{"report_id":"130db69b-0ead-4869-b5aa-9291f28c5d31","version":0,"status":"done","tags":[],"date":"2026-09-11T16:30:34Z","url":{"schema":"http","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"104.21.74.163","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"title":"PUBG MOBILE VN - CHÍNH THỨC TẠI VIỆT NAM","dom":{"size":59621,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4346)","md5":"4d5850eb0cdc161d766c0154d2775b21","sha1":"a9bc4ca1f75d087270d833df9bd27ddb754cfd43","sha256":"29e895b160319e4779cfb5b958e9427ef3e28dff449e706a2c45dba1169bec4b","sha512":"706c47ae4995d7f18ee10dd3b57355ec972fcc8b4b8d782ca6d97cb33e7aad39a59dd0b3b371b4875db19156bca64eacb4764ecdbc9353685ef5dd83ff3f192e","ssdeep":"1536:1K+66fS8/JCBDCWS+ACnlgQUV7v44R7SnRO/hHqgYa:1KCSDgx7Shw","tlshash":"c043f8128df1145710038184a6e6bb0b9bb6c007ed479c5476ec06da9fe7ee44d9bbac","dom_hash":"domhash96e7ce8c412ef637cf52e7f163bf99ed","first_seen":"2026-09-11T16:30:44.925178Z","last_seen":"2026-09-11T16:30:44.925178Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"104.21.74.163","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T16:30:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"static.bytedance.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2011-11-16","domain_rank":1682220,"first_seen":"2018-11-05T16:48:27Z","last_seen":"2026-09-06T06:27:11.253941Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":490,"comment":"","tags":null,"fingerprints":null},{"fqdn":"napthepubg.mobi","ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-12-26","domain_rank":0,"first_seen":"2018-12-29T11:02:50Z","last_seen":"2026-09-11T16:29:04.125243Z","alert_count":265,"request_count":53,"received_data":9438349,"sent_data":26604,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":3,"received_data":41832,"sent_data":1770,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":2,"received_data":5248,"sent_data":1051,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-06T23:00:37.993111Z","alert_count":0,"request_count":1,"received_data":544,"sent_data":972,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.ytimg.com","ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2007-12-11","domain_rank":86966,"first_seen":"2012-10-03T09:59:24Z","last_seen":"2026-09-10T00:37:28.737174Z","alert_count":0,"request_count":1,"received_data":21447,"sent_data":492,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-06T22:44:31.282543Z","alert_count":0,"request_count":1,"received_data":481249,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/iframe_api","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c646c0e76dc2f0a5ff6f01dd51f7f57d","sha1":"fe2e43d2c0f2e3fa252c5f6bc5c330c91197786e","sha256":"735abd235c173b2c9e3cb93caee37aefcc1fa19fb4df62953e702cf226d002b2","sha512":"92b4e4f5ed42627b8468e023559694db45aba074f82cea6f1779cbde31baeabf23dc1f61f10a0a0d6874bf25b048bfa5bef6162d638ddb4f6d97100281f66fbb","ssdeep":"","tlshash":"5e112f761e08643aea95b094d2bfc60d36216108ead0c952109cf48979acccafdbd83c","size":859,"data":"","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.977565Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/froogaloop2.min.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9624433f960dcd3ebdb2eb2b948e9cf","sha1":"35f11f7f135477a317781f051bd5cd9944b368b8","sha256":"f0a7e38d3da10f50c1f5f4ed4e50d920bd6e81f650a7c2f05d200bdfa3d47426","sha512":"9975c31399f1059e331c9023cedf43aca0cdc06d7ed79cbe7fec41bf27737f00ea68fcc81ee618405cfbaff6c2e0c7000e8d45244463a13cbdb4071e0041fa30","ssdeep":"","tlshash":"9b3131d6b0f37cb441b66629201f320f656dac47e45885a2e49ac8d2be7a9437070b8c","size":1542,"data":"","first_seen":"2023-03-07T01:42:36Z","last_seen":"2026-09-11T16:30:44.968987Z","times_seen":377,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/default.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3584302d25f7a939b00632595caf89f1","sha1":"992dc221addc6739688da1d5f692a54d21bfb205","sha256":"1ae2505871db2cbe0130ddb5f7106aec2669fb85bb3e85c550da0db7c7ff4ac1","sha512":"c8aae6c5e800ccd7103449b6f70d7f27f2b51530d89db4aba42b131406d2131b9b7a1223b1c93ea0880d6721dbb89532c848aea0320c9fbaee7fc6ddea57fbb9","ssdeep":"","tlshash":"3401f99e28b5205492b7b0a75b9f75043163806b0784dd01745d0ba51f2833e05eaadf","size":693,"data":"","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.955584Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3bb670b03d53946dd13f5b20c50ff830","sha1":"430f7233cab236561f5742fa8036ab97366285c0","sha256":"24ae63236bf473f8e1be3b976bef96ffd1d79b7d6dcc3d208490613f1f1f41fc","sha512":"ab7c13287a42d7844979843a24f6bf8d9b591a5f5fb5fafec6cfdf2fef9617f5f2227500c75aee82ee802dd41e9660cd83410c76e7ff5894f9672e842b17be03","ssdeep":"","tlshash":"72f0a3007b63a0e47477321e972f56002d051403c005d544be0d5af11f81484b370fbf","size":519,"data":"","first_seen":"2026-09-11T16:29:07.44895Z","last_seen":"2026-09-11T16:30:44.995545Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39291d4a6dd86133d57465dcb1f59ff4","sha1":"a75422df2a3849f8d473372ca540b491c70f642f","sha256":"f02ccc58771915a8d43c7086139ab86f60e85371f7a2be9813bf0c7155978ab4","sha512":"4b544199867924270e5f68a84f406a89a1407402a188e392734a8deb2248d3661483195534f2123f66922ad649d6fdabe474aa39e8d9761cfff83837d0a98025","ssdeep":"","tlshash":"80f0ab8b39db14742d57a03e573d492431933127b484d033bcfcc8252f0979a4a68af8","size":559,"data":"","first_seen":"2026-09-11T16:29:07.451776Z","last_seen":"2026-09-11T16:30:44.996293Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"70872c3016c485615dc6541244dd9ad1","sha1":"759b4d8c1bfd92becb71f84e611cd4cd6be457e0","sha256":"69fca0d6caf49ff11ac723b9f0f46b0cb6f9199b620edee839a1d88977fd0e9c","sha512":"caea4afdf92f5db5948565a0c2759ead29dd77d8322b82a7f4ad60d283e7e6b71fd9c4b5f21d77ee60aef8c403398df71e8149390c2584ddae63dd7291112eba","ssdeep":"","tlshash":"7741cb4a25f630756963743f4baf12087a7680531d5afd143c4d06d49f6832c51beae9","size":2055,"data":"","first_seen":"2026-09-11T16:29:07.454465Z","last_seen":"2026-09-11T16:30:44.997142Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d53f671f399d68b41e80593f61eb6eae","sha1":"ade1f11c3a00cc09b6919ad3df95d2908d80fb52","sha256":"e45c772c6012a13cec0f63362c50ebfececc979e20944909b63390b94f03228e","sha512":"3ff5a2667b86f2d5e3af66ae313de053b96fe44fd57f44589204897de00d60fc89f97303e9bd84404b1682b2cd7edba6649a6ef68e0001b77d9ade3cd40fc1b0","ssdeep":"","tlshash":"81f00e1a3cc724ff07ebf82ed62b8d02332591476a841dc5ba4ea47c2f64c414a86c4c","size":548,"data":"","first_seen":"2026-09-11T16:29:07.45858Z","last_seen":"2026-09-11T16:30:44.99843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/fbevents.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"97e497e3ac3c6bbb74fc6b38019f05d8","sha1":"30e476edd86dcc73f8cd63896fe64455307b3731","sha256":"50fd02e7397cb3745341be12701a2583d187f3f78115c41de0aa96a0cdf27775","sha512":"19c2892d66b37600029442ac5063643be949e085ad0785e320bebc791e1f3982513aac0b5ae6968170613c2f13f97565c0bf298a7c6989027dfc8a5e40ee99b6","ssdeep":"1536:Ghr7okwgUdzLyWu923c0jIOMSD8lSx9mSno0pXdjUCj7i:GlNiTj8Gg","tlshash":"5b33b8c871e270a387a6747c953f500bb1b698f5b4c8c860e6a9ddd83e6889d1037f79","size":51856,"data":"","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.968289Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.ytimg.com/yts/jsbin/www-widgetapi-vflxGrywa/www-widgetapi.js","fqdn":"s.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb4b2e3e2ce8911b5c03c61df68b58b2","sha1":"e8bc23ae716743e348b952c78b460d5daee7d6a4","sha256":"27a9d5da522a9269ce5317f99cc458e95bcf4b13acb90fa0d6ee43910553f880","sha512":"f54f4d8eb09b8b4c574d1e7ee1154cea2b409c2216151f9ccb7c941dd808e7259f45830d6415e55ee3c766398fa7503000e1485280e1714f4992473af070eef3","ssdeep":"384:oQWVSvyLmv5soMalkwV1aE6G33i7B5Ti1CyLCJicnlK9QMTWL+:oQW96v5soMalzaE6Gn8e1rOUD","tlshash":"7492c8d9bb61703291a3a1b2513f250b313aa49ef40cc95cb144ece56db49ad022ff7d","size":20695,"data":"","first_seen":"2023-03-12T18:06:41Z","last_seen":"2026-09-11T16:30:44.974956Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-11T19:29:09.006052Z","times_seen":96048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/sdk.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8aeeeb96f6b8d9bc08d142bd9b3c7fa4","sha1":"5e5279b6946a8d7197ed9df10de0edc7d8c19ace","sha256":"79c85cab430d5fe7f5557c9d6773982dde39167a8c257738aa3208545faaa794","sha512":"c7969102571fea65724358a45731e012d49bf52b4e01622703f6e629be0909ec230d0500704bc7c90a46adc92faa8f211f3bf635518f7ab86fb002ef7266a849","ssdeep":"1536:hMqLaa9bKC0n8ywuvRRAx8aj1B1gE0lkasaBUuINCNSF9oJ7q1FWHjmx9os/yVNf:Z8Y/gE07sRjo41Qmxus/yVNQ1nEIpLM","tlshash":"e2143ad971917062c2e238a9a0bf510bf07d8491b9589974fee8c8e42eb8b5d1537f3c","size":199180,"data":"","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.96959Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/bootstrap.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ffbac364dfe4035929782fc265fa353a","sha1":"c8add6191b0afc351a6bfb74cb153a478709cc7d","sha256":"40536fa49b96d01b41db0e8828149cee66275824525d3700535a256959f4f36f","sha512":"789bf66c563fffe6a400aed486929a64c5cba90b44bdd94031e8ed1f0c902eb3de834f1d8e685c30a1aca5c50751aadbb26d4f6ea1441136e0d5f0f386a4e657","ssdeep":"1536:WVrPZ9tjjZTliyiy5rVDfNCGi1aOcZH/vBEq7F+GVbSZOV:Wb9xi8JDl1zZpEq7p","tlshash":"98b3450a3efa24a2415bf03e8bdf5009f774508b5909da047c5ca6d86fa4938936dbfd","size":114953,"data":"","first_seen":"2023-09-20T04:58:26Z","last_seen":"2026-09-11T16:30:44.95465Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed4b60ee9022b68d84964a3df46b92e6","sha1":"1587eddf5a6af905c533a16661f8a9e0007d0b0a","sha256":"708692188e14a63de7084a87d07de028065ac219116a3eba8e7a2531b92321c2","sha512":"a1c0a516c03be72ed995edd8bde3bb05fbd11760002320b8664814543fe6ce72b294f27d9e83e673da8e49bc458b5cd2dd84878a04a786fbbcdc3c9c0a91c6e7","ssdeep":"","tlshash":"d7e0a31d1c1fb46217b41999f637891934d5134125452655c7c7d4543930cc958c6a4c","size":422,"data":"","first_seen":"2024-04-15T19:31:22Z","last_seen":"2026-09-11T16:30:45.000421Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cda3401a6a9851af7a7e3520acfc283f","sha1":"d535516ec754e2c823fd6f79a7d2ec740ecc0962","sha256":"1fc7ec2029521bd4add7aa61f1254219c79202357ec444f70d34b6e99a8fb2c0","sha512":"2ff08fcc09a78ceab01038ed0128b05c095996f86a7e882fa827b957b356bca56eda32065bb05e0b8cf65c148b91e595678fccdc13534b109dabed55f4877db3","ssdeep":"","tlshash":"62d02b8f2e514934574914dba0fac319b476906d5221d088e0cec889330cfe9051d61c","size":272,"data":"","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:45.001397Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/jquery-3.2.1.min.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4b57cf46dc8cb95c4cca54afc85e9540","sha1":"05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac","sha256":"a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855","sha512":"a6996f5029858c6de6de30eda54f8acc47d9713cb1adc576173ce8f75f79a2b944b9c04bfa55ad62829e705cede4fcb7c7c90785e8cd3e0252d79a186b1760a7","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:5kn6x2xe9NK6nC6N","tlshash":"728319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86926,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-11T17:27:27.363968Z","times_seen":21151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/analytics.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2288a7f0b8dafb9384355f3cd86c0e83","sha1":"77cc1b529acc9bf11aab466970f5e5bf292dc90d","sha256":"b688a3bcd1297cc0fe08e6e52fea14ba9108ee4b9a2052c03e7bac6e19347255","sha512":"7b26ccc14b461ce620db913423068b07f7b489d031aee231bcedc165518c049c6708d14ddbf0167ea3351910213b3360d9ea0d70117840dc752e5a4bc88b8ddf","ssdeep":"768:Ear8j45ygEHs68qTUgS9icUcSghn6+vxTdUKlcLCu+Rv9gvU/6qCs1ZM:EaIKyhHYq/SggZ6+hdUKlQFUyqCs8","tlshash":"ec13faf9b792746ac3a270e4403f110790ba9dc5f44dd8e4b549d6d06d38eab02bbf68","size":43710,"data":"","first_seen":"2023-03-12T08:00:52Z","last_seen":"2026-09-11T16:30:44.928689Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/gtm.