{"report_id":"192424b5-b7ba-4a72-a75f-96927981cc9a","version":0,"status":"done","tags":[],"date":"2026-08-31T07:57:52Z","url":{"schema":"http","addr":"dpd.ppzke.cyou/com","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/#/index","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"title":"DPD Local","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dpd.ppzke.cyou/com","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T07:57:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dpd.ppzke.cyou","ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-22","domain_rank":0,"first_seen":"2026-08-30T09:26:53.567526Z","last_seen":"2026-08-30T09:26:53.567526Z","alert_count":36,"request_count":14,"received_data":1264477,"sent_data":7681,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/E8Ho6ETs.js","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","size":84945,"data":"","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T10:06:05.67928Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/DhqmAzot.js","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","size":183340,"data":"","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T10:06:05.685661Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/DQdO6SN9.js","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","size":554094,"data":"","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T10:06:05.679815Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/D6WjOvV9.png","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:15.494Z","timestamp":1788163035494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:15 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nage: 0\r\nlast-modified: Mon, 31 Aug 2026 07:57:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zLDrpOz7cHYBtOBh34T57FZU7xgmSej%2BpcjlWUyz5Qnvp%2FyzSLM6kn9MKueuWOP%2Btn%2BRm0EKtcNsAhq6h%2FFinJTnCQJnu%2BLkMqV6HOeRF%2BkT1fK1hnNwPlJVEEKGWnZWdw%3D%3D\"}]}\r\ncf-ray: a33a7bbbdd6f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21433,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T10:06:05.680508Z","times_seen":839,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dpd.ppzke.cyou/console/?uuid=2567dfff-12a3-41a2-843e-296e728b0bdb\u0026shopHost=\u0026EIO=4\u0026transport=websocket","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:15.525Z","timestamp":1788163035525,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /console/?uuid=2567dfff-12a3-41a2-843e-296e728b0bdb\u0026shopHost=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dpd.ppzke.cyou\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: xjlUkIJzzj54WuMVzHSZ6g==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 31 Aug 2026 07:57:22 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nupgrade: websocket\r\nsec-websocket-accept: 8XKhJROYShyQRQQG1aihTBHWrkU=\r\nsec-websocket-extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ziz31Y6kV5mGSl1CokI9%2B4vIKE2wt7qTVCfhHAehasirLk0wyt4A2bPNhI3k%2Fc4oeaJRr%2FxdDEQIb7j%2FKAmvYURQm5HFl48zUAxPaCTNxyekmtofOZSR%2FQ%2Ba6%2Fz8mStg4A%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a33a7be43a6b56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":651,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":true,"data":null}},"time_used":13238,"timings":{"blocked":0,"dns":6414,"connect":6415,"send":0,"wait":398,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:57:13.239Z","timestamp":1788163033239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/ HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:13 GMT\r\ncontent-type: text/html;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=0,i\r\nset-cookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1; Path=/; Expires=Mon, 31-Aug-2026 08:07:13 GMT; Max-Age=600\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H1LNn2TEoxIg8c0Tzb6BosSh6tHxegMVdl0Ehr23VHLMyWz%2FZdiCkkuPHJ2QNVxTlthbpVUdM5sftaA9L%2Fi%2BYB2nCazV8CLdMKh35HGZshFKmTppJvJUmNM3Icto92v4Wg%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a7badbb5b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"_vt","value":"033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1","quoted":false,"path":"/","expires":"2026-08-31T08:07:13Z","raw_expires":"Mon, 31-Aug-2026 08:07:13 