{"report_id":"0b4f49ad-e58a-4fea-bfa0-54f2c1386547","version":6,"status":"done","tags":[],"date":"2026-01-31T15:15:02Z","url":{"schema":"http","addr":"event-boob.fun","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"104.21.47.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"event-boob.fun/","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"title":"boob Airdrop","dom":{"size":36038,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27777)","md5":"02df251aa965c513a8698d96bdb4a425","sha1":"9bdcc42447054630c3ac637233aa3d9c7a594370","sha256":"1b028970396e8703089061d52250440fd959c451253a703051266c640c5f8ff2","sha512":"9b8b476cd788348bd9ae07a7b898b2bf0c6d2265586b19feb0ba3be54ae3587333cfaa36472a0a3057cc148496c4274e8c13f10f81926723e85f0d528c81cba0","ssdeep":"768:8hzQH2L0r82It4uSRhKut5NFgl+FU+xHyvfSDIJPJWf3b8fzwZPROHXL0hDgmwce:+zqyrYBXKgjgdSFW","tlshash":"31f24260f5905a3b360756ef5ad6df5d36b2302689276a48b2fc81c1ebc2ef34db1814","dom_hash":"domhashb761f5aebb962deeffa5cbb2439b6943","first_seen":"2026-01-31T15:15:04.633478Z","last_seen":"2026-01-31T15:15:04.633478Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"event-boob.fun","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"104.21.47.182","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-07T15:15:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"hatchling-resistant.g-app-d.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-28","domain_rank":0,"first_seen":"2026-01-31T13:51:41.383452Z","last_seen":"2026-01-31T13:51:41.383452Z","alert_count":28,"request_count":14,"received_data":696924,"sent_data":6814,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lite-api.jup.ag","ip":{"addr":"52.84.50.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2021-09-15","domain_rank":1536175,"first_seen":"2025-06-01T22:48:15.859785Z","last_seen":"2026-01-25T21:41:49.555987Z","alert_count":0,"request_count":1,"received_data":3089,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-01-25T22:17:37.642954Z","alert_count":0,"request_count":1,"received_data":10794,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"event-boob.fun","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-23","domain_rank":0,"first_seen":"2026-01-31T13:51:41.384747Z","last_seen":"2026-01-31T13:51:41.384747Z","alert_count":17,"request_count":17,"received_data":1230119,"sent_data":7838,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"event-boob.fun/1iyhh.js?hleadb9","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"be8d40a98ce7cbbde0d1d9e7dbb9f2c7","sha1":"07d1c339f21bfdeba8545bd3aa56af1c7ef8c60f","sha256":"390123191ad57e10e6ea857c7340824813064cd398678cab75b23d6e3dfd4005","sha512":"2393f05f5132972af2833b3d1905d14b852c56219879816db0a86ff20c4a4f52f9d5a854e963dda7a2e7cbc5f79290ffed7d3b7419b2001334b2ce7efbf02963","ssdeep":"96:C5S8nzSc/psUyZ9TIQd/ItvZ9g8oCzc7clELmocte6TimmmvJEwomDM1:CHntnSTIQNItvvglCz2cnzYmvJKmDM1","tlshash":"3e91b7b07180d031021b26e5a9b61bb92c3eece17d440074f9ac4d677b265caecf9f66","size":4552,"data":"","first_seen":"2026-01-31T13:51:45.987934Z","last_seen":"2026-01-31T15:15:04.660014Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad42fd26e91f77b6c24dbed1878ca2bf","sha1":"e07060815831622336a97d03dce8e28bc9408d9e","sha256":"13efbd7bce40d41ebcb4c705451d99ea0959cebe0fabd7e3addff15b80f55784","sha512":"ca96e3abd699d1d78ec1cc9e9527eb76b187f35c3fbf657c23ddfdbcc2062b47d854e918f6d5b09cdb8968b038ba335d63d06a8e85f8f2c8ba2557b03c42c7fa","ssdeep":"","tlshash":"67c08ca10424aa85b620096269a9325a31c242718b9060283b2f8a15bb2620791fc784","size":159,"data":"","first_seen":"2026-01-31T13:51:46.013691Z","last_seen":"2026-01-31T15:15:04.677006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"fc1881c150172372a09dc5008b343e08","sha1":"0495970911457a52cc1d51e3514fb059edd4231f","sha256":"a15c92fcc0121a8265d78ddc6a30a18c63eaccb855b2a5718002f0a89ec11cdd","sha512":"d76d6a2440d2f7d7b334c7ed7b8bf46ac8c5f8e1892713eab6191cb34e3781f80e0e647a049e631d10b990bcec7bd397d8e912098b4fbd995c1fe06739fb8fc3","ssdeep":"6144:oeKPXWmIeEPuG/FCPTIeEPuG/FCPQtVCsJz8CsJz+K5WCsJz8CsJz98UseK9fZpr:oeFDJ4VDtZ4Mo42vlp42O66z1uWmzGL0","tlshash":"27e4f9f53344da3e912843de78ee18c68a04fbd29dec063d66d7c83a6f10d2592fa594","size":658250,"data":"","first_seen":"2026-01-31T15:06:58.487126Z","last_seen":"2026-01-31T15:16:50.152782Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/_nuxt/assets/index.js","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60cb4f493a6561996054327192acdcca","sha1":"aad5574964b7f5bd21c2df0a892df0d8dfdc4dd3","sha256":"77182257f0b752f766d5692930a972cb1e06ad34eea4eed2a49336f1694ec2c3","sha512":"0b9b6d0538a4baecbf75a406c679c19752bb1c61b1f3d5e906e6634cb87b1ff08183441c5b6a1810111e20262fb2e4bb91f64e9562134f189465ce6feb432b34","ssdeep":"12288:D9Rk0azVHTfuS81e+Z3sojw9cQ4LpHw3pu:DRaZzfk9sq/au","tlshash":"e2e4e8f33204c97da1282ada68fd1cb689c4f6d19d5c063e52d7dc796b20c35d3ea9a0","size":685160,"data":"","first_seen":"2026-01-31T15:06:58.48577Z","last_seen":"2026-01-31T15:16:50.154087Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"event-boob.fun/assets/rules_waiting.