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"487ba1a636eec81ec63a4dfdafe8837d","sha1":"a4757b079a60f91c1f240cb3067bf17da11985d2","sha256":"0d7b499d4fb8625530b004a80ece7b699b8da945dacbed906e4d2116854da785","sha512":"1574649a2706e33cc4cdb854419f3c6f0bc796325199721541b01c742b07cb050e4a8f51346a4fdb9c07f829819cfa4809772782d466585a99fd072496554653","ssdeep":"1536:liogm5iIfowa5CAELAIo5+NuuXRjrCq1H9u6kNG6mz8JzKGTcpywWcqjKNSdfs8:cotP0CAEquXNCt6ppywWcqjKsBs8","tlshash":"3183c7d9f7a274a6c3927464443f110be17a59e6f80c9c94f289d4e42f79a8e017bf2c","size":80793,"data":"","first_seen":"2024-04-15T19:31:22Z","last_seen":"2026-09-11T16:30:44.978999Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/widgets.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3db86ef055d51cd0e7082890f848dae9","sha1":"117e3299693d837e4ddf04e315834db808064838","sha256":"b435e0c1948fc0179dd72f3a581fc9dec019ce106aea793bec27914d904d04f9","sha512":"b0cd6f4c1eac2093b3d448002c11076619314137133346778b643cc88520d9d5062dbeadce5d7be5739298a80ffd76c0744f4b68cace667dfeacfbb1647b03ef","ssdeep":"1536:FfSzT/gHEHmnZryYLgH419kcH6OIke4y7oVPu8ryMz3khm/:sTokGnrMkkk2wrj/","tlshash":"6093829df291b0b5139730b1426f620fb2376999b54b8990e221f8d9bc7d98d8123f7c","size":95222,"data":"","first_seen":"2023-12-25T09:25:45Z","last_seen":"2026-09-11T16:30:44.982591Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NVHL3FS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c575ff50dfd2fd66878bbf8bfe3663f","sha1":"225b11aa4106a28e8b2994bb524eae08b80c9099","sha256":"3bcc9bf926e793986a1c7cc51b4ab0951e3ccb4725ba92620e0d008186bba1e7","sha512":"a9dcc3266e0dcbe5b2f9b7d05ebb7f5b336f34f22a168fb12d7b0f4475dfc9f5cd5d7e4e9a1c8d4232c43c158c3d7d5b0f6cd6fd515cd060890c2cbecfc1fc95","ssdeep":"6144:Wf1L6SbQXmgyyE3RdJl580vcTPbNELR3/j/MmS3vNamtc4CiZ:oaCy6PvM517uU","tlshash":"f9a42acdb3d6702283a2f574903f018ba27a39a2b84cd895f14adcd42e3459a5277f7d","size":480599,"data":"","first_seen":"2026-09-11T16:30:44.985614Z","last_seen":"2026-09-11T16:30:44.985614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/swiper.min.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4ff815d60c83028c87324f6fce8e634","sha1":"c8032fe56b5c847d2fa83d448810728e7f628900","sha256":"bd701c6685c39c2d8fa3fa663823006dc49086ea7a058ba316214ea9736c05dd","sha512":"bbb6f107e85f5430a14bcb5f89fb138d231cb5018320173ef401d5d72b86d23e2c8945c2d9c6f1df6586b939033aa001107d30578a46149d3405df75e3b35bc4","ssdeep":"1536:/ArVAiT53aBXr1nuNraK8h78lucfbyYDk5PJVzD5vp0XvH7WcWUwcPqojsE8EtOE:RBXr0rJ27UjmvD5ufH7WcWUwcPqmz1L","tlshash":"f2c31949b35071d551e72256539ed601a3b62805b90ac0a831b2dcdbadbde8c03bfefd","size":124671,"data":"","first_seen":"2023-03-07T15:00:54Z","last_seen":"2026-09-11T16:30:44.993142Z","times_seen":1494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/www-widgetapi.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb4b2e3e2ce8911b5c03c61df68b58b2","sha1":"e8bc23ae716743e348b952c78b460d5daee7d6a4","sha256":"27a9d5da522a9269ce5317f99cc458e95bcf4b13acb90fa0d6ee43910553f880","sha512":"f54f4d8eb09b8b4c574d1e7ee1154cea2b409c2216151f9ccb7c941dd808e7259f45830d6415e55ee3c766398fa7503000e1485280e1714f4992473af070eef3","ssdeep":"384:oQWVSvyLmv5soMalkwV1aE6G33i7B5Ti1CyLCJicnlK9QMTWL+:oQW96v5soMalzaE6Gn8e1rOUD","tlshash":"7492c8d9bb61703291a3a1b2513f250b313aa49ef40cc95cb144ece56db49ad022ff7d","size":20695,"data":"","first_seen":"2023-03-12T18:06:41Z","last_seen":"2026-09-11T16:30:44.974956Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/foot_logo3.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.667Z","timestamp":1789144197667,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/foot_logo3.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXC1crJG1RtJPjgDWJ9BA6pjW1%2F%2FgPJBkeSwS9alu%2FgD%2BYXp48kg5dzY7vg7NfNDJ%2BtRln4jzgpAPnThsUm3ZeUhlu%2BiLvHBnCnOzMzSAy4JPxKNG5On0V3Eig34FD0xbC4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680656b9-OSL\r\ncontent-length: 1841\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1841,"size_decoded":2569,"mime_type":"image/png","magic":"PNG image data, 239 x 41, 8-bit colormap, non-interlaced","md5":"a1db8f7c1260370af2f5f48089a15dd1","sha1":"68aa7ee3e6fb5162c1265d6f83bcf20b34f436cf","sha256":"cebc2015d127685f0ec1c78ebf3bbb598733920966cec3ca5dcf7b12c5644d78","sha512":"6edaf115564af078455fb1f3e781ff83c73757b743c5d7accb6f5e70e80c1794d2b03e66ad3847d8041d299f1c39affb4c764c8abfe86051b07dacfde63a9adf","ssdeep":"","tlshash":"7131f8504109dd84c0506c266a28ece78b9f6e9017be391cc01af73a8e39a059352942","first_seen":"2023-10-23T12:42:06Z","last_seen":"2026-09-11T16:30:44.926853Z","times_seen":9,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sairaextracondensed/v15/-nFvOHYr-vcC7h8MklGBkrvmUG9rbpkisrTrN2zh1Qphim8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.603Z","timestamp":1789144198603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sairaextracondensed/v15/-nFvOHYr-vcC7h8MklGBkrvmUG9rbpkisrTrN2zh1Qphim8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://napthepubg.mobi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14728\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 20:28:04 GMT\r\nexpires: Fri, 10 Sep 2027 20:28:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:01:41 GMT\r\ncontent-type: font/woff2\r\nage: 72114\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14728,"size_decoded":15540,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14728, version 1.0","md5":"633aba2d6c8e231ae89a03ad099ee9ff","sha1":"3b273f3c722580205abd9231b1df0c4dfa2a1b9b","sha256":"416728a29eca26e25a8c117f8cf4b422df169bf083852f1c4507d07fbdbec079","sha512":"dda49d9315e47c28602f690df4d1ffdff0132720379dbc7ff19981bafbccbff5fbbdc63af429827d97f627a76c0eff1c5247c235c24e4a5b7fd1a7ad46d4e5df","ssdeep":"384:5KTu3W8y2Nr1HSkaTgvlvO5ie1mC6X6n/2f+ZhgarRZ3:5KTXM3yUYHgC6X6+f+EeRZ3","tlshash":"f662d01b568bfa98a3d3917c36bd9ee9f425a9ed4caacb40c7801b4331970998d85344","first_seen":"2026-09-10T20:28:44.940741Z","last_seen":"2026-09-11T16:30:44.927935Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":31,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/analytics.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.616Z","timestamp":1789144197616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/analytics.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RFmb88l%2BKNCVwnr4avT%2BduW86%2FUEWQj1O8M%2Fue4jOobXBcZjRZd9S1FmQga1cu%2BaMZvJV0h3dwEwVUPRxRK4f3gxiCeTlFdPey%2BJiNuucSPgPCY2VnRPr01WituDr%2F7TO2U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de31fe356b9-OSL\r\ncontent-length: 16964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43710,"size_decoded":17700,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1933)","md5":"2288a7f0b8dafb9384355f3cd86c0e83","sha1":"77cc1b529acc9bf11aab466970f5e5bf292dc90d","sha256":"b688a3bcd1297cc0fe08e6e52fea14ba9108ee4b9a2052c03e7bac6e19347255","sha512":"7b26ccc14b461ce620db913423068b07f7b489d031aee231bcedc165518c049c6708d14ddbf0167ea3351910213b3360d9ea0d70117840dc752e5a4bc88b8ddf","ssdeep":"768:Ear8j45ygEHs68qTUgS9icUcSghn6+vxTdUKlcLCu+Rv9gvU/6qCs1ZM:EaIKyhHYq/SggZ6+hdUKlQFUyqCs8","tlshash":"ec13faf9b792746ac3a270e4403f110790ba9dc5f44dd8e4b549d6d06d38eab02bbf68","first_seen":"2023-03-12T08:00:52Z","last_seen":"2026-09-11T16:30:44.928689Z","times_seen":22,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/android.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.649Z","timestamp":1789144197649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/android.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:53:06 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JuLQsz%2BsuCYOqfoYkyxTE%2BFIrZjTa8x57wwPhyPOH4Bwfu%2BOz60EvlbR7orlATsZ4RDweUCFuXKQ6kj64yuT%2Bhs5cqjhvMTgIB%2FbqsMaWsg1DOB4uPsay%2BK3JjXHDpUo9Ns%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ff656b9-OSL\r\ncontent-length: 21140\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21140,"size_decoded":21869,"mime_type":"image/png","magic":"PNG image data, 303 x 91, 8-bit/color RGBA, non-interlaced","md5":"e2430d6165fd7c0a5ec6e4d9f3044201","sha1":"9e758111f44838c84b2a17e30ee8b47c443f178f","sha256":"c9e448bcb9a1ea009e556ee716cd3c2c2e0ecee85e034b7a949e0ae4647779b7","sha512":"249005844a9c4537fd606baff57a617301135c6e898e73b7f693049e77e5437c93c71c61f1e608ce4e6091dc3bea6fe523f7c7c4a6219c80954748fb5dadace7","ssdeep":"384:OLxmGMys3jynNDC6rI8jLFy+FsO3Gc/niIpDhOdYDo5C9FHQvb:Wxmz3jMNW6rpFnsfcqEDh61C9qj","tlshash":"0d92e1d5fa48285962a8c13b63c7135bb8de0c407e1053b1ace4b31284bf9595ae57fb","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.929341Z","times_seen":8,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/1544-c.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.654Z","timestamp":1789144197654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/1544-c.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=npOTe4AFZvnwhGNdql3%2BP%2B45CgAoQrMLw2kZCHZ%2FQliH0TFeGmJ1WJANeZS7K4y5Qhl7rjFiUw0RTbNPmwXAdEOxHJs7OmxyynVPxzhSCnHyZ9GT%2F2f7u9vyqff7i0JCWtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ffd56b9-OSL\r\ncontent-length: 964937\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":964937,"size_decoded":965663,"mime_type":"image/png","magic":"PNG image data, 999 x 562, 8-bit/color RGB, non-interlaced","md5":"cb233b419653cc5ec24c87dc9c4b53da","sha1":"931f34161e6705cce1865e70d8e451479d1c7c23","sha256":"94878d5c93f924aedd7d712d6e0fd770d0d89bf0e9e0e05ac3b7cf0e2de8c286","sha512":"33f95bb4e6d67f9ced701d28f9346295105134d7433830a1bef57b915456865611ddf2b0ca5120b9006c172c78c980b9002f3847436f966079b379bbc0303575","ssdeep":"24576:XLQUoG82V7t61Nv/92P8K8m6+ftVrEsi9UpmugBbnfte:bQU15V561N92EKHftv8tjY","tlshash":"2b2533a24b76fdd723250e7bbf42c2815e50d281c7afb44a6c001d9941ca3bf4a77c6a","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.930011Z","times_seen":6,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/imgs/favicon/favicon-16x16.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:59.087Z","timestamp":1789144199087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /imgs/favicon/favicon-16x16.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nCookie: _gcl_au=1.1.1847380645.1789144199; _ga=GA1.2.1074906533.1789144199; _gid=GA1.2.1301606749.1789144199; _gat_UA-129678316-1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:31 GMT\r\nlast-modified: Tue, 31 Aug 2021 07:01:58 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 87\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BAvTrhWUrAlnfTG04DAXBi77NzyLPZuwvDJpvzNoYwRBx20MvVsbOMtNRLy4ry3ppK3aWAtqr6PGFLTSSTUdrq%2FE0sv2zt6UoSw3OCJt21RTZshCOtnoHkjsf1fDc9Xv%2BFs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980dec48ac56b9-OSL\r\ncontent-length: 1775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1775,"size_decoded":2500,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"18f1ae5ef6d1d3ea0c6473c7dff71fb1","sha1":"75ad36e9dc0255cff03edf906deea9ecc02d2277","sha256":"55152a6d7b01c6555674672e3b147a1a3e3890c30e63ab677542229710d0ce8b","sha512":"b5a673bef07398f6b86308ed7bfef2565617eb84ddf35ddba846c7a04c67a2142b9d925bff545daa664edd5ce00575cd858d1fcbe141a6057c29feb7bcf21bda","ssdeep":"","tlshash":"9931dbc4f5235331879bafd06b5b7402c76c1dd31b4d830fb6aab064855c97422fae05","first_seen":"2023-06-20T13:31:44Z","last_seen":"2026-09-11T16:30:44.931572Z","times_seen":15,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/media.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.610Z","timestamp":1789144197610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/media.