GMT","max_age":600,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"_vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1; Path=/; Expires=Mon, 31-Aug-2026 08:07:13 GMT; Max-Age=600"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2386,"size_decoded":1736,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF, CR, LF line terminators","md5":"8bd131267af0372651771a75eb4ced76","sha1":"5e36a2f79023423e281a5f05662b2962f58ddc01","sha256":"b7fbe1e796e21d2e51bbd8c9296eefac4c393c05a33de90b2b00964b4ae04916","sha512":"ffdc4daca62dad0b621d6381341efcdfe09d933c75e1b982ff27abcf4bfeef30d9e8a01c45ca4f4aed8877d29d85a0dc8d3c9cdee82864504721e1815231fe86","ssdeep":"","tlshash":"8b41259205930c16132343a2dfd6a201d2f1d603c14ffc4479fd10ae4fa4a8599e7f38","first_seen":"2026-08-30T09:26:57.975241Z","last_seen":"2026-08-31T10:06:05.683469Z","times_seen":18,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/OwDWr5DG.woff","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:15.536Z","timestamp":1788163035536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/OwDWr5DG.woff HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/assets/Ysl5gP_N.css\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:15 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KywZhJRpOWPUNa1SyWlNQ3PH38mmKu4sciXUGCxEWrRfVEvQsTRZkkGb%2Ft%2FxNO%2BYlnl%2Fzr9eNjgLl1rFjFHJKpxrJscMbMxiwlLnHDiUYil6b%2FUx7AGeIa4lBDvsKt26Lw%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 07:57:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a7bbc1d7f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60042,"size_decoded":60727,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60042, version 1.0","md5":"32319d6149e2659c974fef61dfd5cc42","sha1":"e2aedccccdbad3f63b14e27941c59e7ba533cc51","sha256":"c99d0b5a290e48d4e4cbb86c29dd12436f465696702a81ded130a411f1e98cd3","sha512":"93a8d50361921549721c1313a53b122fd14fa7470c801bb1a785a72d0c022da4db26b650eb776ce0f9a2e4971363efc84095f0a8a30e57751d9a580454295e9a","ssdeep":"1536:yqdSnqzzEYachE4HiGuwH9wxpzLDFV6aP:yGKch0GFH9AxDH6G","tlshash":"7d4302dad28b50059c2ed4b12acdf4d8fe0516f58cdd75688eb4d1a823efddd9949030","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T10:06:05.682885Z","times_seen":2128,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":339,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://dpd.ppzke.cyou/console/?uuid=2567dfff-12a3-41a2-843e-296e728b0bdb\u0026shopHost=\u0026EIO=4\u0026transport=websocket","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:22.142Z","timestamp":1788163042142,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /console/?uuid=2567dfff-12a3-41a2-843e-296e728b0bdb\u0026shopHost=\u0026EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://dpd.ppzke.cyou\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: VuXOJIzxRsekzEccnUsHqg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Mon, 31 Aug 2026 07:57:22 GMT\r\nConnection: upgrade\r\nServer: cloudflare\r\nupgrade: websocket\r\nsec-websocket-accept: ZxoYC/RTRCa4sfYlRDbqs83yvAg=\r\nsec-websocket-extensions: permessage-deflate\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FMUxxyTRxUfIPR4mu8fCxxkfRaKLUvyojtNW37KBCtfk2qyo%2B8pm%2BGEPl8DVZto8MxlJy9WAmRytMlMJK66LCY2y1yXsQ11iGdg3iRhFe396ikkmjbNtpvmK7EVSBUq9A%3D%3D\"}]}\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nCF-RAY: a33a7be57db156cb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":643,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":true,"data":null}},"time_used":409,"timings":{"blocked":0,"dns":0,"connect":1,"send":0,"wait":400,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T07:57:12.773Z","timestamp":1788163032773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:13 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=0,i\r\nlocation: /com/\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQVYE1T%2Fsy71qWSei5Xll4YYNGoNJcLngiSVtS09ZjgZ4oJAJkdbHzqEPqWKSS4vg8M1pylP1nqzN1mhcTx6%2FY5RqVT2u117A83MNkzn9p%2F11D3Gp%2F86y1xLkVBS%2F4bTXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a7bab7b0032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T11:32:42.475929Z","times_seen":18201525,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":89,"connect":11,"send":0,"wait":356,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/Dw2Q-3X1.css","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:13.896Z","timestamp":1788163033896,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/Dw2Q-3X1.css HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:14 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 07:57:14 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9XPLZdjYhdtvQTkwE6Zrl08xHPjnICYj207q3MUELsdGdN0OufEmghrWXIaG5KnmaWL4LhYBvH3sWj2MvakTHtr9kEVyRZklWd8lghbXcEvF1at17PSxfq1gR9I9rRNe9Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33a7bb1dc0f32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8208\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60381,"size_decoded":8935,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (60380)","md5":"b68d450f564fa4095b39a4b7c57a0978","sha1":"58a3ea9eb890327d9c3a2e567eb0795ec5fbd376","sha256":"6a9cf39ffa1d41a393da1e5030b9b46c98bd11c4fe778081710dc6fbbbd0ed10","sha512":"0589959a1c2d7ef261fbc90d12ba4daa951e6bc1a786d0b33170561e739dd855252f9861f8cf1ff66e19ad2d8a7eeeb9125a7b471c5bf6f6cb87c3a68e2cac15","ssdeep":"768:1/fGmmVAL0uVYXEAFAtCbRgVaXp9jC8FpKdDm0pC59PwL3yVe0FpJvY:QOAuVYXt/tggP7a","tlshash":"de439561362c2038f97bd955b8d09bae3109f313d5235aeeee65a535cc870933b3269c","first_seen":"2026-08-22T02:48:44.572728Z","last_seen":"2026-08-31T10:06:05.683988Z","times_seen":26,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":395,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/fS-WSyLf.jpg","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:15.501Z","timestamp":1788163035501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/fS-WSyLf.jpg HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:15 GMT\r\ncontent-type: image/jpeg;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nlast-modified: Mon, 31 Aug 2026 07:57:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKpzD4PgEMc9r%2FxTkaWEHjvX2DHiBVV4beJC2CdyOYg0SdTGnzzI2FdlRoRDwxGW35gyqalsmr%2BXWGh2Gks%2F6yK1TyhY4O9xGpZkmsCquqIQjC12B5g8dcLVXuf2rDvX1g%3D%3D\"}]}\r\ncf-ray: a33a7bbbed7032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134719,"size_decoded":135360,"mime_type":"image/jpeg; charset=utf-8","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1280x853, components 3","md5":"c9366d3c96a7e0b114309b0c71cf2ba0","sha1":"582b2fea1bd70cc908b82e33d07ffbafeb7a303a","sha256":"7e166c9fb31e3358ced873ed61e59da1e2e849a5193e27d5c4dab3a5a8ed1e44","sha512":"77d145beed6247975a6e419bf3606e9336fb06f22e552546b01ef82e34e5b7fc278113c49848d3f25148bf2fb772b4fbb4a381d4d0faff177727e61a78473909","ssdeep":"3072:JRiYiMREGUNgNtLewB/jxzWxE4Zn9T/JVIt6XnuG4D2zHCOr:aYiMqGAsCIFzWxE+9Nytkr","tlshash":"0bd312e45ea45412f401ee7a4cf05943c2423ee77bc5da48b38b3f10baa41619eeb8d7","first_seen":"2026-08-22T02:48:44.583554Z","last_seen":"2026-08-31T10:06:05.684608Z","times_seen":26,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":180,"receive":502,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/BOnPfxxG.woff","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:15.534Z","timestamp":1788163035534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/BOnPfxxG.woff HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/assets/Ysl5gP_N.css\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:15 GMT\r\ncontent-type: application/octet-stream;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CzI4SrI4MOVOPs96C16kagWZRPWRRAi%2BxO5ZE2Kv19uF1gfWgzAiysgAAgaeYmNslmglINx48yhpvKqaNympFlyWCbHHZk3UFx4EGuJUoTcm4I%2BAVXs4akTBzM6urEpGOA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nlast-modified: Mon, 31 Aug 2026 07:57:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a7bbc1d7e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60781,"size_decoded":61460,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format, TrueType, length 60781, version 