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/rules_waiting.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wC4jEWw1VTMUfP51nRMVLy3cHtCK3PUbiLlvK81N1dMF1hl%2BPuVAALwv1EszwJhvaudJyrqhVS4I8hOT68cTqjWKR9xNMgumSMGE9qLL\"}]}\r\netag: W/\"6972cb17-9e2\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb2fd735a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2530,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7eef527627b492d9dd0b0fafdfd7176e","sha1":"4923c51ecd59d98c888ce2108b7e3b0b07038f64","sha256":"abf1e174763a9c22bf26e5b18a3a6dc79e34392ce6befdeea52ac188f129659d","sha512":"58043ddef5fb5739b8424a185a8ff27a905ee51ee07f5ce3259283b2a3acb60a8ae67f45e5bdfd37c2cf836987bacfd79d59fa91bc0ac8c91e30c91f114315be","ssdeep":"","tlshash":"f451d1eda7ec83d0c902b799dd07e536351b31f2a705d6c44324afa4b70249f9d8e584","first_seen":"2026-01-31T13:51:45.990982Z","last_seen":"2026-01-31T15:15:04.637343Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-31T15:14:40.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9n3dHYxavRfX1X5gff8a9Yz9aiKKAsO8Xifu%2FwvNwhht96b0ak27zRvGfEkvl6%2FCGhrqv9vOwA087kh15hOXSMX979fRPgWsGTIFkg%3D%3D\"}]}\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fa0e6c0b55-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15460,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12522)","md5":"fe0416e9d1bb0ee69a345e15beca285c","sha1":"2c078ea9dc8aea6cd882bdf55d5b81c288ac17a5","sha256":"f40a58be9abfa079829933d992942ab969a2518e0cc4250581a48498818b2be5","sha512":"cd8490b7eb6f342baad3ba4e995259c5bedb1a6ca129073b5bfe795bb2ab261386f32f6cb9665fcf272480e35fec74de96718f1ad6e65a8fdb920565725ec5f6","ssdeep":"384:oRLKDiY2w77AwZdYKQVEIhg4KhFRzH8jEsxwQdYLGTreaHUJJdYB+5dzGtDOHYZz:aDwZdYKQVEIhg4KhFRzH8jEsxwQdIGTf","tlshash":"b7620e326194263b011709cbaf736b0a39f3a27eca7b0d00f7f98ac0ebe5d55ad51855","first_seen":"2026-01-31T13:51:45.979189Z","last_seen":"2026-01-31T15:15:04.639064Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":71,"dns":48,"connect":3,"send":0,"wait":16,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/_nuxt/assets/index.js","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /_nuxt/assets/index.js HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sat, 31 Jan 2026 15:01:14 GMT\r\netag: W/\"697e193a-a79c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, must-revalidate\r\ncontent-encoding: gzip\r\ncf-cache-status: EXPIRED\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLZcC8M8Ueo3vQha2RVaGseQn8xh6%2FvPMJQ4Ec71eRgOeYgFHAlR3f%2Ff4P2PLTz8I%2BXO6D1I9HgwEOdhmevk9LOH38nU4nrWAc9onwyMOIOkWu2sdhJcj7NfART88g%3D%3D\"}]}\r\ncf-ray: 9c6a28fb5a165fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":686532,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (57158), with no line terminators","md5":"7d1a4b33e7ca5f7e558e71f2985ac5ff","sha1":"c34c9d75ecf9ec57390e53be8e4a6e3c7c80ebfb","sha256":"08515b5b2fd56cfcd0c9681141f514a573cdb01b497356186426aa30f1af37d7","sha512":"a4cc8c1182086869ad11e5b057784b66920cb56fde7a87aa170e69f9ec3111aaece20500dd11dbd168e68ec99450c3db9f9fc2f738f20213d875d5322a147539","ssdeep":"6144:m4C1p2qmwijqKfpCxPmwijqKfpCx4JZwurhswurhA25awurhswurhvwsIoQ7zJ3T:D9Rk0azVHTf81e+Z3sojw9cQ4LpHw3pu","tlshash":"8ee4d8f33204ca7da1282eda74f92cb689d4f6d19d5c063d52c7dc796b20c35d3aa9a0","first_seen":"2026-01-31T15:15:04.641905Z","last_seen":"2026-01-31T15:16:50.147959Z","times_seen":2,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":36,"dns":28,"connect":1,"send":0,"wait":383,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/intro_info_about.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/intro_info_about.