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2B5ryeATn5Ta0Kl07VO9rEAG5MzLc0flaHUpHBr0ZX7LI6slqbnqDJ%2FIjBnS7L4i%2FcSyiLnv4CSZnVE8BLPJb77T17rnmPvnAzVboIOICGYvCSm8%2BErutF6RHlJiJFqg0BI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de31fdf56b9-OSL\r\ncontent-length: 1073\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4077,"size_decoded":1844,"mime_type":"text/css","magic":"ASCII text","md5":"4d8b3a62f5e8d3e8543379d377c92018","sha1":"1e41184a7dd4bd772abdda6c32b87323aa9ab402","sha256":"34219cd7dd64307a0968bad09ff1279362a5bd9f1d174f2a6f12fae9d6dcb20b","sha512":"57f07e4530333b0804871691cfbcd80ce287508e0fea08d1949b26a9d9c7a294d76f96e2d092bc5a787cbad7b5570086efafb0025af86309f1a037ea97fbd238","ssdeep":"","tlshash":"4981211bc681344c741a5158af9a16eda6af4402df4f2eab6a373a24dfc95f24051fcc","first_seen":"2024-07-26T00:51:20Z","last_seen":"2026-09-11T16:30:44.932189Z","times_seen":5,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/jquery-3.2.1.min.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.623Z","timestamp":1789144197623,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/jquery-3.2.1.min.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmQ4Mnx9f9exlm%2FaeoGlDza4uyBFV3Qn9GrFw0j4XW9bLg4PE8Va7rDNtzPOKFdw9FPpJKrLTrJRyL1JqQKiI9n7O0JFzwHnAlrYmWDZJq7iqgcxkIiE%2FuZ5bgJ89jgSWbo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de32fea56b9-OSL\r\ncontent-length: 29663\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86926,"size_decoded":30389,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"4b57cf46dc8cb95c4cca54afc85e9540","sha1":"05e1ad0cc600a057886deaf237ab6e3d4fcdb5ac","sha256":"a28ccf8a7b50522bdeea0cd83cdeca221c18fc1f9df3ee6b3d3c48d599206855","sha512":"a6996f5029858c6de6de30eda54f8acc47d9713cb1adc576173ce8f75f79a2b944b9c04bfa55ad62829e705cede4fcb7c7c90785e8cd3e0252d79a186b1760a7","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6tv:5kn6x2xe9NK6nC6N","tlshash":"728319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-09-11T17:27:27.363968Z","times_seen":21151,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/foot_logo1.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.668Z","timestamp":1789144197668,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/foot_logo1.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y5ZIicJEQlQQuIwA18KodrYxUDFtuoRkXcrhrF%2FOTwvYi51qkRlbe7znXOxYB6b4m3Ua%2FIWAal2tmEaRiRK1xQX7AphsiXoI9UbeH0BIiNXbPPQNjSI%2FVJPJRjPClvVhGI8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680856b9-OSL\r\ncontent-length: 1051\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1051,"size_decoded":1773,"mime_type":"image/png","magic":"PNG image data, 49 x 40, 8-bit colormap, non-interlaced","md5":"dc34542b4c8c6bd111ed423849661e99","sha1":"5e58ed841f00b3e57cc8e6d6a840ed576dd3e653","sha256":"312404f8afcaa37848075bd49530d7385b7d37fa2adf737bfcff67c5c16a09f7","sha512":"0641b6e77d61be179009e4d31f6a05e638d0769e5ce72dd859c206399f74aec7f412a7c7f7ac8bd2f3fccbc0d7c3eab127482fd7bd569d1f49c5765dc2f96bf2","ssdeep":"","tlshash":"41119647a7a80f37e1b72019f9de845f6631cd640abe2383bc2eb5492c3536ce1980d2","first_seen":"2023-08-12T21:43:15Z","last_seen":"2026-09-11T16:30:44.936414Z","times_seen":72,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/bootstrap.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.604Z","timestamp":1789144197604,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/bootstrap.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRf60xJCvb0aOqju7rzNcVFphuhhu3ZY2EjYuVe2%2FCuGNZSwt8b0UskNT9QSrBFknrvTQXCK6ilJShinbrvdOZ4Cnu9rrKi6sYxk2sY58FOT81U0bl8dqPCiAahpoH%2F08QM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de30fdb56b9-OSL\r\ncontent-length: 20339\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174904,"size_decoded":21107,"mime_type":"text/css","magic":"ASCII text","md5":"bb8c9968a47995d3966b97189e6514ce","sha1":"636633bb421b15fcc2ab6d15ed37248253336efc","sha256":"913d31648e9294dbb99cb47f33fbade63d6252a286826983594ced5f785d51bf","sha512":"822452c4fbe648b08afaacf09527007d65e5f439f02aaa6c5f4a518984395f8765fd36eed9cffb232eed25cc031e7ed109108b5be71aea858cc8d910328545a7","ssdeep":"1536:o1XUsALfHx1UAEqsFB4pxVe+gzjz+GxzNQqYl4vJzDL4iDF4n:oKx1UzZJzDL4iDF4n","tlshash":"8e04635af9f11508306b855825c6bbf57b7c8097c60eeefa79e32124cf4a7c14cb2989","first_seen":"2023-05-30T01:15:33Z","last_seen":"2026-09-11T16:30:44.937378Z","times_seen":17,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/1435-z1211892550799_98f0df8ef5a466ff16339835fc02781a.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.659Z","timestamp":1789144197659,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/1435-z1211892550799_98f0df8ef5a466ff16339835fc02781a.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9AJUL9HMs0XkWnO41ZQOZ3BGR617v2Lv%2Bp2VyKlg7nl4ZX0bDltTZcYOEWAHC1G7ylnZ644ZNwtWZzNSohS4L9UTnl7wYN6KUybOPL2Dduc5Msvf%2F%2F7JnLpqU2D%2Fm6aubOQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680056b9-OSL\r\ncontent-length: 203250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203250,"size_decoded":203977,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1582x891, components 3","md5":"6877f8c6c5b30beac736ceba73fff0bb","sha1":"cd5bd79aa32f8f571ab6d29ce9381047039161a2","sha256":"e015c43921302eeb71f763edd8dd44cdfc3e65ea95d2deeea2de14b8a4cff340","sha512":"a1093e57a7f8f5dab34dfc6298f790461845241cc5879c42076ce815a334f92762eaffe9ce0846db7264ff6c4e6b1bf954050170bbf57655fe072484c6c60d53","ssdeep":"3072:caJP2X0TlimkC7XRQv7aYanVsblf7slB5tyfjSLMNxFeWStBxGTDiC:ZQ0TqfaYKVsbR7Y5ty7GWFiC","tlshash":"621423e16783cad8ad776d025cf9855351bb13388120f9ba5eb70a2653c2bb7093f436","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.938262Z","times_seen":7,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/videoplayback.mp4","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.615Z","timestamp":1789144198615,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/videoplayback.mp4 HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nRange: bytes=0-\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: video/mp4\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:31:56 GMT\r\nage: 92\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-range: bytes 0-8611409/8611410\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ccBTrBZ7KGERJT4QkYP6ppiMf8oUHheCf6AWH6pBY0LSGj%2B8FmL3xcVf2yDKRldJ%2BVVbiDQ%2BYPfPP7H7tPcE50nScNCcEZtR291vKtJwV3D5owwwhnZRaCqbR0dFKx4sxy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de9586b56b9-OSL\r\ncontent-length: 8611410\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"video/mp4","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T19:24:36.300163Z","times_seen":18408721,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Condensed","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.597Z","timestamp":1789144197597,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Roboto+Condensed HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 16:29:57 GMT\r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2569,"size_decoded":1318,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6a0bfbbf8651a075090814eff8daa1fb","sha1":"a2ae502dadb6c85601853968d82b51053dd13d2e","sha256":"8d2b5e49aeea8ccfceb2d4c081f03a6e144298e6b0f7c34b0e7ad2cb7231c2a2","sha512":"ebc6881b2df31c22ae5446c16b6be0b03e57e704ce47ec69daaa89007931d15ad676e9554d9bbee619134bc0eee8cd5aecb5c914376cb754bfe8da542a548c6b","ssdeep":"","tlshash":"5151bb51082aa804e7d31cc62bcf3e3adc4e12046449d5a6dbfd1c69acf6e76236834f","first_seen":"2025-09-11T19:46:12.750574Z","last_seen":"2026-09-11T16:30:44.939564Z","times_seen":1700,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":3,"connect":14,"send":0,"wait":36,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/swiper.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.606Z","timestamp":1789144197606,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/swiper.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:22 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MlhbNzfWpu2dSmtm97omnVTQTN6ALpq9SZzmhAiHp3hdLP2NGXzoqZQ0UQFAyGxtDgaCBWTktXRIc0oAUmaEga9AGLT5FVz72w%2F8Wu7%2FH6KUDJ9p0ULflA8P5DDsGj7to98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de30fdc56b9-OSL\r\ncontent-length: 2936\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21418,"size_decoded":3703,"mime_type":"text/css","magic":"ASCII text, with very long lines (1468)","md5":"602e8d951f57ef35b53a4071bb4af4b2","sha1":"20a4f5b95ba7a8ae036529934d7ebe9147e1ebed","sha256":"dbbb90c5428e0733b82f57430da8e17e4fd072f3f415fe54ea21ec0cd6b53e98","sha512":"53c061ff768401b32b05d062f3928ea310ccfff5fc97b706acab953ec534140e3475c57a7adb7a1ec6c45d4661ba5eb6c51622cf816f2e21bed57a1a251a9b44","ssdeep":"192:bhcBuCTjcE8A8R55HExVn1qcWpWML6DAicbFbwFgWEm8Tx2bw73w77uKu:bhcBVUE+f5HEtmL9FbwFlETx2vuKu","tlshash":"14a2535c1750140276368d5c47daab38d778c8430e43ecee7781ed48dfbeaa8629b726","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.940718Z","times_seen":7,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/header.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.644Z","timestamp":1789144197644,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/header.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:22 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 94\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SMEdbQBStYO459Vsw%2FbmJqXdnGUVxW8t9dWQHyHLlwxy0Bpvzjfwg5EIcxvu3%2F5ysT3wTcaLI%2BWFfq6WydmPoYLdeSWc7t8dPaugElbHrciryW7tRl9IHxOek4F4TKhMooQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de34ff356b9-OSL\r\ncontent-length: 673447\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":673447,"size_decoded":674172,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1080, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=1920], baseline, precision 8, 1000x1001, components 3","md5":"448e7d093950e4776b1f609747d0847f","sha1":"7f355fcbf31490d93b564623cdd4de86b4ff9456","sha256":"30ecee5470834c81a16a774f5b0dd386ab9cddb6281d431087c38dd7dbe8da06","sha512":"ff633968535e3e225a9601e9e3fd4ef8a58633bffbd03b7ac7e2c66c99da3f5e340b97ec80775f687748fba094f412245d580bc7f0bc802e584aaa283d3d34be","ssdeep":"12288:lf06zLkrCsqeEzqw3R6U47P/Akdh0M6whjsgalDlf/csPX:lM6z4FqX3h6FPF0qalisPX","tlshash":"9ae423a2c6f9362adddac13c0a962e18070033ebb2f93943747fa1c27b756b1941b755","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.94134Z","times_seen":6,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":141,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/ioslogo.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.647Z","timestamp":1789144197647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/ioslogo.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:52:40 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zTl9mWLaCq1YvxQLEd%2F3ks2YG4G4cjkRBwp1Ei4e2ffDvSSZsGXAxXdgQLAeJu7xn8hzzGyI22QwjdY%2BUSvpDw1QMjP6%2FFWkmqzNebJjUtGN1SJUYKCFrpjd%2FmAZGIBLGvw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ff756b9-OSL\r\ncontent-length: 10772\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10772,"size_decoded":11497,"mime_type":"image/png","magic":"PNG image data, 303 x 91, 8-bit/color RGBA, non-interlaced","md5":"7d99ed8d850e26242f815f349b6a17ce","sha1":"c32ef168e086bcaf7ab685210c645609f061233b","sha256":"d4b4f50686a02f8696a9b717c8e509649bea89af9b99d821025c98d6061ac627","sha512":"754f2e9dc0095359aed07f1bc3740b85f239acdfc0438fa8e184d86bd210f98c98ae70cbff920f8b2fcd28b9431109f03e109f295e20eee14f18a3612a2f5822","ssdeep":"192:E0pfVk7AL+thZZCmclPPgQmQeStpzdC4nKpHtYUdLRAQD5ca/Dy8SUfOaG8f:byAKhymeAQmNopwhYUjAvae+G8f","tlshash":"f022af85f940160024a694445ceb6313c3f909c949bad9f996cf102ad8e26fd897f4cb","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.942374Z","times_seen":8,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/1654-e.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.657Z","timestamp":1789144197657,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/1654-e.