff876d09ae0b54edfa0c43768a5b1f7347d2ea0d6c491e996a0e920dfcc60cd44","first_seen":"2026-02-14T18:41:22.331615Z","last_seen":"2026-03-06T11:25:27.992653Z","times_seen":3,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/edit.svg","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/edit.svg HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/static/site/lend/css/base.css?321\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4vQ%2FVmCjhE4asjTfRNSVdjxbleTeU3QnBZfIo5WQigwqTUyOvsmxW8lzmLvjRDvHe%2F27chtac22rGUYty%2BalcZfdUoUSmB0HkOaeA%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"edit.svg\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d80997a9e0057e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1384,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bf4a980588dcadd3179bb48991d56aa6","sha1":"e1fb07fb85f21b51fe6ea3a227babc0d8d3cf01e","sha256":"1c315647d1ee66e02db8ed1189c0ebc8b4ba02fab12ffd176e12fe8333a75c07","sha512":"cb01ccd9ad3d7d23b1a417b78c8d0cc4f7d39d681bbb3e6e71a8f364748f17fa74e7e164dd947c9a6cba406066b582bf8a628becf34abe7d158ef129ac8a0354","ssdeep":"","tlshash":"9921299b6e896ef4e748d7a05c02f9d6269b64bf3b670b80c3d08bb0e2614dd4f49510","first_seen":"2026-02-14T18:41:22.342564Z","last_seen":"2026-03-06T11:25:27.995615Z","times_seen":3,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://surfmine.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 19:23:58 GMT\r\nexpires: Thu, 04 Mar 2027 19:23:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 139891\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-03T18:28:58.266803Z","times_seen":320681,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":155,"dns":0,"connect":0,"send":0,"wait":8,"receive":7,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/projects/online_chat/script_settings?online_chat_id=3878","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /projects/online_chat/script_settings?online_chat_id=3878 HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://surfmine.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 16502\r\nx-frame-options: ALLOWALL\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: Accept,Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: ETag\r\naccess-control-allow-methods: GET, POST, PATCH, PUT, DELETE, OPTIONS, HEAD\r\naccess-control-allow-headers: *,x-requested-with,Content-Type,If-Modified-Since,If-None-Match\r\naccess-control-max-age: 86400\r\ncontent-security-policy: frame-src *;\r\ncontent-encoding: br\r\netag: W/\"b08efa29368995e1341c0e69ef9549e4\"\r\ncache-control: max-age=0, private, must-revalidate\r\nx-request-id: d5e9324b-1946-43fa-9070-103c018f4b69\r\nx-runtime: 0.019121\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44224,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6afe70ebf2e8840dc9d03b75a7f8a148","sha1":"7b3b04af79388826c283ec821558a0d381f56035","sha256":"1c48574816ab1b9cca3263be32c888f456d69e73aaf80faf7b3729c13d051ea1","sha512":"7c1c22690f85eb5c3a4c9a118e8cf18136d3c342bfc6c4031e2dff821b9cbeef05a34c14709a470d70dea5aee0fca37ec33454d23882ccde73bc01304520c826","ssdeep":"768:7/UgMO1oQu3+++td/UZFwUFjhFrYvrYtZcZCiFcI:Z1oKMZ1X9cZCiFcI","tlshash":"001394dd2b608ef49d46d3fbdb1e02e9742674fe35814b25c32dae0638664ac8585ce3","first_seen":"2026-03-06T10:15:56.399215Z","last_seen":"2026-03-06T11:25:27.986353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/images/man.png","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/images/man.png HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=4,i=?0\r\ncontent-type: image/png\r\ncontent-length: 305776\r\ncontent-disposition: inline; filename=\"man.png\"\r\nlast-modified: Thu, 15 May 2025 23:51:37 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2rBtBQbhnahSV%2FQMYOGXksjyei%2BXPiZX7qfGW8OPc7ovVPZqd0BA0v1m1EIbsEg79Q8WT4rU8K0w%2FjATcFQ9%2F4bb0LUcoAogYZOP%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099789dce57e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":305776,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 704 x 1152, 8-bit/color