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FOz5s0B6r%2FHC4MXbnJMroTbdrL5VE%2FnWiUcmOg3oUgYwbhfQWjwsY%2FntmvxVwfJLKdI9hsSyhcvzLrzyRR2ytLDe5fGa3uQTtDT%2Futr\"}]}\r\netag: W/\"6972cb17-c1d\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb1fbb35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3101,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0d6e08e0abf38a79410da6fcc54839ef","sha1":"78b250edc37566c1fa0bb487dde764129e6467cc","sha256":"f3d97646ba81db6a25944a47365f8a64913ee17bd303934de7a6aec7463ecb27","sha512":"877c0cef2725d60877f071dbff17e5c139465e8e7568240127899f546fe29e2fdfdb96a792c6022f6d7b2ad87f68ae3809a742332c68a049dde251b033d29058","ssdeep":"","tlshash":"445133d032aca3d4a410e7bc832d99d2752339e8b9579a94f7f21c1ab85065d0c64fd7","first_seen":"2026-01-31T13:51:45.983938Z","last_seen":"2026-01-31T15:15:04.647083Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:41.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NGF1KAcz4SXz6PpGYjPcOC6%2FiazDzn4fHbl1jwKRgq1bWt60Yd2s40unOd%2Blio3bQMvUmd2I3DLd%2B6lOAVp6huZaWYaL6sOvrBA80u4fNKdXUc0sxmB3P6mx1O1nw%3D%3D\"}]}\r\ncf-ray: 9c6a290389f65fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/SFUIDisplay-Medium.ttf","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.564Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/SFUIDisplay-Medium.ttf HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/wy5b4.css?du39p0w\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 179924\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\netag: \"6972cb17-2bed4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hWVCbMVEG14qcisilkzLgr0R%2F1F%2FnqiFHB7vG3tdEbkeNMm9%2F5ovxIFaK8CWF48vbg17L0J6X2isN%2FtxlcCURKDrVHBkzsbolCGZWup1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a28fb888d35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179924,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", 32 names, Macintosh","md5":"a03732f2919ecd0a4a6e774070fbb72b","sha1":"7c0225fc6227fe9a963bd4caf256cae461d0018d","sha256":"4751b1a82a3399f8d4544fbdc140b66107d67bb5f926aee632503d82f208f018","sha512":"f0f7ebd1fa661e441dd4ade7095a53c9e7fdc3ab5f566c912f8a56880258053dee237681d881c2d7e0c82ea92967979918e9db775b0487bf0b7bb490b785e3ba","ssdeep":"1536:WkmsN+ElqYmc1/Twp3g9+dDzrqZO+OzggBfLtSTTPEsxMaGAh9gdeJpUGk+pA:WkmC+nUEFdvOLyA5xMfAoUCz","tlshash":"06047d1ff3c7cd67d191be396d11f331a26bfd319faaa38a7408d154904a8e41ba0a53","first_seen":"2025-11-01T13:49:52.014178Z","last_seen":"2026-07-22T11:03:33.276128Z","times_seen":121,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lite-api.jup.ag/tokens/v2/search?query=9zqre5sRRdFvKqyTyvEd1jcKDRF4g47s7mZSGUnQpump","fqdn":"lite-api.jup.ag","domain":"jup.ag","tld":"ag"},"ip":{"addr":"52.84.50.118","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:41.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lite-api.jup.ag","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Apr 2025 00:00:00 GMT","end":"Thu, 30 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:C1:1A:55:81:46:51:60:92:8E:23:71:EC:0D:F5:22:E2:77:CC:B6","sha256":"9B:2C:9B:3C:A9:B9:32:F1:2E:E7:12:53:C3:E5:39:A9:B1:D1:92:0F:BD:83:0D:8B:73:33:20:78:3D:B0:C8:E7"}}},"request":{"raw":"GET /tokens/v2/search?query=9zqre5sRRdFvKqyTyvEd1jcKDRF4g47s7mZSGUnQpump HTTP/1.1\r\nHost: lite-api.jup.ag\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Sat, 31 Jan 2026 15:14:41 GMT\r\nserver: cloudflare\r\ncf-ray: 9c6a2903cfd556be-OSL\r\ncontent-encoding: br\r\naccess-control-allow-origin: https://event-boob.fun\r\ncache-control: public, max-age=10\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 1052525f0d15ecb6749de58fe7a481c8.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: rgtLJSGTGj_qUiIPx7tDZbUgGNCRE-KZVjaGu9WNmxNgllvvj8I9SQ==\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2394,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"55aa0cd3808f5d7d057f792071c2eac9","sha1":"77618a8c274494a245fa12a36726c04aad3ab2ad","sha256":"82e04973d762bfa517582070894e8e7d9dd010780bc5a73eaeb723e99c6c51a1","sha512":"7a2101ba99b57a53cc067ba3f3216900b148aace5b0e1270240983f10ee2f44c62934aa26d7cd3f50085f6f4335b4aa202a909d62ebbd8848bcc8d2da2716e83","ssdeep":"","tlshash":"8741e8f7671814f2dbd64387a46c3f42a1d124f28a242492a63ddc6c4094a3f2748f2f","first_seen":"2026-01-31T15:15:04.652911Z","last_seen":"2026-01-31T15:15:04.652911Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":35,"dns":21,"connect":1,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:43.