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGg4ISSBDlDwWiF0w0Ys5hks7scn8WaLV54r2ThaWEoN2A%2F1KIxElZNPCucBsi64Efx0kPItIUY%2Bg4ka5UYznDtOfwbUeZ%2BdhNnz0rDcWpaLzXsiejiF3sUB7Je8Ay%2FWRSg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35fff56b9-OSL\r\ncontent-length: 292921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":292921,"size_decoded":293648,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 999x562, components 3","md5":"952fa4ddb6f032dd918f7ed49cc80833","sha1":"6d43623af1b8466957a0aae53ef0143543f0f6f6","sha256":"867a125e06a0348a9aafa2f2a5972de67bb11938b7593c0f1463b82e966d6a3a","sha512":"cd81556bb3a53abd09f4a938942e69a063d16a3a948bc293fb17d41dabb29dd7ced62a275dd908bbe3993b0cfdad800ab783f74a23679aeab5083abb4ff97d18","ssdeep":"6144:Dnh2C6A5+cY24gGn50WvOo2FSFPdvLgKg4lESvA5PTkNMSuy0RDctWj:oC6A5+cV4gPVJSFPdveSzT0RQt4","tlshash":"da5423e8bb420803e67a13311639d697416a994b7dc1a2efcfb10481344fb698abf45e","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.943462Z","times_seen":8,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/5202-20181214.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.662Z","timestamp":1789144197662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/5202-20181214.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1he7xe5HPRMESGAZVUEEL2CuK5nG837uK6dXoTJxDKPyMAPkKpf4zgfOpEPQG4BnWuJ%2BuxOFTEX9V4XlKoqqRHedRGRVejHwhzbimULwqksTJ6XRP3SjPfypxGK5KwP84rM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680256b9-OSL\r\ncontent-length: 1485174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1485174,"size_decoded":1485895,"mime_type":"image/png","magic":"PNG image data, 960 x 960, 8-bit/color RGB, non-interlaced","md5":"0020f92fcda00d52952f471b04a333b8","sha1":"42fe2d5c3552258d40840b7ce09bf5283a695e56","sha256":"7ae5639cd57d26610e8a7263e02f339e8e2203bf33ead8fc6e34e616db9ccdd1","sha512":"cb7d146732dd82972a5933706266cf16665da1a3105f692d032425d2cea938fe241b439899ed0f3ee899859a0d63c0cf646fd49424ec5dbab21bd7241dfdd293","ssdeep":"24576:pq2NYMNJRK3/y+x3HuBnhaNneKRUZMEyKd/D3t1gm:pqctRpC+BhieLiEndp1gm","tlshash":"4d25338485401f9a3c9d5e59bfe628e341a7258dbecddac1beb2fee0d1466743cb4084","first_seen":"2026-09-11T16:30:44.94556Z","last_seen":"2026-09-11T16:30:44.94556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":195,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/foot_car.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.664Z","timestamp":1789144197664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/foot_car.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 94\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2B2S57ypdnCxF4i6HKDUf860XJct2yGt5eqBVfqisX6l8gjHfkAaEb75sKOSrO464fbrgv1ntO30s00UYGA9b3GRI%2B58SmEAZRGSwqfOQ8T7rAKC7LTJ2f7O%2Fjn2Fv%2BQ%2Bic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680456b9-OSL\r\ncontent-length: 411359\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":411359,"size_decoded":412087,"mime_type":"image/png","magic":"PNG image data, 700 x 505, 8-bit/color RGBA, non-interlaced","md5":"bec4194d30d25f0b8950c80043003ba5","sha1":"df4eb4bbbd2b292e12e2b5e99e893d50ac218029","sha256":"961ca8c78afe5354f22474de77e65531f562339b17465e8f7fb64d0c6c884d56","sha512":"dde20b8c4a9a70cf18498f967ab668b4d122afedb7ccf6ec566dc8e093029a033ee7f951ad1e597185228a009eb18615f2d378afb59038fc68bb9feec5e270d6","ssdeep":"6144:rjbfm/KiZiugCTFlrqHE934b/rDkenG7s4ZyFMUJboiPB3LHGxjzagpLuVsLTrMR:rjbEZZtgCn53o/rgeU9hi5eDPMR","tlshash":"1b9423596c4318076e9eef1828cb98ed51412f0ce65ac92f393d268fdb1d2919b23f74","first_seen":"2024-02-05T15:37:54Z","last_seen":"2026-09-11T16:30:44.946687Z","times_seen":19,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T16:29:56.369Z","timestamp":1789144196369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 31 Aug 2021 15:11:26 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tJwE%2F5soMIkrIQyCnXPZ7jYAL0du8wMr8ezHZM99WY%2FQa%2FCdXiX26HQ4pFpQenArWTXNYzy7916mY8PJH7MWZgPMsF2NQLTEgLgvfAZLH4N2TP1q5GzRX75K%2BZ1PGkbi0l8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a3980ddb7c133181-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Swiper","description":"Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions.","website":"https://swiperjs.com","common_platform_enumeration":"","icon":"Swiper.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":49291,"size_decoded":10547,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1104)","md5":"f1e534757b058e562546ae79c880fcf4","sha1":"d788f4065af616dbe50b716d2cadbb09f98f2c00","sha256":"4a878279b0268049ae89d40a6715328ce64bd03a910bde79c48c1ee5f856af78","sha512":"a4739f07887e75a872d277917123c65b78624db60599c75c31d523f394a14409c35212e9f4fc65bc9743f76996478f7869f006488b547fe08303fc62c151c311","ssdeep":"384:ZJoCfR/cX9NFgfgp/JmxBFtFAZSmoIfnqIPFsnv44Rwdf12SImeRrqSM:ZKu6fF08/JmxBFtFAZYSEv44RqSnRrqZ","tlshash":"6d23b50299f214931443859567a67a0b9fb1c007ea0b8c5476ec07dacfe7ed48d9bbb8","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.947271Z","times_seen":5,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":788,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/style.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.609Z","timestamp":1789144197609,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/style.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Tue, 31 Aug 2021 07:45:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NU2SXlaEmJxI8crDWAYGDu7Cuxu0de5UBc652Gi2JFX5izYrDGrHSyjej38SJ01YB56SoH9pUL04%2BwuiujKYH2sxL7B99xkdq9RefKlFBXy06xVcF9XsabNrKvq60HV4LLU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de30fde56b9-OSL\r\ncontent-length: 3083\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12899,"size_decoded":3848,"mime_type":"text/css","magic":"ASCII text","md5":"59a9be625a350bc490100e57690b27ad","sha1":"bd5efdb76697ba4042b6205a43f2a9fdbd2f5747","sha256":"a0c79c5fd237f9f298165bf11f16008001add9083850f7a72fe9d61f4f8869e8","sha512":"0f823dde7219ed99d52445800d821a33dad8ef1b8c3d4d68cc34ff2be8a7bee18b009e469c101c37229dce70fc638c0c3367cdf3e1c59692261d91b18b3f86f4","ssdeep":"192:cOggJpIfxfbfYJD/Tr92ImK44R3Sud3epbMYW3ki5tYYV+ea:/3IJTliNLk5pn","tlshash":"2042b855ef95204da21b9084ef9d6be947690006ce0f4e9f7a17b934cfc51e89393b8c","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.948433Z","times_seen":8,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/html5lightbox.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.629Z","timestamp":1789144197629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/html5lightbox.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: text/html\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: BYPASS\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iouvvXzbo0v6uGzmtsimaI9aYaH6pZDDlZqzFZvT%2B1BO0CSbUvQqbvYh%2FVZS8oiZj7eg85vlxvk2RFDRQSpSNJBLpRz6zIInYtYM61yDZ8G6HwffRPBlqH1C%2Bxsn1Tkfqac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de33fef56b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":1173,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-09-11T18:46:31.043229Z","times_seen":57129,"resource_available":true,"data":null}},"time_used":1030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1030,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/rule.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.641Z","timestamp":1789144197641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/rule.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EJ3HiK1mkxzsRtrE8wwaGfZwuW4BcTaCvf1AxBMPXCGKPD5vOL9yHzkptnfP%2FSENTTHjJd1N2Md0tKw%2Fu8yWbhGxFwH0o8fkn32Eu%2FO1ymdYuK4qca6i4vZwj5%2BBtZL6K8A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de34ff256b9-OSL\r\ncontent-length: 4960\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4960,"size_decoded":5685,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x90, components 3","md5":"8268c3e2840916ab52f5faae4898e884","sha1":"11aa4ea2326a8307e048363351cbed2539e5d7f4","sha256":"95d02c17e6bc2c5b7cd297a42efafddffa727b68ebc68618be46c61f8ff761f1","sha512":"49f68f8f18809086f735420b8c2e429f63b019a766c84e2c2059bf68258cb59b615744ad95988ac824ee08ffd48ff766c604bbe9bfb80929c3667b57843497e5","ssdeep":"96:UDrzG7nts0p1q3N2iKAFOhcW4bjks1U60aNVej:UDrstsCY9j0h6K4VQ","tlshash":"f2a17cb19b015c83f08e02736334907d260e39922be5de257cb072a62bee5d45700f99","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.950492Z","times_seen":8,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/VNG-logo.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.665Z","timestamp":1789144197665,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/VNG-logo.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:22 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DdY67dRvyCgMIaALwVe6p7md1zsMriYSuzq%2FvGDaqVsuBfkqqjYHkxER10kF5fEs82E8rutK4Cp93MoyAwnLHbVVHydH%2F6wC8eRsqEFI6VAcICT6iJ%2F3DfjW3h1MFmeIJAo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680556b9-OSL\r\ncontent-length: 4719\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4719,"size_decoded":5441,"mime_type":"image/png","magic":"PNG image data, 328 x 121, 8-bit/color RGBA, non-interlaced","md5":"3d22168e615ea85802ae88cbe305bf1a","sha1":"33a2ca4f5ddd537eaf6fb538536bc9537f6f2163","sha256":"e3173fb4a5bea7dffe8f76051f3d9b127c71be60b1945a37a674a3b9c0736698","sha512":"0b771f165ceb6bdce3f20e43b61d5b2f264c437708b6dfb178dc5c0309903b7abb7f09d52b8affba9224bc1e479bffaf288a1dc88e966a6e4edd8e0bd11278e1","ssdeep":"96:sSXgi9vSH+sYsJ3oseDhO0Jn9BhY52PMkcHm+6wBC/sZMrngXXR63C:sSQ6vSF3oseDh9Jn9BU2PMkcGOBC/wMm","tlshash":"54a17dc458a26da1072f95e327909ceb39483310709bfe01d6dd43e69f73d188d6135b","first_seen":"2023-10-23T12:42:06Z","last_seen":"2026-09-11T16:30:44.951281Z","times_seen":9,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/foot_logo2.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.670Z","timestamp":1789144197670,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/foot_logo2.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:22 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BCsTHC0EnYZwgcfHZ4gtNZuc84CK7JIDAEUva8PThzCsIwuWw2OKzk2QptON6uvg61yyEH8PlK%2BfewGM%2Bg3NDlhm1VQOgbv3iWgtjIDSAa21VHzCjoOWWBtHYFcPVSXOzg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3780956b9-OSL\r\ncontent-length: 2060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2060,"size_decoded":2782,"mime_type":"image/png","magic":"PNG image data, 139 x 41, 8-bit colormap, non-interlaced","md5":"8e2ce657d7de0aa0e2bf1137108c674d","sha1":"e83f6e82c9ba7ef713b0654666cefa1f79ae51d8","sha256":"805685317d2846c6b29fe98ce26f31aa97cb615d3d24ab2f521732988109a430","sha512":"25aaead493aa0fd1ab4acf7569f01f7d935317eaf2ddd43c0a044faad377a58e4c2f74cc705f297b928934c0629b679db7afd7b2a92fb5c40df3992b4002ac38","ssdeep":"","tlshash":"2f41f9e368f7573fbb0a28964f4d51f9a6241c84a03835c3644dfb0fb6b08d886a4f48","first_seen":"2023-10-23T12:42:06Z","last_seen":"2026-09-11T16:30:44.952581Z","times_seen":10,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/foot_bg.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.613Z","timestamp":1789144198613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/foot_bg.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:25 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:39:02 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 92\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eItruv9cJnzNb3Bc1aXhC%2BYwK57TpwOOiWXQPE0crWDKkd%2B%2BGjBTLITcrd9rLdwQnKr9N3%2BeFGo42iTe7PnWrK6tvhnBiBCZNZc5lZUkYaPjAt9wuJ6duNJVRl5O6EMdCdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de9586a56b9-OSL\r\ncontent-length: 11586\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11586,"size_decoded":12312,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x20, components 3","md5":"644b21745dc8f4c05e2df591aa4b7bd4","sha1":"e8ac2009dd1dfdec391baab24ae11a5d5ba9cec6","sha256":"e5dc31469c8e669d90bc4fbfba50d1ba79cc5ca2e1ec8a669a7f3af251dbaeda","sha512":"1adeaa7591c8b9240d64186e00b5226765fe206a81ab103398372e1bbbad60c1306704c29aa4329306594a169dd51fb24af2aefef6db95abbe640e57f838277d","ssdeep":"192:blf2NesyY1yWGdpdMywu84QIrHVbvsWrM9ZwqJSgwshaBTtzKZQHKjO:Jev1r4pdMyb821vlrsS2mTtzAQHKjO","tlshash":"5032bf3c90841332f2e2df313af7876f524a78c173a7ee6a6573516b54a5cbcc60a144","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.953705Z","times_seen":7,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/bootstrap.