1.0","md5":"20398ebf2986259c88014178d7044844","sha1":"02422f7f86e44268579b2b3694ca72eaaa8a301a","sha256":"9e462606602d426b676f2b6f9c0b6629b02f91204214898f7d4a56749c4e00d0","sha512":"e353fbce67c1e46ecfc04c74e56d06f8916149d071700fee9cce2976987f2c5a5878dcd434590beeb02c417e9da0379696695f49ac9561ac423eb3d592438133","ssdeep":"1536:/mNyBIPLRqPeSDzYi5G0ChYnizF7Bz/bad7bSByIdPSE9:+VzRqbHT000iwz/bO7bjo9","tlshash":"3053026d635f1330ad5cb62770e8ea782d16fdbc61c2e9020351b2ca0e7a265e72d35d","first_seen":"2023-04-21T20:51:14Z","last_seen":"2026-08-31T10:06:05.681195Z","times_seen":2115,"resource_available":false,"data":null}},"time_used":722,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":343,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/E8Ho6ETs.js","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:13.890Z","timestamp":1788163033890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/E8Ho6ETs.js HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:14 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 07:57:14 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S2pKy%2FHv3ybXVTXmWTirZNe9S9dtKnkEgWQvgLO%2F%2BnS8wOcFTGxtks9mFf16ySV9JLP%2BULPLO60539CLW%2FPVUm3huwWUdbMnDeBTxbEebdEdCOlcCZZO%2FYKZdB5zKbegOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33a7bb1dc0b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 29735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84945,"size_decoded":30482,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65523), with no line terminators","md5":"dc5a950181b724cfe0c9c41e59d96f7a","sha1":"98c4b8694dbe285631cdd0ae5496e7553065b212","sha256":"4d54663f07ede37a41652214289ca67f13402ddad24b165f2fc18173e7d4570b","sha512":"c3863ff083b8ab92492ed0f0ac1f8758aa6457f4c2c6f644cc92e7ad37179f1686f5863deb449d7a19d4638d5fb82412c6dc100a2a84473a6569bd58100009bf","ssdeep":"1536:mwhVcjgFk3x6T5m9TATCLTaT4cTJprFZDbn4AJoAT4nNYnaHP9UYhh9bzF4BxJBQ:mwhVigFk3xEm9TAToTaT4cTJRF1n4MoP","tlshash":"7083080d5e01bdbe204b272934fb10e7346d2d97e056dbf089f18d785b1cea8a1dea94","first_seen":"2026-08-30T09:26:57.99213Z","last_seen":"2026-08-31T10:06:05.67928Z","times_seen":18,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/DhqmAzot.js","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:13.892Z","timestamp":1788163033892,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/DhqmAzot.js HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:14 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 07:57:14 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=69qSAoZQqip%2BsCD1qH7Hyr5k3R95dCE9RgGI2kkfE98sEEi6XewFTDcddIF7E5bUVOlDlHnZHR6az6MH2m1MiEBrfH3dblauLMu0JER0jfqc2ulIihgPo%2FLjmdMAq14beg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a7bb1dc0d32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":183340,"size_decoded":67202,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"2a1b4c52e6b45ca5bdba668c5b4cf187","sha1":"98950ae12d79ca781a696b3c67e39a11c7e7faa9","sha256":"65273d6f816e11b8e846c3dbeae4fdbeb9c48523951665e9835b33f0087c9915","sha512":"8b206123c7c0a63d9ccd17d44e5b6bcf3845d4306e540b7f7faa6d61c6a221cb33d062e490d4641e722c40afc2ef68c7f16ef79368764dc66a24279c56f25f8f","ssdeep":"3072:PLpSe/aSjhXSSS+SQ2UDPMaWTTLy5x294dRy:1//7j0SdxjMVTHy5xa4a","tlshash":"3b043bc53251b0a253fa15e3407b1007f3396925380d899cb25cfdef6c6a98a61b7f7a","first_seen":"2026-08-05T07:13:51.96529Z","last_seen":"2026-08-31T10:06:05.685661Z","times_seen":27,"resource_available":true,"data":null}},"time_used":752,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":398,"receive":354,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/DQdO6SN9.js","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:13.894Z","timestamp":1788163033894,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/DQdO6SN9.js HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:14 GMT\r\ncontent-type: text/javascript;charset=utf-8\r\nvary: accept-encoding\r\npriority: u=1,i=?0\r\ncontent-encoding: gzip\r\nlast-modified: Mon, 31 Aug 2026 07:57:14 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5b9WP9d3qWO9tOAADHGCTdqJkXP6LPmj%2B70Dgwg%2Ftdo6fStI%2BrOpzH9fi%2F5eOSf%2FSIJWRPLyBDDWKD9p8NNKffV2oWj05pR7LzXc%2FXl5rBQhez9sNKPpUCwcQ%2B78PZOuiw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a33a7bb1dc0e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":554094,"size_decoded":183564,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"60e31f1c280c649ef902a76aaf94b175","sha1":"7034589d5ca7ab40262f5914f7c7d04b8af5c1ce","sha256":"8345cd86d15339dfc488a22f0533cc1b2d16553ea37098cae43aec8fcd5c112e","sha512":"164439754dff313c1b22ff49815d43dd33324a828c2ff851f666cdb634ef98bada3dc4417c04cc954e38aed8b46d1dcf0733a466788dad036d8a18