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:43 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DOSNg5P6h6PORSPRcZDzRs2%2BI%2FL7pEBUpYof5LCdxF68WNE5tJ5u5E0xRpT8e8s%2F87vLCYPpa6mjfx5h%2Bh4eaqx3wWMrsn%2FJAAqcH93SFbAPl181gzmpg3YrL%2F6a8Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a290c6b4a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":252,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":252,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:48.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:49 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rJkJHY9eDkJdLM5QWgjW%2FDFrKtdQhTHe9U5Rf1QMcx59B%2BOisp0Fk0U7sndEy5WsRC%2BjwyNaQzDJFyOMxczu2%2FTGBYoOuTmLMzxAKTfVj1uM6RcKHw%2BUvrOHwHQlwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a292f9d2f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":260,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/intro_info_car.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/intro_info_car.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=czg%2BplKLV%2FTrMe5EoqDxg90gPNbBy%2FlUnvFKkrk8vbNN4is9%2BjBBhRDIUpfzd86uaRyBKhPy0X1ssa4zNs%2BFkgkD0tJd%2B5wQOJfqmLFd\"}]}\r\netag: W/\"6972cb17-75ebb\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb2fd535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":483003,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73379b9ee6016227c15c2af9fa0a44de","sha1":"f2f1832e37c5130adeca71b307f613a9404955b6","sha256":"de3aa7dcd3a5d86a25b1e59f1bf00cc82059d5cad1b37588177fbe27833b37fb","sha512":"553d5673626c21f35322bdb1832020cae9fc917faa18fe231f96d0a63dfc02fc6a248188b443e0981774b9f2ccb2377d21807f4e175e7bc293e8add48bc0862e","ssdeep":"1536:bbMbwyG8FbTN0llyq32bP1E2o+1kOg4TBK93rjHw/0UEGR7LYBpcZ37u/RNSmwhV:kW4ENat","tlshash":"3ca43ffc2bb11cd5cdccc7c7bf0191bd342792bb99958a08c22c5b582999d6ee815bc2","first_seen":"2026-01-31T13:51:46.006301Z","last_seen":"2026-01-31T15:15:04.655328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/bafybeicwfwbiqgws36n4t3ppdftuougcazem3wsfxojbbw52ns5mvkuxhq.png","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:42.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /bafybeicwfwbiqgws36n4t3ppdftuougcazem3wsfxojbbw52ns5mvkuxhq.png HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 54546\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\netag: \"6972cb17-d512\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5002\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMOytoQ%2Fik4DRTKz%2FLFjRD%2BFcB59irsPn0gN0AnpCJup8aFgH5eNjOFY5504tzXNjjxEoVhGScUBbvtB92aQNB08pU%2Bo5lkDomN%2FFeCo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a29069ef535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54546,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x719, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f8538eb236998299a96b6e02e23ca1e5","sha1":"486cd3cf4e81a84605ad8f73f1a4a0c9cf87fd99","sha256":"17e8efa26186c44ed0f6e135bb2e3c8200f7aa7b6def04f555d422a021523e8a","sha512":"6f94c21f848a619e8cfbce8986783c4fc51fa4e1d19e162c1e00f859fcd300c62e1141e20c11ac0a74394635304f59b5e5b66e1b44f02d08137267f96553b2d2","ssdeep":"1536:ckNr6e2Qx9ff84UOXHsxpAuR2TKWFYnruHX/jCO:3r2Q1f84FXHsxpUTKW8rYCO","tlshash":"693302cdb2118b590ae21d0c2bd34a35e5dd6dd41a030bc2ac7cb74bbeb369847ab113","first_seen":"2026-01-31T13:51:45.998569Z","last_seen":"2026-01-31T15:15:04.65758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/1iyhh.js?hleadb9","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /1iyhh.js?hleadb9 HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\netag: W/\"6972cb17-11c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKKOr6uSaKdJHG5wIGYoz9GA4NAwNjvk7j21Ur7EKBujGxSzVPJG7QIEAGcoZQpvFZu3bsTgjk5xXd62V25SYIeaoqsERxEpTj1vYxkF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a28fb1fa235a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4552,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4552), with no line terminators","md5":"be8d40a98ce7cbbde0d1d9e7dbb9f2c7","sha1":"07d1c339f21bfdeba8545bd3aa56af1c7ef8c60f","sha256":"390123191ad57e10e6ea857c7340824813064cd398678cab75b23d6e3dfd4005","sha512":"2393f05f5132972af2833b3d1905d14b852c56219879816db0a86ff20c4a4f52f9d5a854e963dda7a2e7cbc5f79290ffed7d3b7419b2001334b2ce7efbf02963","ssdeep":"96:C5S8nzSc/psUyZ9TIQd/ItvZ9g8oCzc7clELmocte6TimmmvJEwomDM1:CHntnSTIQNItvvglCz2cnzYmvJKmDM1","tlshash":"3e91b7b07180d031021b26e5a9b61bb92c3eece17d440074f9ac4d677b265caecf9f66","first_seen":"2026-01-31T13:51:45.987934Z","last_seen":"2026-01-31T15:15:04.660014Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/intro.