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.627Z","timestamp":1789144197627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/bootstrap.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mOw2iWfd3NRRIQij970%2B0dpQG3wCZKJWOiI93x1%2BvQv7vcyYjsXbxzh8xtLB3vDvggKFSdiwxPUGoPQr0I5ogXfiOm8C60a2NHt5xWQFvRgSlajqWunJzvnYhNT6rezfCag%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de32feb56b9-OSL\r\ncontent-length: 19123\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114953,"size_decoded":19849,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (315)","md5":"ffbac364dfe4035929782fc265fa353a","sha1":"c8add6191b0afc351a6bfb74cb153a478709cc7d","sha256":"40536fa49b96d01b41db0e8828149cee66275824525d3700535a256959f4f36f","sha512":"789bf66c563fffe6a400aed486929a64c5cba90b44bdd94031e8ed1f0c902eb3de834f1d8e685c30a1aca5c50751aadbb26d4f6ea1441136e0d5f0f386a4e657","ssdeep":"1536:WVrPZ9tjjZTliyiy5rVDfNCGi1aOcZH/vBEq7F+GVbSZOV:Wb9xi8JDl1zZpEq7p","tlshash":"98b3450a3efa24a2415bf03e8bdf5009f774508b5909da047c5ca6d86fa4938936dbfd","first_seen":"2023-09-20T04:58:26Z","last_seen":"2026-09-11T16:30:44.95465Z","times_seen":19,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/default.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.628Z","timestamp":1789144197628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/default.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bujvCaBZx%2FgGg9qMiesG3NXGOy78b6%2F5obmr4CbtQ3%2FHuu372sUCOZ9FSi1pUBe83Cruu4IgDw4A10lnFX3XoAfIXPkpUWhta8OTcWri%2BHUFTHZgQDZMv1kwqnJDb26o7d4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de32fee56b9-OSL\r\ncontent-length: 290\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":693,"size_decoded":1018,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"3584302d25f7a939b00632595caf89f1","sha1":"992dc221addc6739688da1d5f692a54d21bfb205","sha256":"1ae2505871db2cbe0130ddb5f7106aec2669fb85bb3e85c550da0db7c7ff4ac1","sha512":"c8aae6c5e800ccd7103449b6f70d7f27f2b51530d89db4aba42b131406d2131b9b7a1223b1c93ea0880d6721dbb89532c848aea0320c9fbaee7fc6ddea57fbb9","ssdeep":"","tlshash":"3401f99e28b5205492b7b0a75b9f75043163806b0784dd01745d0ba51f2833e05eaadf","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.955584Z","times_seen":8,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/googleplay.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.648Z","timestamp":1789144197648,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/googleplay.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:22 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:52:52 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2FOsr%2Bc8Qj%2FZu4%2BMxrn7XJOH7Jy3jsMPJPYa4xvwBCsr16CjkF7l8kank1RF2mwmeevA5Xgmq7o4adZv%2BJE7litE5TJU%2FciT7x%2BlV9oMUZZlee8tEDh8rZGX%2FDUPPboQjqQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ff856b9-OSL\r\ncontent-length: 8215\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8215,"size_decoded":8947,"mime_type":"image/png","magic":"PNG image data, 303 x 91, 8-bit/color RGBA, non-interlaced","md5":"aab25ee128a194787094fe71178d4ede","sha1":"fc91c3ffed18c506badcd0582bda3059cd0c9e00","sha256":"d5a243785bfc0f9b5caffb051452ca0c90676df56144cb59e302e996b94e0153","sha512":"3ef5071734980ecd72c749eed67e9224db22c40a6d79d78c98fa094da3ea6aca63054fd5bfb96260e5acfc3c254e8c8c2d2864bd4e1a10cec76c05443aefe6dd","ssdeep":"192:WV/J7BpJI8VjGxZ4uTwMyXpTcPv3gYQXAo+gMm4:WPyoSxsMy+H37Qggk","tlshash":"ad02af9279401fb1cd569385f3b8ec83df0b0290ada9d69982c46a4e0f1a1fd44b258f","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.957786Z","times_seen":8,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=1847380645.1789144199\u0026dt=PUBG%20MOBILE%20VN%20-%20CH%C3%8DNH%20TH%E1%BB%A8C%20T%E1%BA%A0I%20VI%E1%BB%86T%20NAM\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthepubg.mobi%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1106174702.1789144199\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6992v810485245za200zd810485245xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~120385422~120469145~120469153\u0026tft=1789144198940\u0026tfd=2601\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.157.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.950Z","timestamp":1789144198950,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:35 GMT","end":"Mon, 02 Nov 2026 08:37:34 GMT"},"fingerprint":{"sha1":"BC:1F:B5:F8:04:0C:7B:4F:F4:4F:20:30:D3:BA:66:E6:AF:8E:8F:AF","sha256":"8F:95:CC:30:E8:8F:6B:71:EF:35:1F:71:03:32:85:0C:55:44:E7:59:4A:F4:0B:1A:7E:11:9E:18:EF:D6:10:22"}}},"request":{"raw":"POST /ccm/collect?rcb=15\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=1847380645.1789144199\u0026dt=PUBG%20MOBILE%20VN%20-%20CH%C3%8DNH%20TH%E1%BB%A8C%20T%E1%BA%A0I%20VI%E1%BB%86T%20NAM\u0026en=page_view\u0026dl=https%3A%2F%2Fnapthepubg.mobi%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1106174702.1789144199\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He6992v810485245za200zd810485245xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616986~115938465~115938468~118897920~118897930~120385422~120469145~120469153\u0026tft=1789144198940\u0026tfd=2601\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://napthepubg.mobi/\r\nOrigin: https://napthepubg.mobi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:59 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://napthepubg.mobi\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":544,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T19:24:36.300163Z","times_seen":18408721,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":3,"connect":25,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/imgs/favicon/android-icon-192x192.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:59.085Z","timestamp":1789144199085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /imgs/favicon/android-icon-192x192.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nCookie: _gcl_au=1.1.1847380645.1789144199; _ga=GA1.2.1074906533.1789144199; _gid=GA1.2.1301606749.1789144199; _gat_UA-129678316-1=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:59 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:31 GMT\r\nlast-modified: Tue, 31 Aug 2021 07:01:26 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 87\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7MPY1R5x7bCXklCYM69g236BCVM%2FS%2BEcvrzcJAK4eu6AsLXYkhboWBQZUn0NRRcca%2BJz66ONtEwm00UC%2BZkDopMMb6cnX%2Ft1s5B7Sbee1B2qkIu2ZAc72ALygcA%2FdnSgRoc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980dec48ab56b9-OSL\r\ncontent-length: 71296\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71296,"size_decoded":72028,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"66437a32cdfd27d5ed921a2086dc40d0","sha1":"25979986b6f8eb7750af88b2395e04b0fe0057c5","sha256":"d3c0ad65ea5b00161a81390358aa88fd717e81cf86931d04e07ed996e46b3560","sha512":"4a92ff0df0d06a171598335f305cf9827de896cc6f8a52c7f837620f50ef844aca4e6a8fc4ff7ee58abe554d263f9da8d71fb89907be73b4a91ad5b902be312f","ssdeep":"1536:sU5lrzU+Ou7nbpubZxJ0Db6TDpxrC8Lyj9BMLFNN:DzUGnbS0b6TDpxrCDiNN","tlshash":"de630224244b5518b7cb7e79a6e0a13b10e6769e2a175c2dc249c4237b9e30c85cb7ef","first_seen":"2023-06-20T13:31:44Z","last_seen":"2026-09-11T16:30:44.959501Z","times_seen":13,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Saira+Extra+Condensed:600\u0026subset=latin-ext,vietnamese","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.600Z","timestamp":1789144197600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Saira+Extra+Condensed:600\u0026subset=latin-ext,vietnamese HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 16:29:57 GMT\r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1311,"size_decoded":1160,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"d78b666bfa9052c0fc5586c0b8ad9aa6","sha1":"ee54713d4230da57394576fd680f9b69f60df44b","sha256":"8a5dc71ee4db5fe6cacb3e33636cc815c5aa81919d1920dfc3c45148ab7a8f07","sha512":"146f42b6bb643e44e0cbf0aad7dd0dfb8bd5232ef7349303a6629d9ba9021d1e46dc8bb6ef11b4faf111432ac76f91fddb480ec32cb3d950890fe92640042958","ssdeep":"","tlshash":"9f21109004bea44497438cc217ee3e328e4e6191b08cca76bffe1c88dc65d262369b1d","first_seen":"2025-09-30T21:28:44.683601Z","last_seen":"2026-09-11T16:30:44.960441Z","times_seen":5,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":36,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/bootstrap-grid.min.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.603Z","timestamp":1789144197603,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/bootstrap-grid.min.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvqdK9v1l%2Biml%2B4%2FwJzzh0J1Q8foWKp0plax4e5dQ%2Bfogg9kQRqo%2Fe8Ani2%2BTodi8t7HSkPUBV7i9VEl9r%2FlgOiYB%2Bm%2BTq%2FUogePy68B23Eozyg%2FdsWZJyyCoPkv0ICvGWk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de30fda56b9-OSL\r\ncontent-length: 2559\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30457,"size_decoded":3344,"mime_type":"text/css","magic":"ASCII text, with very long lines (30183)","md5":"cd5676f741d5a32508a77bd021d644fc","sha1":"9d8159f081330310291c827290ba908bc9566825","sha256":"8e3b3b16c7d8859a30e5b0b684c753e824f7fd193b6931942de76c2953295612","sha512":"af6e536dc8bc8b9e69e751c9fe9180219b408548ee024061420315bf5e8dc4d852d7c8c59b09ab8a467947cca4394cc52af21854005ff863c7c64b8f2aed4b33","ssdeep":"96:CeM9moEX6t8GQNKhX/IuTqE83OsEWZInInI6IeIeIZIdI+IO4IrIoICmzuW0a04G:ChAX6tpQcBAuGE83bEWS048GACz6d","tlshash":"13d2af67f092264c41478c0812453bbd86afe4aae7b29ff664a37b6057c66c70df244f","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.962166Z","times_seen":7,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/0232-1542786776585120.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.660Z","timestamp":1789144197660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/0232-1542786776585120.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4gs1lwmzGqeQ%2FF27qrtTBKeisWnS8AOzA1LmcWkGlNNtrX9YjxswYeYl8fjR8bEO24QpjvS2An%2FoqbM91n%2FFnBcQGh4%2Fy4Rh7Q6cxH1sMWJfYtZWvaU00g68hNDb02xrcUM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680156b9-OSL\r\ncontent-length: 827454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":827454,"size_decoded":828180,"mime_type":"image/png","magic":"PNG image data, 800 x 451, 8-bit/color RGBA, non-interlaced","md5":"fd767f61004425bb61cfb87438d117f3","sha1":"0d336fd21654182b45cd3bdf76113f08dc0fa3ff","sha256":"406dce016fcaf262c3605d8bdc3fe932b95da8c104206984a71eac1c679cd009","sha512":"5a6b7c3bcfc5e5259507428fed3278a09ead7a6ec9903ee3c17bebbc0128fb3d0229a70f1672baeaa94c1e3f61a6431b098995c61f4d29d29c4b56c98d08ddfd","ssdeep":"24576:6ukvT+gMyFp4Z47JGMcMz4AZ+IW4tGWmI0N:migMyFWG7Lxz4gWmQpN","tlshash":"310533e4f7e32dcba54b905e3ff68360a25f121bfb18952829d5388a454c2c8037ddb5","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.963379Z","times_seen":6,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/4902-dangky-(1).png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.663Z","timestamp":1789144197663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/4902-dangky-(1).png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z%2BOYA89c84oWrWMRvfkwmpC7k75i5eeuAa%2FZDpe7o%2Fv4ZuoESncdW2ApWpIIopCnAVek7fgbWgLlg2k5kGiyiEHkDHwiAsniTFtiS0z7%2Fp6S%2Fkj6087Wai4ELuQ2TmISHBU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de3680356b9-OSL\r\ncontent-length: 1271514\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1271514,"size_decoded":1272243,"mime_type":"image/png","magic":"PNG image data, 1200 x 628, 8-bit/color RGB, non-interlaced","md5":"16b02abe6fc693ec6825a53d814540b8","sha1":"c9fa3db0d88768606679cbf7124a19e6eaf1bd23","sha256":"90ae121fc4b0b5fba07746cdd61564d166bd059d6a07ecbc9cb08a31833aa4d6","sha512":"1fbc3ff8ff6430cf8b2df4a2f4a1c34438104d832d43fa5eee2b4178c59d6307cc1ba968be5afb00dafbf48b5ab5e58966ba6d877e9330d591df16177a33aff2","ssdeep":"24576:5Iwc3hEmNEdGRpxuyswuYysBfsfW7jhHWpkky7ySRYt:7yrmdKpxuypxZBUSNHQLIe","tlshash":"07253355b973e1b287eafedf60c0b0d2e79979b2869f45d10c2405f2f9a3152d843b82","first_seen":"2026-09-11T16:30:44.965137Z","last_seen":"2026-09-11T16:30:44.965137Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":200,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/bootstrap-reboot.min.