{"report_id":"c60bf1fc-623e-4851-927e-c314341be9f5","version":0,"status":"done","tags":[],"date":"2026-09-26T23:58:46Z","url":{"schema":"http","addr":"upskillnow.live/","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"upskillnow.live/","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"title":"Parking Page","dom":{"size":33605,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32037)","md5":"7ce33138884990c10cc989d673b76f0b","sha1":"d9e360717cc8c7317e0ce068187c148dc31e1b27","sha256":"9cb61e4c8477c9d0af980e48e4b775b2b7f2a357b56f42804969e42c2f5de357","sha512":"2856f127baf2be11546babaf32dd583fa4c96d668b16a3a490ffe54b72756ece719f5896cbe2ca40592b8625f1dc21e758164a09b75ea0c579e63d1a10b6f2ed","ssdeep":"768:3993T3d0RMjLbzvfFIth6BOA4ibq4E2jXm0RMjLbzvfFIth6BOA4ibq4E3F:39pbyRYDvZBOANE4XhRYDvZBOANE3F","tlshash":"02e22aec73e0dbf5bb46c6ddb832485b35a6145a7f60e52cc8ec44b8fa02dd88918497","dom_hash":"domhashe71e4703a308db4a75c28cda20a21af7","first_seen":"2026-09-26T23:58:53.102Z","last_seen":"2026-09-26T23:58:53.102Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"upskillnow.live/","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-31T23:58:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"upskillnow.live","ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-26T23:58:48.245636Z","last_seen":"2026-09-26T23:58:51.083686Z","alert_count":7,"request_count":7,"received_data":357648,"sent_data":3047,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":2,"received_data":883478,"sent_data":971,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"upskillnow.live/","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f7f44632d30d21c0407011ae0b745c40","sha1":"3c16e36991291b059e20d01a8451e8a7f8c2c52c","sha256":"b521ca86c61fcad67c3fba37fa9a3c5c0332c9b0d84920efaa718a093900db1a","sha512":"94866f8396ab60eede1fcdba75e9686d163cb663b82fdb50b72069b70f2cd9dc8399ed4c33db28c2932e34205d66446e52b2cdd6c3a12b58f39e4ff046f2e3c5","ssdeep":"","tlshash":"93f0ab8b75da14342d5ba0365b6c8e283112225ab0454033bcfc88392f082ae0966be8","size":493,"data":"","first_seen":"2025-04-10T02:09:09.996115Z","last_seen":"2026-09-26T23:58:53.11274Z","times_seen":2779,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"upskillnow.live/index.c47875113c64bb45e342.module.js","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab37e6815eac308a1fbf428be02c4eeb","sha1":"3ef79a8bb1c151b3b4887e770f4a418b6d491968","sha256":"6214ddb7cf28bf035bc3ccf5558fe70362a779f5a61ed0b6031518b152853a6a","sha512":"2e5111edb11d334aa620ed7251c6729513cfa974bdca146ee51705c45c18ae923b5a7d25bc5d3fb0545c72d9c55314b98ec2f2c68f0e0ebbb8b7445591ba3481","ssdeep":"","tlshash":"9ac08cf84a20a974036a80afa26ed6cb2ae200f720012c0b4c5844085ca8f8c42fada6","size":158,"data":"","first_seen":"2026-09-15T05:19:51.872426Z","last_seen":"2026-09-26T23:58:53.110071Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WR7ZVBLR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"adfd83c117b15311b2f5f73a1e30d5ce","sha1":"078ff8c4d32a4b17bc2014210508604d0ec041f8","sha256":"62b1a315ceadf97ed8042dfef2be5ee033515a8e603100167fc42700ecde33cc","sha512":"8055bb820feeca889f3f2ebcb95501b27327bc5ca2a879309ffc3d93b0873e1718c1f1575861351cfd4d06dc99b5f62722e9ae982dd7ad3feca0978cd0d3ce76","ssdeep":"6144:Qwp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLC9/Sd9:XvKE63sV794","tlshash":"cf7408ccb7d6b42283a3b574503f018bb27a6992b84cc898f286edd42d7465a4177f7c","size":354076,"data":"","first_seen":"2026-09-26T23:58:53.110923Z","last_seen":"2026-09-26T23:58:53.110923Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X0VPPY8NXY\u0026cx=c\u0026gtm=4e69o0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b081cb1fd538a276abb6d164e5222ed2","sha1":"70fccf1c11fbf85a88b81918930464c81b7d9014","sha256":"85a73ac1f8923b57320ced3dbbc0d6cebc993d81b7f907b9895c2eddaf44444d","sha512":"1f32567ef8785516f045d51e332a4582b2d72a37ad88acd1c698db3686d4db7b6a132f8ab638d988b7edc79bbe89fdd23fe81688eaea33cbe2a0e4836986b288","ssdeep":"6144:eHwp4YH7Bzn5ceZqhLRIHECIcW3sVbEbzE8U3SLoJfjXSyoGnxs5Mo/9:bH7Bz5iCHA3sVNJ7PBxK","tlshash":"72b4f7ce73c6742293a6f178903f01cba57b29a2b45cc89af289dce42d3455a5163f7c","size":528168,"data":"","first_seen":"2026-09-26T23:58:53.105473Z","last_seen":"2026-09-26T23:58:53.105473Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"upskillnow.live/assets/ff0080baa663b824059b.ff0080baa663b824059b.woff2","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://upskillnow.live/","date":"2026-09-26T23:58:17.243Z","timestamp":1790467097243,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/ff0080baa663b824059b.ff0080baa663b824059b.woff2 HTTP/1.1\r\nHost: upskillnow.