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/intro.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v97PtxILslkD0DkFly%2BwNdNl%2BF0FTCRiHXNUbpZkvJ6%2FDFDgaiIXVnO1Bz27UCAQpSP5gsxuCFHre%2FM3EdLylnLnJqjIRr9p%2Fh8IVbhO\"}]}\r\netag: W/\"6972cb17-519d\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb1fa935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20893,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ab08529b6ea4601b9007f8ea61d93c51","sha1":"72ee47a4658b640a5cc5dc5636fdee7b4a022d65","sha256":"4a4c5e09e8a40bb750be2feb0f0c3aea4f9179857fe3b47aa328f11068b1f199","sha512":"074000dc80a20aafb140e9bd346d024b52f72dd3d13901ca0ed99225fa722a9a609105d04bdb739bbd50659cc7b55f3f1e8650c50dc27c7fc3318039b7f54ac3","ssdeep":"192:/4a4fqUw/0T7NXETLYGBoND5PBNObpq+ztB5PZr/Gur6:wa4fqpO9rGBu5PBSq+zz5Pc","tlshash":"c49235f1d35d981fb98249ecd2a448811e2d1277f1a4818d7d9c275ee0bbec2e86f358","first_seen":"2026-01-31T13:51:45.981353Z","last_seen":"2026-01-31T15:15:04.661996Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/intro_alert.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/intro_alert.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKmXXZ1uZnkjnHjAxz7jsGTH0WQj3zagxWPW7A0hssaAp2h6knZ1dgGx6mY%2FLajM3AfNk%2FSy%2BeJOZNEWyLd0A11nPqCPm%2Fnl9UHZ4%2F9q\"}]}\r\netag: W/\"6972cb17-3fa\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb1fc335a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1018,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1614a2c2fa977a66252f8563b10e88b7","sha1":"e4c0430921b86f9e420efa3e499c702fd8ad6798","sha256":"08c42708347296486598d04d57950320a3f1be626e757940f147214f10401d5c","sha512":"39488d58ed8085bb9431cd2901d7b75d202b3d4e738b8b7a9e7c805d647c2a1049ca7e9e5b507addb6bea187ad5cd5e41737e85a33644896f1c27f154fef6b97","ssdeep":"","tlshash":"b71102f03048c5d58d07abfdec1758a25c1fdcf6afd82198839054b0313a265cc24ea5","first_seen":"2026-01-22T22:37:41.021424Z","last_seen":"2026-07-22T11:03:33.274341Z","times_seen":125,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/visit?origin=event-boob.fun","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:42.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"POST /api/visit?origin=event-boob.fun HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:42 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xlY3PWfXKnXU69gVtP6yrV9IJk%2F%2Fy%2FQ2UYI8omdeq%2BBtlCBpX7E2K902JBOfBEEgnJbiS%2BFitnyk2U0mPrsN2v%2BjwLzwqXeUx6Xjm9UCZKKJUaOrIOxt8JPsM2vf3w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9c6a2904ce163181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-08T14:43:24.484532Z","times_seen":446683,"resource_available":true,"data":null}},"time_used":324,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":324,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:44.270Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:44 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eb7gzwUNIFXz81uvRt8clO1Fjyb84BYCCFxjDBiN7e%2BXuUYxtb4zdylNAMPiiw6O%2B3Fx9iBsz8%2BPQZK%2B35l56RYzEDBMgOaJ%2F4eGnLaY%2FeNbe75xB3QabPAUL1wUAA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a2912aaf03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/wy5b4.css?du39p0w","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /wy5b4.css?du39p0w HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\netag: W/\"6972cb17-7c5e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0EPeN861RNRn6ITtF%2B1NmXQZzf6Iu%2F6jGcyJ8yKJZKSKcwLdrSQTXTvvSUdGqBtYi1bf0wswkkwQB%2F9mFlrPbq6gkYKR4DnbfeRQ5Zh4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a28fb0f9135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31838,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"dfeaf03fec697d7cd3d383e4ce0a14b6","sha1":"94b3484eb69c6d07926bcc1f59b05a490d070b31","sha256":"7485930dccf20c1db029846e42527288799215aa4ebed35483a9cd0c12078824","sha512":"d1a3bbc2eb6d883192c8bd7356a601d03d5e7875a3bed3f540be1f0a3bcb29e6243fe76c8c3b2eb32bbd96e04b957b69b4033b9cf5c035443facca63d569e592","ssdeep":"384:ZTFJF9mj4A4gHxnH5h+9o6H4pzpNKeRbSIKAHm:lFJF9hxgHp6v4pTKASIKAHm","tlshash":"5be203cb2bb16a00b417e9a42fe64b5573598403d10fcdba7ae0207ccf895d996b3b4d","first_seen":"2026-01-31T13:51:46.003748Z","last_seen":"2026-01-31T15:15:04.665512Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/intro_info_rules.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/intro_info_rules.