936b528962","ssdeep":"6144:opw8G9FXkYxS8NM0r0O0Nrkb/Ew1a+XA9DPnYjHwLd+A7xAdSErehHWODhg7J49Z:op2kYx3B3Y35AUvoQTYK+9u","tlshash":"f1c418d22b4ff2ca016208a7439b30c6b10e7bab380ce5057ff4f5941ea5769796e934","first_seen":"2026-08-30T09:26:57.986512Z","last_seen":"2026-08-31T10:06:05.679815Z","times_seen":18,"resource_available":true,"data":null}},"time_used":898,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":387,"receive":511,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/Ysl5gP_N.css","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:13.901Z","timestamp":1788163033901,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/Ysl5gP_N.css HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:14 GMT\r\ncontent-type: text/css;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nlast-modified: Mon, 31 Aug 2026 07:57:14 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nhv1MrbgMTPBRy68mYiFMFn46O0%2BXIPpt1fKYDyBRv7MQc%2FPpKvKvIsNi94TXCIMRP%2BI8c1hY3oXb3v0cLkqNAmNuUIJJd9hP4dSTgiVxMXG%2BfvOsIvc%2B675i19mYUjJlw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: a33a7bb1ec1232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 11921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72646,"size_decoded":12659,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"24bbaa2d9a54ac50885af44427e3f442","sha1":"f8d69b5393ba572ccec98e09d1673c2bd0037f25","sha256":"d625a8a7223f626b8f0ed13fd8d9c3c4f21f0b29555ee1412c0459fb3ead42ba","sha512":"4692960f383cefe5e8c1b2ddfc43fcb24ac2ff16099bd2edbebd0ef881e05a37412b80b1389f352f098b5965be45d4033e591d7dca7fa1c2175f26746bbecb87","ssdeep":"768:rltO/xR1ySZjKKl1Qq5cZ+lMiRhONG1dJkG34mqWPlz/hBhcaa+V2:rlg/Hll1Qq5cZ+M+AG1f3IWPlz8","tlshash":"0b63c7b9775c2014f87bc99716e466cd01246326f113439cea27ba358ecf6933e72ad8","first_seen":"2026-08-30T09:26:57.979502Z","last_seen":"2026-08-31T10:06:05.686758Z","times_seen":18,"resource_available":false,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dpd.ppzke.cyou/com/assets/D6WjOvV9.png","fqdn":"dpd.ppzke.cyou","domain":"ppzke.cyou","tld":"cyou"},"ip":{"addr":"172.67.129.70","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dpd.ppzke.cyou/com/","date":"2026-08-31T07:57:14.912Z","timestamp":1788163034912,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ppzke.cyou","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Aug 2026 11:22:07 GMT","end":"Fri, 27 Nov 2026 12:19:48 GMT"},"fingerprint":{"sha1":"C7:A1:56:20:60:2D:A0:92:A5:06:1F:83:EB:99:D4:33:6F:E8:96:54","sha256":"6E:30:DA:77:2E:23:FE:36:66:0C:BF:CB:2E:DE:BE:D1:4C:A3:08:A9:C6:2B:37:53:64:14:93:F8:B9:82:C6:B5"}}},"request":{"raw":"GET /com/assets/D6WjOvV9.png HTTP/1.1\r\nHost: dpd.ppzke.cyou\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://dpd.ppzke.cyou/com/\r\nCookie: _vt=033d0dc0-8bb7-4f32-9dd6-b6e3d86a1cb1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 31 Aug 2026 07:57:15 GMT\r\ncontent-type: image/png;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nlast-modified: Mon, 31 Aug 2026 07:57:15 GMT\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FmIPDqBf7PPi6kQ5%2BgHonMpJO9oG2cCX7BsEh%2FR4xcsFfzpUUR%2F8wZxjZaMEe0Gt0lvLYq6cdk30JqVd6wVzlO2ixK3XN%2B3cTE9bMmLpiV5y%2FWp4crvEfPBjN0RVz%2FH9EQ%3D%3D\"}]}\r\ncf-ray: a33a7bb83d1232fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20781,"size_decoded":21430,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 141 x 67, 8-bit/color RGBA, non-interlaced","md5":"7fd40f3f20acbd2fdc7f81a77534ad38","sha1":"d55bfd5300bb1cb29316481db93002ed52dd00df","sha256":"6dcfd3f9716c0b3a5305ba18bcf64214c0b19b950f154e3c7a32bb51833a4ed6","sha512":"4eb176028f309ec5d3b608e15518add59fb854d0c69701973bdf9a2018c1628c8cd254729c48279db23937f1d2fc10d4bedbe29ebb189723757fca4863f2ef44","ssdeep":"192:vSNktOMOO0JLsMJ7bH+xwCOsb/w2T3X5erxHsk+m4:autOrNPexss42T3cdCm4","tlshash":"00926c60feb0319550cac2700dd97c188852aec788d28d07baec5a152f54fbc6e8f2e7","first_seen":"2025-10-14T22:06:20.884098Z","last_seen":"2026-08-31T10:06:05.680508Z","times_seen":839,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":190,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"dpd.ppzke.cyou","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"dpd.ppzke.cyou","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}