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.601Z","timestamp":1789144197601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/bootstrap-reboot.min.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:22 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:52 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FCCutVOqKyaWDw1iadDFzoKfwv9xosgXK6iLAZwYLyiw1w9v09sje%2By98nlcp2clzJIBzzaB7gVyFiFfDq9Z3GH1h9xEU3STQDBpOyb7vayMGAi%2FASN%2B2vU88IGPOrAaUVQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de30fd956b9-OSL\r\ncontent-length: 1418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4081,"size_decoded":2189,"mime_type":"text/css","magic":"ASCII text, with very long lines (3694)","md5":"8fe07934aa345305ccd0c9511a962868","sha1":"ff7a71a9cb40c0b2419278a278258cf49bf3d90a","sha256":"409f1a3e6174f4a0924e12717b4fff0ae4a8fd5506611222fad53310b3fece5c","sha512":"419ed9c1131c1c7493fe005d69a2a13bdefa1f5418b9764172e3d176764adac4b245d54719174f52d6c880ca76f85b076fa2b564c42a1d23159851ca9c27fe5e","ssdeep":"","tlshash":"b881a967630035a487334d2927ca6ad831114562c0e3b6b6f553dab4cfcb9523a6eb1e","first_seen":"2024-08-19T13:17:27.404914Z","last_seen":"2026-09-11T16:30:44.966903Z","times_seen":9,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/fbevents.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.614Z","timestamp":1789144197614,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/fbevents.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhKxH%2Bi8g3Usp20FaUbRFylLfqRi07hsGyZHwT%2FNJn7BkJ%2FnlwnZ0WBL2xPDkevCcl%2FryHamr%2FzNjEnqr7rAjs5JYZ%2FLEZxDGhCmja3r%2FrCb8AIvzz962CQYlP1UkjELvlU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de31fe256b9-OSL\r\ncontent-length: 14250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51856,"size_decoded":14986,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (42061)","md5":"97e497e3ac3c6bbb74fc6b38019f05d8","sha1":"30e476edd86dcc73f8cd63896fe64455307b3731","sha256":"50fd02e7397cb3745341be12701a2583d187f3f78115c41de0aa96a0cdf27775","sha512":"19c2892d66b37600029442ac5063643be949e085ad0785e320bebc791e1f3982513aac0b5ae6968170613c2f13f97565c0bf298a7c6989027dfc8a5e40ee99b6","ssdeep":"1536:Ghr7okwgUdzLyWu923c0jIOMSD8lSx9mSno0pXdjUCj7i:GlNiTj8Gg","tlshash":"5b33b8c871e270a387a6747c953f500bb1b698f5b4c8c860e6a9ddd83e6889d1037f79","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.968289Z","times_seen":8,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/froogaloop2.min.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.619Z","timestamp":1789144197619,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/froogaloop2.min.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fUr81JyiMvuBF5FdIewY2%2B4n%2B7eN6o%2BOWGaBSHqKJJFNz%2FSNDk7INL8BaRWd1QSL0g2QQddVxRz4HVXkNdWv3Y4BEAe5c1%2BX2tAlP6ZNFXvmLdowiLMaeIfdq%2F2NpQdgln8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de32fe556b9-OSL\r\ncontent-length: 640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1542,"size_decoded":1372,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (512)","md5":"f9624433f960dcd3ebdb2eb2b948e9cf","sha1":"35f11f7f135477a317781f051bd5cd9944b368b8","sha256":"f0a7e38d3da10f50c1f5f4ed4e50d920bd6e81f650a7c2f05d200bdfa3d47426","sha512":"9975c31399f1059e331c9023cedf43aca0cdc06d7ed79cbe7fec41bf27737f00ea68fcc81ee618405cfbaff6c2e0c7000e8d45244463a13cbdb4071e0041fa30","ssdeep":"","tlshash":"9b3131d6b0f37cb441b66629201f320f656dac47e45885a2e49ac8d2be7a9437070b8c","first_seen":"2023-03-07T01:42:36Z","last_seen":"2026-09-11T16:30:44.968987Z","times_seen":377,"resource_available":true,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/sdk.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.620Z","timestamp":1789144197620,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/sdk.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NpqcuXTCM%2FFs7X3aWNIf8V40r4jGBD0CYkEEiu4a2npc1Zok8Uuo0pbrdnpCFKnqGadzTOKMcgPN2tPFnyxbPTUsqvF8dr892yCk5FEzy%2FLh7zmum4uStWn0%2FTPmmOxzZsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de32fe756b9-OSL\r\ncontent-length: 58210\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":199180,"size_decoded":58938,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15200)","md5":"8aeeeb96f6b8d9bc08d142bd9b3c7fa4","sha1":"5e5279b6946a8d7197ed9df10de0edc7d8c19ace","sha256":"79c85cab430d5fe7f5557c9d6773982dde39167a8c257738aa3208545faaa794","sha512":"c7969102571fea65724358a45731e012d49bf52b4e01622703f6e629be0909ec230d0500704bc7c90a46adc92faa8f211f3bf635518f7ab86fb002ef7266a849","ssdeep":"1536:hMqLaa9bKC0n8ywuvRRAx8aj1B1gE0lkasaBUuINCNSF9oJ7q1FWHjmx9os/yVNf:Z8Y/gE07sRjo41Qmxus/yVNQ1nEIpLM","tlshash":"e2143ad971917062c2e238a9a0bf510bf07d8491b9589974fee8c8e42eb8b5d1537f3c","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.96959Z","times_seen":8,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/icon_logo.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.643Z","timestamp":1789144197643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/icon_logo.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQLS5lNwwUAJ6xDCzO4Qm%2FufE9K62zPHlY5VACmlkXxw1pikif2ga9S8C2CfsI9Cz7S60ZwXODb%2B%2F7R32Z4s8h3obMR3omJZjrW0zSJTVWr7cLexX%2FHNZQexq0Kjp78oWR0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de34ff556b9-OSL\r\ncontent-length: 38853\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38853,"size_decoded":39578,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"cf7dce166716e0645d877ee2bc00453e","sha1":"4c2f0dd5f4c3a9dd30f386bb1e85a9ab6d75d814","sha256":"4f5f8ee12c1932ff2757a92051ac88f77875a7fe4c45e6399a1fc36394b3535e","sha512":"135dfca9be1049bcbea2c3d5d8f50cbbc4bb667a6eadcc86f5c2629095ebe25ad79c3889cf78e2899e24aa25b1a4c80bcab1266a78bab8e5a5c9c31eeeb4c066","ssdeep":"768:02gOWWvS837gB5XDmEkmK73O52jVy6PnT+k9WsTMuaIi2IL0hK/eGu7kYNXIue7t:02gOWWvS60LXDBkmAbA3k9Kuat2I8BNe","tlshash":"2b03f1c5e8cf5b9a6831787a0ca45af8fc43ef977a00d8a2d899d40d1cb99c4484f07d","first_seen":"2023-08-04T20:10:22Z","last_seen":"2026-09-11T16:30:44.971344Z","times_seen":28,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.ytimg.com/yts/jsbin/www-widgetapi-vflxGrywa/www-widgetapi.js","fqdn":"s.ytimg.com","domain":"ytimg.com","tld":"com"},"ip":{"addr":"142.250.178.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.475Z","timestamp":1789144198475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:42 GMT","end":"Mon, 02 Nov 2026 08:37:41 GMT"},"fingerprint":{"sha1":"CB:38:34:2F:7D:9E:35:93:25:09:7C:BC:CF:D5:8B:CD:34:CD:70:E7","sha256":"50:17:03:01:AA:C0:DB:75:43:0B:A6:DC:1F:27:C3:AA:1E:93:2F:67:A7:8C:54:7D:FE:7B:6A:E6:F1:9F:C7:FF"}}},"request":{"raw":"GET /yts/jsbin/www-widgetapi-vflxGrywa/www-widgetapi.js HTTP/1.1\r\nHost: s.ytimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"youtube\"\r\nreport-to: {\"group\":\"youtube\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/youtube\"}]}\r\ntiming-allow-origin: https://www.youtube.com\r\ncontent-length: 7729\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 07 Sep 2026 19:34:08 GMT\r\nexpires: Tue, 15 Sep 2026 19:34:08 GMT\r\ncache-control: public, max-age=691200\r\nlast-modified: Fri, 28 Dec 2018 22:35:59 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding, Origin\r\nage: 334550\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20695,"size_decoded":8481,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (783)","md5":"cb4b2e3e2ce8911b5c03c61df68b58b2","sha1":"e8bc23ae716743e348b952c78b460d5daee7d6a4","sha256":"27a9d5da522a9269ce5317f99cc458e95bcf4b13acb90fa0d6ee43910553f880","sha512":"f54f4d8eb09b8b4c574d1e7ee1154cea2b409c2216151f9ccb7c941dd808e7259f45830d6415e55ee3c766398fa7503000e1485280e1714f4992473af070eef3","ssdeep":"384:oQWVSvyLmv5soMalkwV1aE6G33i7B5Ti1CyLCJicnlK9QMTWL+:oQW96v5soMalzaE6Gn8e1rOUD","tlshash":"7492c8d9bb61703291a3a1b2513f250b313aa49ef40cc95cb144ece56db49ad022ff7d","first_seen":"2023-03-12T18:06:41Z","last_seen":"2026-09-11T16:30:44.974956Z","times_seen":21,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":4,"connect":16,"send":0,"wait":17,"receive":1,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/h_bot.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.545Z","timestamp":1789144198545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/h_bot.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:25 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:38:06 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 92\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8UrRDSmAGVDkPntaJ9bTaLfBYXNBF353gWBgNQ%2FFiJTOEmxJzr%2BCh39PYIEecjQRj9UK4%2FHKMbDLXJ5qsMhSxdPUMhhp1UubHJPaW2KSxys862gbvrbgeLK9KSmtPS9AUv8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de8e86256b9-OSL\r\ncontent-length: 55333\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55333,"size_decoded":56056,"mime_type":"image/png","magic":"PNG image data, 1920 x 68, 8-bit colormap, non-interlaced","md5":"c6a4cfd8be70424b239b99a167ce150b","sha1":"6eab0a30f714a4561e3e63d8246989d71fdaa8e5","sha256":"8ee425906c429f064edb8fc6ef517130bbea0151a2d324402b8f1909aa040fb1","sha512":"a4b74f53a9ff8ec94c0d816564fbd203d2781484338f60b4a65b42a9eb6305a587ff935a2d8511e0818eeef45f63f5c732b51151b5f3cc411d1affa364c60dd7","ssdeep":"768:Iav1JBPJkXg6P1eda8IEIvMuEmqm76gpYFzOX1X3kQksN2ngyKYJw8TjW9zp7kLv:dJ1Jkn4dLnNA7lnk61yK4TidpYPL","tlshash":"5a430228015e62ec7589be2c35463512bd3a0f66fad4790be2116c6dd2e41dd5cfe3c2","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.975691Z","times_seen":8,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/www-widgetapi.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.613Z","timestamp":1789144197613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/www-widgetapi.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yBKqTtR9u46T4dhDpUvHMQH78fRazX3HUxJj%2Fzs%2F73tUKYbcfowLUpix4bj470c479Cm2nVwm4laJpk4KFu4gbFMXrNknaBcSsob6AFk27GNE%2BBCCgxqRLr%2FU9GRUK0sQvw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de31fe156b9-OSL\r\ncontent-length: 7417\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20695,"size_decoded":8146,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (783)","md5":"cb4b2e3e2ce8911b5c03c61df68b58b2","sha1":"e8bc23ae716743e348b952c78b460d5daee7d6a4","sha256":"27a9d5da522a9269ce5317f99cc458e95bcf4b13acb90fa0d6ee43910553f880","sha512":"f54f4d8eb09b8b4c574d1e7ee1154cea2b409c2216151f9ccb7c941dd808e7259f45830d6415e55ee3c766398fa7503000e1485280e1714f4992473af070eef3","ssdeep":"384:oQWVSvyLmv5soMalkwV1aE6G33i7B5Ti1CyLCJicnlK9QMTWL+:oQW96v5soMalzaE6Gn8e1rOUD","tlshash":"7492c8d9bb61703291a3a1b2513f250b313aa49ef40cc95cb144ece56db49ad022ff7d","first_seen":"2023-03-12T18:06:41Z","last_seen":"2026-09-11T16:30:44.974956Z","times_seen":21,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/iframe_api","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.618Z","timestamp":1789144197618,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/iframe_api HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VMxZpVs7TVKPQoHorS1HWMD2T%2Fxk6zYrdRWprTbSkEmSYcu1czid7kZiAeFsCklFdU%2Bpht3H%2Baa6211zeyEpQ7v5KZGFOdhz7X0Bvke9bVgow4E9zpqF6SfgwMVhUDKg0Ps%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de31fe456b9-OSL\r\ncontent-length: 859\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":859,"size_decoded":1474,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (858)","md5":"c646c0e76dc2f0a5ff6f01dd51f7f57d","sha1":"fe2e43d2c0f2e3fa252c5f6bc5c330c91197786e","sha256":"735abd235c173b2c9e3cb93caee37aefcc1fa19fb4df62953e702cf226d002b2","sha512":"92b4e4f5ed42627b8468e023559694db45aba074f82cea6f1779cbde31baeabf23dc1f61f10a0a0d6874bf25b048bfa5bef6162d638ddb4f6d97100281f66fbb","ssdeep":"","tlshash":"5e112f761e08643aea95b094d2bfc60d36216108ead0c952109cf48979acccafdbd83c","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.977565Z","times_seen":8,"resource_available":true,"data":null}},"time_used":844,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":844,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/gtm.