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: http://upskillnow.live/main.0788aa01710424e75cc7.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 26 Sep 2026 23:58:17 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 29064\r\nConnection: keep-alive\r\nLast-Modified: Tue, 15 Sep 2026 16:59:56 GMT\r\nx-amz-version-id: 9vc1tu5kAf8drT6Zg2lGUwSgSL7HCkYh\r\nETag: \"23b4c2c513f39b842ca1cde292380986\"\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29064,"size_decoded":29649,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 29064, version 1.458","md5":"23b4c2c513f39b842ca1cde292380986","sha1":"60f98770f72312178d8c053e4f4167f842e5fddf","sha256":"867365e08422e4de923db1811c97cf7f91c2992aec420d239298e086c5bbeab4","sha512":"74e8e0773a9799e64fa8cf0d35ebb00f5716b5df502bc943f2afa7f6423c9e844991533e8762a8fb0b9cb1a0a8310970f34626e9c7664de1e31b3301d3b0a55e","ssdeep":"768:MI0loG55hKQL/6e338I4FHastyBi67ryQHM:LI5eQL/6G38Iu63BZ21","tlshash":"66d2e13b1cd6a369c3d0a39779175a6d998143a47380316d35aee346b99b216cb0cfc3","first_seen":"2026-05-13T19:35:59.071326Z","last_seen":"2026-09-26T23:58:53.103905Z","times_seen":78,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"upskillnow.live/assets/9a93ecd23c2ef0fb7f8e.9a93ecd23c2ef0fb7f8e.woff2","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://upskillnow.live/","date":"2026-09-26T23:58:17.246Z","timestamp":1790467097246,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/9a93ecd23c2ef0fb7f8e.9a93ecd23c2ef0fb7f8e.woff2 HTTP/1.1\r\nHost: upskillnow.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: http://upskillnow.live/main.0788aa01710424e75cc7.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 26 Sep 2026 23:58:17 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 28636\r\nConnection: keep-alive\r\nLast-Modified: Tue, 15 Sep 2026 16:59:55 GMT\r\nx-amz-version-id: zz5_qrjEka5Dt4Kc1wLec7qWbgqUy8Qo\r\nETag: \"b84e1749ec0a62cd0d8b51e82526de85\"\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28636,"size_decoded":29221,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 28636, version 1.458","md5":"b84e1749ec0a62cd0d8b51e82526de85","sha1":"331a9ec984d014aca2006e85109e17c08efc79e9","sha256":"bbbde5ad13b4434a0b7dd14faca3a407f40a1b3970a6ca9e90c0098ab15666bc","sha512":"3d115306a19187d1f69068bcfe2a1d2821eb9ed3215942c191ad4b20f880f42ca8bb9093a8d38887a0e8b96ac6ee0da46f43411cc0ddf98b834c83be2c6c01d2","ssdeep":"768:xgtT+xoYR2gyNbkNW9LCmU8fB5LyFQ93fwNNas1wFO7:UT+pYg1Nh4mCR011wFw","tlshash":"d2d2e1a493a8f5ddc7d6808f3880dffa4b4c97e48e5672950b80d8915b678ee07413bc","first_seen":"2026-05-13T19:35:59.076072Z","last_seen":"2026-09-26T23:58:53.104695Z","times_seen":78,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":171,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"upskillnow.live/assets/9a93ecd23c2ef0fb7f8e.9a93ecd23c2ef0fb7f8e.woff2","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"http://upskillnow.live/","date":"2026-09-26T23:58:17.244Z","timestamp":1790467097244,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /assets/9a93ecd23c2ef0fb7f8e.9a93ecd23c2ef0fb7f8e.woff2 HTTP/1.1\r\nHost: upskillnow.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nReferer: http://upskillnow.live/main.0788aa01710424e75cc7.