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B6MaAx2XnjA4f9WRNe7XT85UWhQjpXaPCCOqIlLsq%2Bpwo4MUgac%2BUp9kTnTMm%2Fu2ugETAnn5UnshLTuQcBE1NS3wPuQTsQXpIIYsQMgL\"}]}\r\netag: W/\"6972cb17-5d3\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb1fc135a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1491,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4b90f61378d78917d01eeeeab4949316","sha1":"35c482cace81ae9c4a2fee74d10c41a9ed60670d","sha256":"97525c1397e2aa15011a0cf4296b081379c0ae1fbe0b5980aef18689c71e4ebb","sha512":"46c973d98f7add75d3ecdd5a3ac7acaa3b9b223c0dfe2f3253e43d2a521e4c872daa66214edc0312597936454bdef12521d87439fada092bfd96cf108d6560b5","ssdeep":"","tlshash":"693112a47325c3fce401b4e9454bb86d413a16d7aa7af0b1c392760a79890dca820fe3","first_seen":"2026-01-31T13:51:45.975854Z","last_seen":"2026-01-31T15:15:04.667244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"216.58.211.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:41.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 08:37:56 GMT","end":"Mon, 06 Apr 2026 08:37:55 GMT"},"fingerprint":{"sha1":"DE:3B:B4:94:98:33:3A:CB:2A:A9:96:A1:CB:19:8C:84:B5:8D:23:E9","sha256":"D0:A1:5A:83:80:77:19:74:AA:CB:27:69:4A:C7:2C:F0:DA:06:9C:79:1E:07:77:9A:4D:7B:5D:AA:A2:D2:D4:E9"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 31 Jan 2026 15:14:41 GMT\r\ndate: Sat, 31 Jan 2026 15:14:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-08-08T14:39:23.616302Z","times_seen":39725,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":119,"dns":1,"connect":20,"send":0,"wait":31,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:50.911Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:51 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWDFQ5KnxMSmgBY7gdfF5ByulCRPyr3JErdFmsvmp69rsoiGxZaqMDI9YrTxLTdnvzLqp6TDWbxJwRGiBUbxmVtKsff52yO78ke45YWLugWGtCqPc2GMZq%2FWLvjWug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a293c3de33181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/live.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/live.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nl2EswU6STo3YwBVZavLrqGFgBDfa9ch7KtMPieZaYTescx7XTu2Stv4I6rbt9QVNH6dHHAa%2FgT9hrBeobr8%2BmKz1JjNlURrYWfzKAfU\"}]}\r\netag: W/\"6972cb17-f1\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb1fb935a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":241,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"314875733890488ef8a322b5057e52d8","sha1":"77e7695f34a2c5cbdcbbb374898a7955b48013e0","sha256":"efb765d831d72842889cc460b823f6ec38293eef012945db53b76aed1e04bb80","sha512":"9873da7256a3eea092a104374cf5917d3f96b074db3e0042130eb4985d317735252abb204e042aea142a4d872f7824ab5fcb29732a2bfe34ae817232b67b0854","ssdeep":"","tlshash":"97d0c725622cdb3b565ba014d42fe1c7309a41ed534dc36650617f5af1038e77972374","first_seen":"2026-01-31T13:51:46.000689Z","last_seen":"2026-01-31T15:15:04.670068Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/SFUIDisplay-Regular.ttf","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/SFUIDisplay-Regular.ttf HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/wy5b4.css?du39p0w\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 170404\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\netag: \"6972cb17-299a4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5000\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9auZ7RDpfIk7SEHI9BNqFGqrsb4di09Cb6WFrwpJGqTSn%2FNDbNUDYNhcVqXR720rcp%2BfQ9C7%2FgBNPOXokm5n1pa1iFqj2ynJRu1bYC9F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a28fb889635a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170404,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", 32 names, Macintosh","md5":"b8d6156c471232f96b10f3e36a54748f","sha1":"33b913d00a63f3d21a82428f02c4b5d7b6a5aae7","sha256":"ce43ea3e3e3bcea43a3aa5080c9aebabe95ae6fdc3a7a9f15ef5cf5fc1bcd424","sha512":"d23e42ad1e26434eb65fc4197ce9f8f784f20df0c40b44139c8f96de2e5624ffca705fd28726e0a2fb2b6a26b101fb3c5b91339f0f2de515c51c0c219e07706b","ssdeep":"1536:UQeW3LcpLTJPTG7BibKztrn7qICRQwpV7GXNPvTfJxjMMg/PE4p7QcuZfhYdTTRa:vL2ys5MGfxM60","tlshash":"91f37d3ff38bcd79d6629a3e4922f3322926fd315eb6934e758c95bc444606148e4f82","first_seen":"2025-09-13T12:14:24.912467Z","last_seen":"2026-07-22T11:03:33.256331Z","times_seen":120,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/SFUIDisplay-Semibold.ttf","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/SFUIDisplay-Semibold.ttf HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/wy5b4.css?du39p0w\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 