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.622Z","timestamp":1789144197622,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/gtm.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzmxjsVHTHTAJzhg%2BNbDjiexTahjr5e3HeE2RyP10IWOWuvR2chk0o%2Bdz%2BpLYutW7Ok5HrnPnTqBPe%2BEk%2Bs%2FxTmH0%2B76W7HQdmOofH3TkUi21oRUwgGiBBFnIgDN1eXukIo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de32fe956b9-OSL\r\ncontent-length: 27032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80793,"size_decoded":27768,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1858)","md5":"487ba1a636eec81ec63a4dfdafe8837d","sha1":"a4757b079a60f91c1f240cb3067bf17da11985d2","sha256":"0d7b499d4fb8625530b004a80ece7b699b8da945dacbed906e4d2116854da785","sha512":"1574649a2706e33cc4cdb854419f3c6f0bc796325199721541b01c742b07cb050e4a8f51346a4fdb9c07f829819cfa4809772782d466585a99fd072496554653","ssdeep":"1536:liogm5iIfowa5CAELAIo5+NuuXRjrCq1H9u6kNG6mz8JzKGTcpywWcqjKNSdfs8:cotP0CAEquXNCt6ppywWcqjKsBs8","tlshash":"3183c7d9f7a274a6c3927464443f110be17a59e6f80c9c94f289d4e42f79a8e017bf2c","first_seen":"2024-04-15T19:31:22Z","last_seen":"2026-09-11T16:30:44.978999Z","times_seen":7,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/4420-aaaa.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.652Z","timestamp":1789144197652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/4420-aaaa.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3UAh56wz4h5zbOAZnoHj%2FW7UG4rtdrjGgvugrSYfPBmgbKC1qF5HZj1l1XPjXgmwAUvRwTOYIQrwMUJjsAV6dYH6Owc2Tyd5qcQFTVuK37dspXtt2FKXTyZ%2FWq1ShkrvoCQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ffc56b9-OSL\r\ncontent-length: 1065517\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1065517,"size_decoded":1066240,"mime_type":"image/png","magic":"PNG image data, 999 x 562, 8-bit/color RGBA, non-interlaced","md5":"3f69c1a941e4790e4e1cf6c9a4264861","sha1":"cd1e4115559dbb292b8cb497ca063d65672bd063","sha256":"8f81b8f6246456516a1f22f005ff053cc685a214549e17964183d5d00ae9921b","sha512":"af16b7f3ae0f50e3f056b2ac71ba903fb078e3380886321724822ca5af6e682046e8535e266f0550b308cc6b1bb5cd34bd3ae5dc504732869bbfc548c5762f34","ssdeep":"24576:8mk9qkSP0lU5Znzq236TaAwGsfshDeoP80ya6p3wz:37ZggX386Gsfm80yao32","tlshash":"df2533407a3b45b8558b93f20b8996096c43dfde7fe2fce4358c8af256316689184dc7","first_seen":"2026-09-11T16:30:44.979606Z","last_seen":"2026-09-11T16:30:44.979606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sairaextracondensed/v15/-nFvOHYr-vcC7h8MklGBkrvmUG9rbpkisrTrN2zh2wph.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.599Z","timestamp":1789144198599,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sairaextracondensed/v15/-nFvOHYr-vcC7h8MklGBkrvmUG9rbpkisrTrN2zh2wph.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://napthepubg.mobi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 17768\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 08 Sep 2026 08:31:47 GMT\r\nexpires: Wed, 08 Sep 2027 08:31:47 GMT\r\ncache-control: public, max-age=31536000\r\nage: 287891\r\nlast-modified: Mon, 15 Sep 2025 17:01:40 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17768,"size_decoded":18581,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 17768, version 1.0","md5":"9c8d170fbb5d4488f249509196ac2e73","sha1":"3a3ec163d4fdc250c76a87f703bd7ef6119ba2dc","sha256":"69ff2d48f217a5822a41a19b3dfcb63a9838a1358c00f0e7829de5755fcca7c9","sha512":"02d8dc2e072c912ced77af1c23508ce407020911ce5b00fd28ee41961790a7521db16c598c31133787c2122df872585656d25c44c951f022fae24c0829700ded","ssdeep":"384:NyWNIrQLFJGvoIjn/sMm+BnjbT5bxDJEcYaCYwT49:MWNpJGvoO/5fTvDJ3rKE","tlshash":"3a82d0b0148271f5e46c4431ef3d4ba9c09678aba7944af78ffd099b061420a25334e6","first_seen":"2025-06-23T05:40:57.329913Z","last_seen":"2026-09-11T16:30:44.981024Z","times_seen":100,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":4,"connect":39,"send":0,"wait":20,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/page-tin-tuc-intro.html?page=1\u0026id=1","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.605Z","timestamp":1789144198605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /page-tin-tuc-intro.html?page=1\u0026id=1 HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: text/html\r\npriority: u=3,i=?0\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwjxXFyhZ2PG38j7y%2BSudK1jYd3KXHqlrVhAahmG1GCMpe7kvUVFQe2fxo5q7rLVDwcZ%2FLDM3e7P05CjPkztOkSC%2FVdyH7wnTpG2qnYwqc8o7CrhxaP5CPlIl2bWLygx6oA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de9486856b9-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":1174,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"265e51037981a14ed99a5fc8c5ec1b51","sha1":"d12ac588953298fdaf46dd5b4af8eb4cf6b06f0a","sha256":"c4b07931b3fc37bc80d56a367783e7fa7c04ced4befec7f57ed079c38c960400","sha512":"b18aa610811c5f9bc1dd829ad90a95568e81a41e1fd1472983dc00147f65045fd91fbc498b5263ce4f4c88b041be21f186ed2ce357d3bcf86c0429ca18991151","ssdeep":"","tlshash":"1101f12ac182a80fe0231070fa91e37451594212629b4f647b9ff676f6ce1ab56b22cc","first_seen":"2024-02-05T05:35:22Z","last_seen":"2026-09-11T18:46:31.043229Z","times_seen":57129,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/widgets.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.632Z","timestamp":1789144197632,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/widgets.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDFMN14LH3GKlsJbhK7%2FReSixAwR9%2BoCHsk5EuoINyk1%2B8jVoCg%2BIY0reFoCBWniOoUjUGKIb6EC%2B%2BI9RN%2Bko%2BFS5Zoh%2B6wIDbOmkcxBsMNY9wV53HmzWWNx2TjuFa%2BB1pA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de33ff156b9-OSL\r\ncontent-length: 26761\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95222,"size_decoded":27503,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38416)","md5":"3db86ef055d51cd0e7082890f848dae9","sha1":"117e3299693d837e4ddf04e315834db808064838","sha256":"b435e0c1948fc0179dd72f3a581fc9dec019ce106aea793bec27914d904d04f9","sha512":"b0cd6f4c1eac2093b3d448002c11076619314137133346778b643cc88520d9d5062dbeadce5d7be5739298a80ffd76c0744f4b68cace667dfeacfbb1647b03ef","ssdeep":"1536:FfSzT/gHEHmnZryYLgH419kcH6OIke4y7oVPu8ryMz3khm/:sTokGnrMkkk2wrj/","tlshash":"6093829df291b0b5139730b1426f620fb2376999b54b8990e221f8d9bc7d98d8123f7c","first_seen":"2023-12-25T09:25:45Z","last_seen":"2026-09-11T16:30:44.982591Z","times_seen":10,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/shop_bg.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.612Z","timestamp":1789144198612,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/shop_bg.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:25 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:33:46 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 86\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=136GZSFUmh2HaSXIIxwWQrPXd6sv0orxhfZhuw4dvsK2oCyOdtwEHL7Tlp6PmTpcRzz9zj4QwAOf6WuBBnygtRlbDxgJOrBPdnhmiUcFGmSRPKWoHlbK2P7OGymy7lMPq8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de9586956b9-OSL\r\ncontent-length: 145168\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145168,"size_decoded":145887,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x943, components 3","md5":"7cc8c131683db4f449d97ac7e41adc4c","sha1":"3a655a21a0ca18da0a375926913a55ce7a98426f","sha256":"3b6d291b0a3d66982de3d66ecfef9b98798cf2b503d5e7b3857d164b15b7df20","sha512":"79723a4f402cedbd54871db78e1483ac9c7d6f4c73ea94c9526f992b5f2ee6733a06ae9defa283730ae7cee0dc124e12dd5bf0d4a763cb8e9f47cc1470e41e80","ssdeep":"3072:TWFtYiApU61bZh38fzA1nry3eQA9+X4ZaHItAGX:TeKy61X3UAVy3e19+FHItLX","tlshash":"dfe312ba6ed48f9efa12485c56f0fe8b39111dc80a8df78838e4df51bda11a019d95c3","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.984252Z","times_seen":7,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NVHL3FS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.617Z","timestamp":1789144198617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtm.js?id=GTM-NVHL3FS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\nexpires: Fri, 11 Sep 2026 16:29:58 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 11 Sep 2026 15:56:16 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163972\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":480599,"size_decoded":164622,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11404)","md5":"3c575ff50dfd2fd66878bbf8bfe3663f","sha1":"225b11aa4106a28e8b2994bb524eae08b80c9099","sha256":"3bcc9bf926e793986a1c7cc51b4ab0951e3ccb4725ba92620e0d008186bba1e7","sha512":"a9dcc3266e0dcbe5b2f9b7d05ebb7f5b336f34f22a168fb12d7b0f4475dfc9f5cd5d7e4e9a1c8d4232c43c158c3d7d5b0f6cd6fd515cd060890c2cbecfc1fc95","ssdeep":"6144:Wf1L6SbQXmgyyE3RdJl580vcTPbNELR3/j/MmS3vNamtc4CiZ:oaCy6PvM517uU","tlshash":"f9a42acdb3d6702283a2f574903f018ba27a39a2b84cd895f14adcd42e3459a5277f7d","first_seen":"2026-09-11T16:30:44.985614Z","last_seen":"2026-09-11T16:30:44.985614Z","times_seen":1,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":2,"connect":22,"send":0,"wait":39,"receive":50,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/default.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.607Z","timestamp":1789144197607,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/default.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xHlT4QqdYs1R0%2Fh3l2hH54aLgLJHjTDc1RU9oTVb16hIQ76lZ5mysLf1hqYWt03DTYkmvdn9OdNmKFhy2f5oRwxvr9vx%2FGH3VchSdf%2FGrp7%2FWVy5vrl7jFr%2FTPA57Iq6jzs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de30fdd56b9-OSL\r\ncontent-length: 146\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":918,"mime_type":"text/css","magic":"ASCII text","md5":"d5d10d7a37422ef058057f87f6b0875c","sha1":"72cb9ef1f58ccecf0c1ac2a472843b4e681585e9","sha256":"c8ad07261cc2bed92340d74196053e44a584f3c125c591ff5adf98ec053d2ca9","sha512":"efd83648d284f1fdfe80d6b8a9d2e608d46af43d3899c1992b439da7aac3f1a55b39f4424efe5ee374a4c064a6b5074439b3d9d63b5abb01f5159aee30722b8c","ssdeep":"","tlshash":"05d095c2d44730875767f52d1067f9420b3840c8dc374f08b9a576f1dd9a1c52322741","first_seen":"2026-09-10T20:28:44.986272Z","last_seen":"2026-09-11T16:30:44.986652Z","times_seen":3,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/fonts.css","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.611Z","timestamp":1789144197611,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/fonts.css HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:48:40 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQHG7IoQsd4zfsnqnKA7akhxVdvAcY73tfIjxMreOizz18OiJnabslsZ9O%2Fe2lAu2vudhPZJ1dD5TWV1QFQ%2FdHAhsfaIOyPD7mrU0JMzJsuuyWSEp0Lfg14puj7svQeJM14%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de31fe056b9-OSL\r\ncontent-length: 531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1915,"size_decoded":1297,"mime_type":"text/css","magic":"ASCII text","md5":"4d362cf16c9de6d27baf1e8388b39d94","sha1":"0387801ba3eb186fedeb887d5ee762a81f4792fa","sha256":"f269b5ecb0da25d75660feb3edb8ec1eebfd9e82361164d2bb3413c1efcdb178","sha512":"4bd171717035b9655ae21ff4d32c8e4c5c033382b5386b5e3ef52b84ae5289b49d21426c3801c93620967a977669ece851f61145dd478a1145c30d63968e5c8f","ssdeep":"","tlshash":"3f4187e098fd18814711e4c523923661ef19a3299c8b2c4af6a7384cbbf6745d2d63fd","first_seen":"2024-08-19T15:44:57.880542Z","last_seen":"2026-09-11T16:30:44.987439Z","times_seen":4,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/scroll.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.651Z","timestamp":1789144197651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/scroll.