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 26 Sep 2026 23:58:17 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 28636\r\nConnection: keep-alive\r\nLast-Modified: Tue, 15 Sep 2026 16:59:55 GMT\r\nx-amz-version-id: zz5_qrjEka5Dt4Kc1wLec7qWbgqUy8Qo\r\nETag: \"b84e1749ec0a62cd0d8b51e82526de85\"\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":28636,"size_decoded":29221,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 28636, version 1.458","md5":"b84e1749ec0a62cd0d8b51e82526de85","sha1":"331a9ec984d014aca2006e85109e17c08efc79e9","sha256":"bbbde5ad13b4434a0b7dd14faca3a407f40a1b3970a6ca9e90c0098ab15666bc","sha512":"3d115306a19187d1f69068bcfe2a1d2821eb9ed3215942c191ad4b20f880f42ca8bb9093a8d38887a0e8b96ac6ee0da46f43411cc0ddf98b834c83be2c6c01d2","ssdeep":"768:xgtT+xoYR2gyNbkNW9LCmU8fB5LyFQ93fwNNas1wFO7:UT+pYg1Nh4mCR011wFw","tlshash":"d2d2e1a493a8f5ddc7d6808f3880dffa4b4c97e48e5672950b80d8915b678ee07413bc","first_seen":"2026-05-13T19:35:59.076072Z","last_seen":"2026-09-26T23:58:53.104695Z","times_seen":78,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":174,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-X0VPPY8NXY\u0026cx=c\u0026gtm=4e69o0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://upskillnow.live/","date":"2026-09-26T23:58:17.413Z","timestamp":1790467097413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-X0VPPY8NXY\u0026cx=c\u0026gtm=4e69o0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://upskillnow.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 26 Sep 2026 23:58:17 GMT\r\nexpires: Sat, 26 Sep 2026 23:58:17 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176594\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":528168,"size_decoded":177178,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"b081cb1fd538a276abb6d164e5222ed2","sha1":"70fccf1c11fbf85a88b81918930464c81b7d9014","sha256":"85a73ac1f8923b57320ced3dbbc0d6cebc993d81b7f907b9895c2eddaf44444d","sha512":"1f32567ef8785516f045d51e332a4582b2d72a37ad88acd1c698db3686d4db7b6a132f8ab638d988b7edc79bbe89fdd23fe81688eaea33cbe2a0e4836986b288","ssdeep":"6144:eHwp4YH7Bzn5ceZqhLRIHECIcW3sVbEbzE8U3SLoJfjXSyoGnxs5Mo/9:bH7Bz5iCHA3sVNJ7PBxK","tlshash":"72b4f7ce73c6742293a6f178903f01cba57b29a2b45cc89af289dce42d3455a5163f7c","first_seen":"2026-09-26T23:58:53.105473Z","last_seen":"2026-09-26T23:58:53.105473Z","times_seen":1,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":62,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upskillnow.live/","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-26T23:58:13.678Z","timestamp":1790467093678,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: upskillnow.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-27T01:46:32.948106Z","times_seen":18679314,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"upskillnow.live/","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-26T23:58:16.444Z","timestamp":1790467096444,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: upskillnow.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 26 Sep 2026 23:58:16 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 15 Sep 2026 16:59:56 GMT\r\nx-amz-version-id: a.5WlD.Kej.q6PJDnnC.CX7.Zazgdzt2\r\nETag: W/\"7392b3a72857d184c9754019c5b8845b\"\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":33398,"size_decoded":10311,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (32042)","md5":"7392b3a72857d184c9754019c5b8845b","sha1":"d24ce697a04ee11b625d53c291770b31f37612a7","sha256":"4cc944432253ff8161d50dc6970f9b7070cd63b1a66527a2ed9a48f285f3b4f6","sha512":"ccbfee7b0632b4e4e0d04c61b2a5536cf532c9276ee4e842062f8a7cbbe7d54cf3544ba9472c9d3bc1e7cc69b837c80e8794e7eb19e2dc6259183c1023c6b5be","ssdeep":"768:Tb9aT3d0RMjLbzvfFIth6BOA4ibq4E2jXm0RMjLbzvfFIth6BOA4ibq4E34:TbwbyRYDvZBOANE4XhRYDvZBOANE34","tlshash":"1ce23aec73e0dbf5bb46c6ddb832485b35a5144a7f60e52cc8ec44b8fa02dd88958497","first_seen":"2026-09-19T12:35:06.975695Z","last_seen":"2026-09-26T23:58:53.108381Z","times_seen":29,"resource_available":true,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":3,"connect":173,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"upskillnow.live/main.0788aa01710424e75cc7.css","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://upskillnow.live/","date":"2026-09-26T23:58:16.860Z","timestamp":1790467096860,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /main.0788aa01710424e75cc7.css HTTP/1.1\r\nHost: upskillnow.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://upskillnow.