181492\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\netag: \"6972cb17-2c4f4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5000\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMYO%2FgvxrppSsHxjsxm52yTvNvsJvaG%2F7L%2BDuSqhOn8%2BR6NcL%2Bq1dcZIZnJOlPLx%2B2xVPh4dYsIwHshS1wDtt25MDSkuK26atNeICRhR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a28fbb8db35a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":181492,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"BASE\", 32 names, Macintosh","md5":"1557c49bc9b4bc705f42cea044392d8e","sha1":"719ff7ba22966534e63bd764f61e5ad2df655513","sha256":"9c8cc4fb7d2dc26e2820fa8011f99de5a6bddc933d826f2fecbc1ca1e9085b6c","sha512":"11f3055ab8ef99a3059ce2d474eff0af8e68516433f0fad9680424df151a1a851823572f130044ba14d783a474d0dd3fc25d3c33c17357f58a1792a40f315177","ssdeep":"3072:N5AI7eka35AzYzo14v/pPD6XbhozDrcefR9xMx59As:NaiZapAETvRPD6XbqFtMx5R","tlshash":"f4047b57f3c3de22c21379386a91e6355237fd260fa2d38eb08929f2d5865920dd4b4e","first_seen":"2026-01-22T22:37:41.005986Z","last_seen":"2026-07-22T11:03:33.277017Z","times_seen":121,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":7,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/is-banned","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:41.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:42 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0eJybqKtH9EBwXsGgP77xsmYTxci5NLo6VIbu1F7hlaqEQDLEX4J%2F0bT6tp46AjeOM78SIH7OoO742kFfbovYN2IqptlvO%2Fe2RWnjJkV%2BRA62Q05E98Ry8J4NeX8SA%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c6a290389f55fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-08-08T14:01:11.841374Z","times_seen":119042,"resource_available":true,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:42.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:42 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAeG6yFZDG79CYjgl0H4aojrTjFeeq%2Fl3Z1cEU15wv0LI2%2FkNH1oaUKij65m7NXxlXXCPqfFusFG3iZraaMs6tGihxoRQUsFxLQ8210t8pVyk5y9S7v0okch6OBncA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a29078e513181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:46.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:47 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xfi8HNpQE%2BtUuEwGtxqZ6DfDvpFQSN1sqEmcXO2hdq%2Fg5OKjhxYdy9QfIEK%2BBZUcDCiaQKeboV1VPeQp4FvFd1NvMDiPqY7cYPAukgcqCG0dnC%2FoDOcdT4eNY7Uvdw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a2923ac603181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:53.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:53 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LFvsa%2Ft5zR63srEfkuCD4buK6OY%2BpHVZDw%2BOiCpHmanuXmLbx3pnkQv0wQUamJ7CJAEOSOxsuQNg1TOfOZkvTNo%2FCSNqgXyT%2FbZBY9%2FLnymL%2BuCaFXKDCNox3iTkkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a294a4cc13181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:55.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:55 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z0sS9gpHsha1Svwqsp7pOZSlF8kjl8nYvvsNVphyArTC1I9LH%2FvL5TTxtiwBd3CIvFSFO7zj7kXb6UVQWM%2BrsLm%2FdAulpFfBe4KuU1RAZ55DNjKBcWXA1%2Fc7U%2B3CLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a2959b8c43181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/_nuxt/assets/index.js?r1j5117","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /_nuxt/assets/index.js?r1j5117 HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlgjuzcRgIo5zDsq53CBlKoD%2BjNJVpXHWhIX46k73PPwSkuGSjSfmUIyqAopmmttHm%2F3NEfq%2F6o0%2FRo2Zb1ls5ZvLlnDw6RuFuewBpzd\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb1fa535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/assets/intro_background.svg","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /assets/intro_background.svg HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/svg+xml\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yLMEMZ2b6GMqFPfLalT1YmZEwF9%2Fc1%2BCa81LAMXNVMaJ8dudYifB5lltQswmGfuWMMth3yIVj6hsINZefqv%2F6gP65rbskV%2Fd3D9w%2Fk1\"}]}\r\netag: W/\"6972cb17-24e8\"\r\ncontent-encoding: br\r\ncf-ray: 9c6a28fb1fa835a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9448,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7da064f58b2360cb86816684efc08c32","sha1":"9aa84103a31231b75116f102f24469fa7fd75a7f","sha256":"2719c89974601e3e6fb16731868f3039ca996ee7bf17abadca7ce97c1636941f","sha512":"3cb06bb5b5087ccdf2cc737abdc12398deb17e4d06c996c0deb8b26623468ea763a75f45b212a12465b3ca175f7a14fe4690165d44f3567eaffef544887ff72d","ssdeep":"48:cywAu/4wWeWUW9oWgWpW2EW0W8WSqW8WUWYqWnMWqW5WvW2W0WRCW/jWkW+W8oWb:Rw9Q1ldb7u24adsc8ZeoCB","tlshash":"fe12e73b7fc8d712f95f3011d2b1b897092d82a21649f22a4831bb59c6364be6c7f587","first_seen":"2026-01-31T13:51:45.993936Z","last_seen":"2026-01-31T15:15:04.674854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"event-boob.fun/bafybeicwfwbiqgws36n4t3ppdftuougcazem3wsfxojbbw52ns5mvkuxhq.png","fqdn":"event-boob.fun","domain":"event-boob.fun","tld":"fun"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:40.