RGBA, non-interlaced","md5":"f253358552133210636180ffa26c014f","sha1":"261da7db886387c61639672ca119c0a6cf706890","sha256":"cb8e13ae85e34cf5e027a6511c7ebf5ade21a2216590885037934982119820aa","sha512":"84f5d9599ac68a527031cab36e0b260be53436b2311fb240197fe01975f9fb687c367cdf13607977f51b5dfce7d2c4d48b7cb94b8b3255e36fdef1361d8d1cf1","ssdeep":"6144:cGnwUyDU/UeEcTf3AHhvTI0THF1R6BwLoTq7Of2BzlOMYo4+e8X1M:ccwzD/eEM/AlMsT6Bw8Tql5OMY398X1M","tlshash":"785423662841df8ae2c6123c11b42ae7b5241afac7471cf3782e2f74b6915dcdc5b1ca","first_seen":"2026-02-14T18:41:22.354853Z","last_seen":"2026-03-06T11:25:27.969823Z","times_seen":3,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/js/aos.js","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/js/aos.js HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=3,i=?0\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFF1WoygOVw63rOT0up%2BijRafqFDPbMZUdaEKEZ7m4vfnjwYPJFwPhs28T5DsiIC3yElqev3nN%2BjCcpiPLbCoDUy8kn8zKf2sU5t7w%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"aos.js\"\r\nlast-modified: Mon, 05 May 2025 16:33:20 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\nage: 2385\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099789dd457e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14243,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14243), with no line terminators","md5":"a01f9089e8301e9eacfb9d029dc0ca5c","sha1":"165152546121aaaf96c19418908cffe3630a2336","sha256":"4460f1596174d06cca957fdaca2c71e1a377cf1d6f07ee4c75ffb3bf3fc97a03","sha512":"a90277dcdf97d7decdc3ee3546ff80d537a779d7c70a44b6fdc0059df4c131d92af5336ba238b3f3e7c5dcd721c283616a1a54338203864479d47b120aeae80b","ssdeep":"384:3IkfNaayGbHbcggNFUWTgZeo1sa6XCZy54:4kfNaayGbHbfgNFUWgwAslXCZy54","tlshash":"5552e7dc3681f0a617a794f7826f600ff2f14834245e90a0d269c4e67db58ae8673f5e","first_seen":"2023-03-07T01:35:54Z","last_seen":"2026-08-03T18:47:43.519261Z","times_seen":11768,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.6.0.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.6.0.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-15d9d\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\nage: 1087414\r\nx-served-by: cache-lga21931-LGA, cache-hel1410021-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 45661\r\nx-timer: S1772792130.043553,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30875\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89501,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-03T17:53:58.463484Z","times_seen":496054,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/autosize.js/3.0.20/autosize.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 13 Jan 2026 22:16:05 GMT","end":"Mon, 13 Apr 2026 23:15:55 GMT"},"fingerprint":{"sha1":"D9:00:47:77:A5:47:66:A1:6F:DA:EB:4B:BB:BF:67:49:BF:2C:A4:75","sha256":"07:A7:3E:4A:B2:9F:0A:07:6C:78:A7:7B:DC:2B:68:A1:84:7A:7F:1B:45:6C:71:8E:5E:79:F3:11:1A:6C:4F:62"}}},"request":{"raw":"GET /ajax/libs/autosize.js/3.0.20/autosize.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://salebot.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1164\r\ncf-ray: 9d80997cfc0e120a-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03d61-dfa\"\r\nlast-modified: Mon, 04 May 2020 16:05:53 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2017292\r\nexpires: Wed, 24 Feb 2027 10:15:30 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SWWB62eb%2FZHBi4UYvZOANRnzv5iA9syXWjTV0p8vI4MGIcdqrQLCxnvH%2BIrfHAVF8YP9YqQDSEeJ57xfQW60NzRD3%2FrTRs5s0HluxkpIKDTqdfOAI8zDQRr799RcN7eic0F%2FcumB\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3578,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3504)","md5":"bd5ce81bfb5b4f3e2ac487ac65f4daf8","sha1":"514dc1ea30ea9e4b84a55a689ba1f2c0fa7335c3","sha256":"280df42702ec950d12b698c40b45c507fc362089f53eb8376d3152dc1d5898dd","sha512":"10012889d2f384aadf560eea5fcc5914401e6e198132c5eb21c23487b54fc760b2032147b83bce014b3d0840130763aedbf92e5840ed96e115ad07235c1cbdcb","ssdeep":"","tlshash":"267166ea3760743451da4373261fa64fb22309cf679d40205629ecf42c74d992679ebc","first_seen":"2023-03-07T12:26:16Z","last_seen":"2026-08-03T12:04:33.773024Z","times_seen":2350,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":17,"dns":0,"connect":1,"send":0,"wait":24,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salebot.pro/assets/icon/chat-back-icon-41a25f7ee5b4649b91a0a8139df2fd95b00bf5515bf838f465e40e47e625cc75.svg","fqdn":"salebot.pro","domain":"salebot.pro","tld":"pro"},"ip":{"addr":"84.201.187.29","port":443,"asn":200350,"as":"Yandex.Cloud LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salebot.pro","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Feb 2026 23:05:49 GMT","end":"Wed, 27 May 2026 23:05:48 GMT"},"fingerprint":{"sha1":"55:68:F6:82:25:DB:C3:DE:20:88:3F:CD:F5:75:32:D3:C7:5A:59:19","sha256":"65:82:92:B5:16:8F:DF:C6:82:DD:5B:12:2E:F1:D1:2B:15:B2:4C:43:40:F6:4D:96:68:86:DC:EC:5B:B6:AC:A6"}}},"request":{"raw":"GET /assets/icon/chat-back-icon-41a25f7ee5b4649b91a0a8139df2fd95b00bf5515bf838f465e40e47e625cc75.svg HTTP/1.1\r\nHost: salebot.