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 26 Sep 2026 23:58:16 GMT\r\nContent-Type: text/css\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nLast-Modified: Tue, 15 Sep 2026 16:59:56 GMT\r\nx-amz-version-id: OofZR2eQhwXLSIOGSdo70hw6RD6VYN6X\r\nETag: W/\"a78e1330bda47b09b69ffab4841376ec\"\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Cache-Status: HIT\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":234138,"size_decoded":32427,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a78e1330bda47b09b69ffab4841376ec","sha1":"70857d5f3d5ce44b128ee4f43418275d01856c8c","sha256":"3990242531695ac5b22c97158c0d5ebaed58076ec03bf887f05f1d38506f4b3b","sha512":"292f11d03b52874346ccb5cdb9bfd6ae6104b2bedf4964a56e2b9afcb08089d29c5dff4180c8404082a7982c07fe63ae29a0c223b9ad96f9244f55a800a9a1cb","ssdeep":"6144:wGjCUok/h4iXGbqo1luDOdd1lgQcdI9NEjkl6N94FE1+FVMT809QCZdwi51Ya19T:x","tlshash":"dd34fd84fa73462e15b7857a941bf8b75c154484db21cfdeb0035327fe8e4af4239aa2","first_seen":"2026-09-19T12:35:06.977597Z","last_seen":"2026-09-26T23:58:53.109293Z","times_seen":29,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"upskillnow.live/index.c47875113c64bb45e342.module.js","fqdn":"upskillnow.live","domain":"upskillnow.live","tld":"live"},"ip":{"addr":"44.233.250.75","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://upskillnow.live/","date":"2026-09-26T23:58:16.862Z","timestamp":1790467096862,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /index.c47875113c64bb45e342.module.js HTTP/1.1\r\nHost: upskillnow.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://upskillnow.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty/1.31.1.1\r\nDate: Sat, 26 Sep 2026 23:58:17 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 158\r\nConnection: keep-alive\r\nLast-Modified: Tue, 15 Sep 2026 16:59:56 GMT\r\nx-amz-version-id: VI3kGiA2EhhmfaZbHae8SK2myn9adUAT\r\nETag: \"ab37e6815eac308a1fbf428be02c4eeb\"\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: frame-ancestors 'self'\r\nX-Content-Type-Options: nosniff\r\nX-XSS-Protection: 1; mode=block\r\nReferrer-Policy: strict-origin-when-cross-origin\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Cache-Status: HIT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158,"size_decoded":746,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"ab37e6815eac308a1fbf428be02c4eeb","sha1":"3ef79a8bb1c151b3b4887e770f4a418b6d491968","sha256":"6214ddb7cf28bf035bc3ccf5558fe70362a779f5a61ed0b6031518b152853a6a","sha512":"2e5111edb11d334aa620ed7251c6729513cfa974bdca146ee51705c45c18ae923b5a7d25bc5d3fb0545c72d9c55314b98ec2f2c68f0e0ebbb8b7445591ba3481","ssdeep":"","tlshash":"9ac08cf84a20a974036a80afa26ed6cb2ae200f720012c0b4c5844085ca8f8c42fada6","first_seen":"2026-09-15T05:19:51.872426Z","last_seen":"2026-09-26T23:58:53.110071Z","times_seen":62,"resource_available":true,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":174,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-26","alert":"Sinkholed","trigger":"upskillnow.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-WR7ZVBLR","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://upskillnow.live/","date":"2026-09-26T23:58:16.876Z","timestamp":1790467096876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtm.js?id=GTM-WR7ZVBLR HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: http://upskillnow.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sat, 26 Sep 2026 23:58:16 GMT\r\nexpires: Sat, 26 Sep 2026 23:58:16 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 26 Sep 2026 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123548\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354076,"size_decoded":124198,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5041)","md5":"adfd83c117b15311b2f5f73a1e30d5ce","sha1":"078ff8c4d32a4b17bc2014210508604d0ec041f8","sha256":"62b1a315ceadf97ed8042dfef2be5ee033515a8e603100167fc42700ecde33cc","sha512":"8055bb820feeca889f3f2ebcb95501b27327bc5ca2a879309ffc3d93b0873e1718c1f1575861351cfd4d06dc99b5f62722e9ae982dd7ad3feca0978cd0d3ce76","ssdeep":"6144:Qwp4Y95H8/q0XUEwIcW3sVbEbzE8U3SLC9/Sd9:XvKE63sV794","tlshash":"cf7408ccb7d6b42283a3b574503f018bb27a6992b84cc898f286edd42d7465a4177f7c","first_seen":"2026-09-26T23:58:53.110923Z","last_seen":"2026-09-26T23:58:53.110923Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":42,"receive":47,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}