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"event-boob.fun","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 00:07:32 GMT","end":"Thu, 23 Apr 2026 01:05:50 GMT"},"fingerprint":{"sha1":"6D:53:44:D4:E8:C0:D5:3D:D0:15:79:01:78:21:52:6B:80:79:E7:11","sha256":"F6:E9:BF:C2:53:C5:9D:6A:B7:D5:AB:30:ED:2C:21:6A:7D:49:37:15:A8:F3:15:3F:10:5C:FC:FC:1B:3D:32:B1"}}},"request":{"raw":"GET /bafybeicwfwbiqgws36n4t3ppdftuougcazem3wsfxojbbw52ns5mvkuxhq.png HTTP/1.1\r\nHost: event-boob.fun\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://event-boob.fun/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 31 Jan 2026 15:14:40 GMT\r\ncontent-type: image/png\r\ncontent-length: 54546\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Fri, 23 Jan 2026 01:12:55 GMT\r\netag: \"6972cb17-d512\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 5001\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KE0lqPJzBT%2Fbc17gD7gZsYLOkvYrdwQ18nkKBEZ1UwyvJhlPAFSMe0wvFpl%2BK6TRzdcEy7B61JwZSDLhTSmMHkGzuKfo4ZnLQTSVYuN5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a28fb1fb535a6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54546,"size_decoded":0,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 720x719, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f8538eb236998299a96b6e02e23ca1e5","sha1":"486cd3cf4e81a84605ad8f73f1a4a0c9cf87fd99","sha256":"17e8efa26186c44ed0f6e135bb2e3c8200f7aa7b6def04f555d422a021523e8a","sha512":"6f94c21f848a619e8cfbce8986783c4fc51fa4e1d19e162c1e00f859fcd300c62e1141e20c11ac0a74394635304f59b5e5b66e1b44f02d08137267f96553b2d2","ssdeep":"1536:ckNr6e2Qx9ff84UOXHsxpAuR2TKWFYnruHX/jCO:3r2Q1f84FXHsxpUTKW8rYCO","tlshash":"693302cdb2118b590ae21d0c2bd34a35e5dd6dd41a030bc2ac7cb74bbeb369847ab113","first_seen":"2026-01-31T13:51:45.998569Z","last_seen":"2026-01-31T15:15:04.65758Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"event-boob.fun","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:45.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:45 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8q7a0L82Af%2FYUIk4bs0MEOdQJ%2ByfSHXI8Ap9mcPsBUwIFG5J%2ByC7BA%2Fgq9SLwLmJqfHGtwZxHsyWiBABM4iGcjTD5FzazQCvf4MDkX1p51BIBXIYlSzpOC139w%2Fccg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a291a690d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hatchling-resistant.g-app-d.cc/api/config","fqdn":"hatchling-resistant.g-app-d.cc","domain":"g-app-d.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://event-boob.fun/","date":"2026-01-31T15:14:58.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"g-app-d.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 24 Jan 2026 14:44:36 GMT","end":"Fri, 24 Apr 2026 15:41:52 GMT"},"fingerprint":{"sha1":"F5:A5:7E:A0:DD:EF:11:02:83:FD:46:5D:1C:F4:04:73:F2:99:C4:B8","sha256":"2B:46:A4:5B:DA:A1:FA:66:A1:F5:C1:D2:6F:A8:30:EB:8A:E1:2C:53:99:E9:A0:34:88:0C:32:C8:56:76:76:31"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: hatchling-resistant.g-app-d.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://event-boob.fun/\r\ncontent-language: en-US,q=0.8;en\r\nOrigin: https://event-boob.fun\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 500 Internal Server Error\r\ndate: Sat, 31 Jan 2026 15:14:58 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 0\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N9hxHGLz6FSSa7ROxeVtO1lCM5K23Kj7D0Qlj62vaxln7gpt6wP%2FhX8%2B4nrHqzZAR1kTveTJoQLX2g5ByNHSGi662dxYu5RJZDP8e1lH6K91NZ89a11EbWJlTKOJow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9c6a296acf3e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"500","status_text":"Internal Server Error","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T14:43:02.497544Z","times_seen":17780803,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-01-31","alert":"Sinkholed","trigger":"hatchling-resistant.g-app-d.cc","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}