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nR5d71l5aqX85zF3IlznBHSVTwUOTdTAb2hBj%2F%2BxEuZ9UTNidvXvYHe4cA1cTdbGSBtP3Zw6mxUA%2B15SM%2FP%2F2V%2FZ%2FdnRTf16X0k6wpculvCbm%2BXk%2BHJq8RINC3vrpJbWIwQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ff956b9-OSL\r\ncontent-length: 1380\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1380,"size_decoded":2114,"mime_type":"image/png","magic":"PNG image data, 19 x 54, 8-bit/color RGBA, non-interlaced","md5":"98dda5783e7d5b4799520f0af07c210c","sha1":"518b22effd4518157e8761e27cab7f7db4277614","sha256":"e57965c6a5aee88ea54482b850aa5c8753c88617dfdaaa838caa2985da61bc0d","sha512":"9fbcbe4193795a2f01a973a08c17c32209f56285725141c7ccdcee8e04d76665f59336397db383096c1732121dd96ca6c823c591c600ca71fe52c5401b115049","ssdeep":"","tlshash":"0a21d8fc9633eb2f4a2c1a227406021323ff5fbf43e51d28247694915c624fc22ad699","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.988741Z","times_seen":8,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/coor_dinate.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.543Z","timestamp":1789144198543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/coor_dinate.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/index_files/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:25 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:37:42 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 92\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5CFRNroJvo2kJBbJQS3U4iZKRpQvpP6JahkConQHnYD1tyrM2Cp2EUyJxNKfHw9EgA3ZLBPOFiv%2BHlqMmSSMSDGZLQ2NBILRnqrMSeP4i8Xl8858%2Fb%2Bpor1QK7HpcMOKa4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de8e86156b9-OSL\r\ncontent-length: 1060\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1060,"size_decoded":1782,"mime_type":"image/png","magic":"PNG image data, 1112 x 33, 8-bit colormap, non-interlaced","md5":"a53374c04cbd7c1f5595ac048d48bc05","sha1":"afca6911fa5c4f519ecaf1e63f90e53d2735e4e8","sha256":"c0c705b544b368c0b450329f87122e40e759b2b2bc753360a0810cb93b5a1efb","sha512":"02adfc903381ffdc26dfb4f8cce29c5c51b4f422af18c8177a8a0d5b40404925a606477f0c3cb7fa2eac97319914a2fcc73f52b13362c75b1fdee0461542c38f","ssdeep":"","tlshash":"b711a8adf7320e2df97c60556260d674f15a8cecad15d25c80cdb17a0c74950ce497a7","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.989361Z","times_seen":8,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/sairaextracondensed/v15/-nFvOHYr-vcC7h8MklGBkrvmUG9rbpkisrTrN2zh1Aphim8.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.600Z","timestamp":1789144198600,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/sairaextracondensed/v15/-nFvOHYr-vcC7h8MklGBkrvmUG9rbpkisrTrN2zh1Aphim8.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://napthepubg.mobi\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 6900\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 20:28:04 GMT\r\nexpires: Fri, 10 Sep 2027 20:28:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:01:40 GMT\r\ncontent-type: font/woff2\r\nage: 72114\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6900,"size_decoded":7711,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6900, version 1.0","md5":"25ac89c0ccdee99dfde2d04196846a77","sha1":"43793bb2a960068336d2e0460e07f1a6963726cc","sha256":"7c029b9615a7a6b7404beeeab661e36d945d1c8394c974550676a1d27fcbc09b","sha512":"d417715a3b4e8b02d63afd6b1f036df874c705a37acb14547f6173d3331c292a14fb48d13d66f230fb352bd477898771b5e8404fa52759919e6811696cc4329a","ssdeep":"96:ggwjrwt9RYrWbZoiCSlrwaTNRh/q17i9/6Qh7OpD500Fyz6x9UVBWoL4B:qjrES82deMa5q1u4QUxjUfQ","tlshash":"74e18e9239db424af6f591b630d6d8cbfb4890c9c19111f5924856cebce2a8b7343e11","first_seen":"2026-09-10T20:28:44.976518Z","last_seen":"2026-09-11T16:30:44.990448Z","times_seen":3,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":2,"connect":0,"send":0,"wait":27,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/icomoon.ttf?aumch9","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.601Z","timestamp":1789144198601,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/icomoon.ttf?aumch9 HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/index_files/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:58 GMT\r\ncontent-type: font/ttf\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:25 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:46:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 92\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FFlitUO0sUQ%2FobJ%2BneaCjRUXobJHpOvsGe%2FNGJnZIIQ24IYpoC%2Be3VxZYmXLMb14A8Q1qhlSUAF7DbIcR%2F2WQtnOPf9IFfWn3UFJVdzRPuu3PFogcNhnGI2RsUnk2p1jKxQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de9486656b9-OSL\r\ncontent-length: 5920\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9168,"size_decoded":6695,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"OS/2\", 14 names, Macintosh, type 1 string, icomoon    ","md5":"648ad7644ba7c62a06f354118a07d107","sha1":"d6827e7b146421cffba9b268d542bb81baaaff34","sha256":"7fb56ddc697386097bfba6c52df3f98ef5dd9f9496a1ef7af4c5d882228abaa6","sha512":"71a6cb0e50dfe0be691fa2162c7527600d8b198e7bbcf845849e78f9073d59724ebdb6ea464c2debd400193b61cbe8e5dc3b5b15bd9e25c578194ffe36f0cf31","ssdeep":"192:epo+YzEU87KB9L0nU4cTYi/haduvL9BjmiDJt34yi5XTflPV2K:rzCsmUr7PvL99nT4yeDfd5","tlshash":"f412e4465b2ecf9fc16550f10d17b203afeae605933fd28295449d4ca068ae88d3cbe6","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.991396Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/slogn.png","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.646Z","timestamp":1789144197646,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/slogn.png HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PC5eylK1zGmkHJXNGpm%2FCGXbHIo89TixugXstm7NqvfrNYWG3JV4zmyzIU%2FpNcs7JYCfOnuHoLXZMQp63sS7Hr5mxrAyw%2FJbyn6jrKp9xzqcC3wcnTSRUoXgDWAMLwa37Ug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de34ff456b9-OSL\r\ncontent-length: 142523\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142523,"size_decoded":143247,"mime_type":"image/png","magic":"PNG image data, 450 x 184, 8-bit/color RGBA, non-interlaced","md5":"e449e7a7a507f389811e45ad3fd23b13","sha1":"a79ae66667456ddeb43b5a80a97e4ece1626caac","sha256":"0f103f64c348e4c8b4d3cd0abf467baac30020d4e68218675181e39ecb9714eb","sha512":"897925d86b54b9d19e0302426be5002750bb78cdda43b1b6ce48e4f4677d5bec65abf589e06235cbaf9b255fcaabaafc3d510a0fae70905415e2c32f5ee87fa4","ssdeep":"3072:kBx5jRQMrTJYkhigLXIHAzMlF3Iv18mN/z6iUIrVnGBntl:WjqMjhHEkMl9Iv1pOunG3l","tlshash":"cad312efd3046e37a8d088fc17a76a6a0235d2d214204de6ffbc0f1e64c57d614b6a65","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.992402Z","times_seen":7,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/swiper.min.js","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.630Z","timestamp":1789144197630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/swiper.min.js HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 26 Dec 2018 06:24:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EK58lLbGYmM8IFF%2B6spVJUBw92rnogkXD0l5nnZBHM5Ai3ANpw42SakqGsqn%2Ftkl2atLYiuEqfB44gMxcHnX0%2BpMAaV%2F3rRw6UcthXqh%2FzIi19BJvQ0DipNSv0UFqLqUbtE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de33ff056b9-OSL\r\ncontent-length: 30942\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124671,"size_decoded":31674,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65269)","md5":"d4ff815d60c83028c87324f6fce8e634","sha1":"c8032fe56b5c847d2fa83d448810728e7f628900","sha256":"bd701c6685c39c2d8fa3fa663823006dc49086ea7a058ba316214ea9736c05dd","sha512":"bbb6f107e85f5430a14bcb5f89fb138d231cb5018320173ef401d5d72b86d23e2c8945c2d9c6f1df6586b939033aa001107d30578a46149d3405df75e3b35bc4","ssdeep":"1536:/ArVAiT53aBXr1nuNraK8h78lucfbyYDk5PJVzD5vp0XvH7WcWUwcPqojsE8EtOE:RBXr0rJ27UjmvD5ufH7WcWUwcPqmz1L","tlshash":"f2c31949b35071d551e72256539ed601a3b62805b90ac0a831b2dcdbadbde8c03bfefd","first_seen":"2023-03-07T15:00:54Z","last_seen":"2026-09-11T16:30:44.993142Z","times_seen":1494,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/1522-b.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.653Z","timestamp":1789144197653,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/1522-b.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 95\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wqwHV6hsftnrbFALI%2BiP2Xz7uovL%2FQVM%2BUAO%2FZnojV5%2FLPj2OuEJZznACs69lTVSmEhpX%2BgrynA%2B5bCgSD75AQ0UdODYoYDPyN6r%2FSSLC1Uu%2BOP6c1Hs%2B5P6DrIHBzhFrco%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ffb56b9-OSL\r\ncontent-length: 260851\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260851,"size_decoded":261590,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 999x562, components 3","md5":"7fbac0fac3cf1e1c1f4669433a1f6d3f","sha1":"cb0684b5e6bc117fb474f4dd080dfdb457b25293","sha256":"d458462944e9455606751e88e9c2555f38488ef3b58cda08a632cf4ee6deb8f1","sha512":"6d3410ce2df5b0281bb867eec96281a8066a3f00a722a638b75f2be9328c2cfec374277ff37129f7ec9745c81d4921297195276224f9d59f30289ec79a8b32b5","ssdeep":"6144:nK+8wbSVJFAy+lAywdj19H1EzHj40of+r4KtL1k78bc:nbgVJFAy+0h1qD4LU4t7Sc","tlshash":"2e4423c1f8537bc162651c2852dc8d301a9deb6c896d60edfa7e2fac20d843a45f8d5e","first_seen":"2024-04-15T19:31:23Z","last_seen":"2026-09-11T16:30:44.994043Z","times_seen":7,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"napthepubg.mobi/index_files/1604-d.jpg","fqdn":"napthepubg.mobi","domain":"napthepubg.mobi","tld":"mobi"},"ip":{"addr":"172.67.204.67","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:57.655Z","timestamp":1789144197655,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"napthepubg.mobi","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 02 Sep 2026 20:00:45 GMT","end":"Tue, 01 Dec 2026 20:59:15 GMT"},"fingerprint":{"sha1":"88:A9:35:C8:EA:B5:B3:AD:77:18:CD:A4:49:1A:25:67:FA:60:BF:BA","sha256":"66:8E:B9:74:67:9D:D7:9E:7A:EB:91:8F:36:5C:80:B1:51:B6:68:0E:77:F4:4B:C7:98:5F:E5:66:4F:1D:B3:9F"}}},"request":{"raw":"GET /index_files/1604-d.jpg HTTP/1.1\r\nHost: napthepubg.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 11 Sep 2026 16:29:57 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 18 Sep 2026 16:28:21 GMT\r\nlast-modified: Wed, 26 Dec 2018 06:24:54 GMT\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 94\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cGKGy5%2FN53Tl4yKYxUS4l2CW%2BtswzlGqrcTMPjqQ6F%2BykuridctbSU04RQhvbMHS93jk%2BbYGygP%2FTQzaH9K5EBRF1qL96%2FwksxgD3jlVrs2dBanVCN14CzPkaIMM8XyBvX0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3980de35ffe56b9-OSL\r\ncontent-length: 288437\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":288437,"size_decoded":289168,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 999x562, components 3","md5":"579171943ea5fab39d1dce35fb730f18","sha1":"753f1595245ee556168725e31079c76e84145a92","sha256":"ddb4c597effe29af8f33b55cb8dcbd5d23e60fc45b5de2d1b49300021af5b50b","sha512":"326da8cf8df9f0dfbbe0f67aca509711217f9eb3cc6f1cb19fc274fe79bc7a1c299770852a47ff3c5f50adef061f6e81b119a7d389afab1cb03031b90dc8e30b","ssdeep":"6144:+YgyKpF1kpuTnamWGBqE/WsBKyKccs4KP88+yced42LVZp8Kx0NsQwoRTuqeBmv:vGRjza+XOsBrXRF88R1d7wKqSQwoVPe2","tlshash":"045423ccb0239975edeab6e01693bc62b88771069bc4ec1081defaac339a493f545c55","first_seen":"2024-04-15T19:31:24Z","last_seen":"2026-09-11T16:30:44.994637Z","times_seen":8,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-11","alert":"Phishing Block","trigger":"napthepubg.mobi","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"napthepubg.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.bytedance.com/pixel/sdk.js?sdkid=BOK03RCV5EJ5G6ELJ250","fqdn":"static.bytedance.com","domain":"bytedance.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://napthepubg.mobi/","date":"2026-09-11T16:29:58.939Z","timestamp":1789144198939,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /pixel/sdk.js?sdkid=BOK03RCV5EJ5G6ELJ250 HTTP/1.1\r\nHost: static.bytedance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://napthepubg.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T19:24:36.300163Z","times_seen":18408721,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}