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://salebot.pro/projects/online_chat/script?online_chat_id=3878\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.25.3\r\ndate: Fri, 06 Mar 2026 10:15:30 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 264\r\nlast-modified: Mon, 15 Apr 2024 20:16:03 GMT\r\netag: \"661d8b03-108\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: block-all-mixed-content\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.25.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":264,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2a324b1cce18b673dd651694818eb1e9","sha1":"15bd87ca742f87c9974c0f84faf3629d3b5b4be6","sha256":"c105b3edb30c0bf17c8f472067d9092ed8b8ba54098836634024d13dfbc64aad","sha512":"3f374facad86333d94cd04f5d752704556ee6fa782b0a7c38a5ac0f5d3bd50b19f93876c6b651b49633d8115c6e630e318a26dc0d0d92cddcd9e0a63365192c7","ssdeep":"","tlshash":"44d0971aa34c4d2cf622cb10fbac327924e9615342891194de624630fa944aebd7fddc","first_seen":"2025-10-06T05:29:16.970739Z","last_seen":"2026-04-22T23:50:21.185451Z","times_seen":14,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"surfmine.com/static/site/lend/css/base.css?321","fqdn":"surfmine.com","domain":"surfmine.com","tld":"com"},"ip":{"addr":"104.21.93.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://surfmine.com/","date":"2026-03-06T10:15:29.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"surfmine.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 19:14:19 GMT","end":"Sun, 19 Apr 2026 20:11:53 GMT"},"fingerprint":{"sha1":"59:6E:F9:8C:2D:80:A5:1C:02:03:75:44:CA:4D:12:ED:8E:6F:09:05","sha256":"E2:87:3E:42:FB:7F:FC:0F:07:AE:E4:27:DC:84:D1:0B:E2:14:06:00:F9:65:40:84:F7:B7:55:BC:0A:2F:FF:E0"}}},"request":{"raw":"GET /static/site/lend/css/base.css?321 HTTP/1.1\r\nHost: surfmine.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://surfmine.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 06 Mar 2026 10:15:29 GMT\r\npriority: u=2,i=?0\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yyQ4LpwJYnkAAiUajm%2Fq22i%2FWGEI9QbB8cCDwH80QhEBoWG8nytxbUSF7TmwuPXy3x%2BI74EfcQex19xhqf0baQNnBi4GINv5DPRLzw%3D%3D\"}]}\r\ncontent-disposition: inline; filename=\"base.css\"\r\nlast-modified: Wed, 21 May 2025 01:27:11 GMT\r\nx-frame-options: DENY\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d8099788dc857e3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35305,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1122)","md5":"4be3df064fa0a531511cb47358608208","sha1":"dbbc7b017b32dc14af380966b5b2dcd9bc061992","sha256":"7648d762c2c2e3de800422bed81bba470f7c0758aa2ac91297f22a8dcbd1141f","sha512":"5966c2a71c99a9be898ba9b9f626be833a19d41566a178997a29511f5dbf7367af99109de1097885a28e7bb0bff7ac42189ea780451d87b7a833864e0c96329e","ssdeep":"384:yaEBvQw/nxOzaev9Y46EN2OBz3XxcXMq0ZMEmOgvXtz6l5QYydLoHB1pBuDux:yaEfW9lN3Bz3XxDcy","tlshash":"a1f2d7229b042109a017ec177ecbdbaa711ce113815b5afdb861247ececf5ac07f53a9","first_seen":"2026-02-14T18:41:22.317099Z","last_seen":"2026-03-06T11:25:27.978447Z","times_seen":3,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":231,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"surfmine.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salebot.pro/projects/online_chat/script?online_chat_id=3878","date":"2026-03-06T10:15:30.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://salebot.pro\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 15:16:23 GMT\r\nexpires: Thu, 04 Mar 2027 15:16:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 154747\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-08-03T18:30:58.539777Z","times_seen":43255,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}