{"report_id":"1b20a0ce-3b47-4a90-a454-a6e862a3a220","version":6,"status":"done","tags":[],"date":"2025-10-31T22:51:23Z","url":{"schema":"http","addr":"aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":0,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"title":"Unlock Your AOC Gaming Monitor OSD Settings","dom":{"size":8555,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3980)","md5":"3d1915ccb1de61006ed7e5417f5b7f9a","sha1":"6c8a7ce2128bdb67dc596c5804dc9288743af4a6","sha256":"fff637aa1673b618dc410ac39211a05aefe40e61e3c8d38d9d7f1c053e15310a","sha512":"f257c6396ba6b89c70f96037cc6e1fbf318e58e1e3397fbf6762e4aecfe0635a7e46e4b1f40dcacad811b8bd1a68a7b33b58b000da4e186aa2be20eb916c7de5","ssdeep":"192:1nPcwgM2hWOkzPcwgM2hWlztPcwgM2hWOkzPcwgM2hWvWCkCaO:1nP5x/zP5hztP5x/zP5S2","tlshash":"7502f633fd995a3848a234571cfe73b01c53871f7611ca41bdcc25a06ba17a0aee5abc","dom_hash":"domhashdc54fbe1ae197f2d0347c91caad45e38","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"PGh0bWw+PGhlYWQ+PC9oZWFkPjxib2R5IHN0eWxlPSJtYXJnaW46IDBweDsiPjxzY3JpcHQ+d2luZG93WyJhdEFzeW5jQ29udGFpbmVycyJdPXt9OyB3aW5kb3dbImF0QXN5bmNDb250YWluZXJzIl1bImJkYmM5N2JhMGYzYWI5OWVlYTk1ZDMzMmM4MmJjMjVmIl0gPSAiYXRDb250YWluZXItYmRiYzk3YmEwZjNhYjk5ZWVhOTVkMzMyYzgyYmMyNWYiOzwvc2NyaXB0PjxkaXYgaWQ9ImF0Q29udGFpbmVyLWJkYmM5N2JhMGYzYWI5OWVlYTk1ZDMzMmM4MmJjMjVmIj4gICAgIDxhIGlkPSJhdExpbmstYmRiYzk3YmEwZjNhYjk5ZWVhOTVkMzMyYzgyYmMyNWYiIGhyZWY9Imh0dHBzOi8vanVwLmFnL3Rva2Vucy83aDdGak5aR1o1NEtKelV0dngyZVM5dTYxSGJQWDhYWlM4V2p5UXRycHVtcCIgdGFyZ2V0PSJfYmxhbmsiPjxpbWcgYWx0PSIiIHNyYz0iaHR0cHM6Ly9jZG4uc3RvcmFnZWltYWdlZGlzcGxheS5jb20vY3RpLzNkL2Q5LzY0LzNkZDk2NDJjMWEwZjBlYThlY2I4N2M0ZjA4YWI0ZTM1LzE3NTY2NTY0NDkuanBnIiB3aWR0aD0iMzAwIiBoZWlnaHQ9IjI1MCIgYm9yZGVyPSIwIj48L2E+PHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPiAoZnVuY3Rpb24oKSB7IHZhciBibjsgaWYgKGJuID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2F0TGluay1iZGJjOTdiYTBmM2FiOTllZWE5NWQzMzJjODJiYzI1ZicpKSB7IHZhciBjYWxsYmFjayA9IGZ1bmN0aW9uICgpIHsgKG5ldyBJbWFnZSgpKS5zcmMgPSAnLy9rZXR0bGVkcm9vcGluZ2NvbnRpbnVhdGlvbi5jb20vY2xrLmdpZj9sYW5kaW5nX2lkPTYxNTAyNjUmcGxhY2VtZW50X2lkPTI3NzExNTM2JnNpZD1INHNJQUFBQUFBQUNfMVJUUFd3ZHhScWRqWk5YdkZjOHZSZEVmUXNLZnVMcjJkbF9Jb1F3SVNnaUpDRV9Tb0VvNXRjWnZIZDMyZG05YTd0QUVaRlFSR1U2MHEzUGRXSUJFUUlLT2xCMFRSY0pLWmNtTHVLR2hoWWhwVWJYc1dUNGl1ODczNXdwemhtZC1YU3IzU2NCV3I1MzZkMXl3LVk1WDRxR2RQRGlkVnVvc25PREMxY0hQaDNTMDRQcnRvakQwNE8xZWF2SHJfcEJPS1F2RGQ3V2NyVmNZdFNuMUtmLTRLeXR0U25YbGc1WTJPcC01Zzh6T2d6WjBJOUNyTlhfM0YzcndYRVBhcnhQX2ctclp2Xzl6YndQSzZjb1J0LWUwVzYxS2F0VGI0M2FuRGRsamJIYXVWYXNGbVZYWUhRRVRlM0JGRHVIdDFHNkdTRmZIRU5aN0J3NlFEbmVuanVBc0ROeTdQa25FTVhPb1V5SThkMW5Ta1VPWFVDb182QWJUNkh6WFZnLWhTeHZ3YXBIQkpBS0Z5NmlHTjI3VU5ZZFgzX0c4ams3SThlZl9nbmJ6Y2p4SjgtaEdIMnpuTnUxd1pVeWJ4dGJGZzVycG9kZG04S3VURkcxdTJnMlBOaHVGN0w1QkZiOVFwYWVua2N4MnI3bzhoSlc3YjJRQkNsUFdNSVdVNnFEeGRDUDQwVVJxR3d4akRNVGhvYWxtYUVIVDJUTkZOd3RvSFVlV3V1aE5SN2F5c05JN1ExQ21vYlM1MEZzTWlVVEd2SXdWRnJRTEdXVThrd21hT1ZjLXlhYWFoTXkzNFNzYjZLcWIyTFZmdjZJX0k2NmZRQjNZLThIbl9sR3hUeU1ESlUwWm9uV2ZpQ3p6QVJwWm1LVmhaSG1Nb3BNR3N2VUtHbWtud2tfNEVIRVZHeUNUTXM0VnNxbkNUTXNZWklweFdtcUZmY3pRMFVXeDBLbmNSWUVUR3JHRkZOY0JZRkpkYWlVenFJMENrMFF4VWxtQXNsWWFsaEloVEp4RW5HVkNoYXltQWVTSjR5blBNdVVMX3dvNFRveElrcVY0WERLZzJzSXhxcEhwd2s2UjlCeGdzNFNkQTFCTi03dnF0d3gxOTlUdVd1RmZ6alo0UXo2U2Rtc2JQRzdaYk9pQ3dKZWI2SldfYmF0UG5LM0lKdUZ5WVp4YWxMT0d4ZE5QLUZDOVZ2VlB2bmZQQkRldmNjVXEzcHZJSlNRV1NJNE5RRVhXYVkxenlJMTk1c3lJVmxrNEd3UDY0NkJPdzhiZGtiZUcxZW83SXljLXZnVkNMNExsLTlDMmdYdzlnUjROd2tvQmI4eFlSSEZSdkY5WGlnMkZIbXJPNTdudWhuYUVxcnNVVFhIMGF4N1dfay1PVG01ZkhYNXdVRkdQM2k4RGkwZmtzT0NySHRVZFk4UDdjOEVLX250eWVXeUk5dVh5ODZSN3k1V2pSM1pEVDdQNzVXR05fcGZYNzJqMTd1eVZ1Zk91TTB2MzVCellnN3ZYOVd1T2M4TFpZc1ZSNzVldGtycC1teFpTMDEtUE9ldWEzR3BkVGVXMjdwb3FfT1gzang3YmxUVjJqbGJGbE53T3lQX191TXpTRHNqSjMtNmNfQTNvNWZ2UUZZMzRhb2puYTRrRUJWQmJnbHlmWFRPUlFfM3QxMGM0UzEzR3l1MUI5N2NRakhxTWE1N2pQTWVQTi1FYXhjbVRWVV9mUDNYNEtBZ2NtOGk4cHBzaTd5ZTgzWnZJTUpVbVNSaE5FeDlxUk1lQmJGTWhVd0RreG9lcHlrYU43TW5YcnYyVndBQUFQX181UE96VURrRkFBQT0mcHNpZD0nO307IGlmIChibi5hZGRFdmVudExpc3RlbmVyKSBibi5hZGRFdmVudExpc3RlbmVyKCdjbGljaycsIGNhbGxiYWNrLCBmYWxzZSk7IGVsc2UgaWYgKGJuLmF0dGFjaEV2ZW50KSBibi5hdHRhY2hFdmVudCgnb25jbGljaycsIGNhbGxiYWNrKTsgZWxzZSBibi5vbmNsaWNrID0gY2FsbGJhY2s7IH0gfSkoKTs8L3NjcmlwdD48c2NyaXB0PiB2YXIgaW1wcmVzc2lvblNlc3Npb24gPSAnSDRzSUFBQUFBQUFDXzFSVFBXd2R4UnFkalpOWHZGYzh2UmRFZlFzS2Z1THIyZGxfSW9Rd0lTZ2lKQ0VfU29FbzV0Y1p2SGQzMmRtOWE3dEFFWkZRUkdVNjBxM1BkV0lCRVFJS09sQjBUUmNKS1pjbUx1S0doaFlocFViWHNXVDRpdTg3MzV3cHpobWQtWFNyM1NjQldyNTM2ZDF5dy1ZNVg0cUdkUERpZFZ1b3NuT0RDMWNIUGgzUzA0UHJ0b2pEMDRPMWVhdkhyX3BCT0tRdkRkN1djclZjWXRTbjFLZi00S3l0dFNuWGxnNVkyT3AtNWc4ek9nelowSTlDck5YXzNGM3J3WEVQYXJ4UF9nLXJadl85emJ3UEs2Y29SdC1lMFc2MUthdFRiNDNhbkRkbGpiSGF1VmFzRm1WWFlIUUVUZTNCRkR1SHQxRzZHU0ZmSEVOWjdCdzZRRG5lbmp1QXNETnk3UGtuRU1YT29VeUk4ZDFuU2tVT1hVQ29fNkFiVDZIelhWZy1oU3h2d2FwSEJKQUtGeTZpR04yN1VOWWRYM19HOGprN0k4ZWZfZ25iemNqeEo4LWhHSDJ6bk51MXdaVXlieHRiRmc1cnBvZGRtOEt1VEZHMXUyZzJQTmh1RjdMNUJGYjlRcGFlbmtjeDJyN284aEpXN2IyUUJDbFBXTUlXVTZxRHhkQ1A0MFVScUd3eGpETVRob2FsbWFFSFQyVE5GTnd0b0hVZVd1dWhOUjdheXNOSTdRMUNtb2JTNTBGc01pVVRHdkl3VkZyUUxHV1U4a3dtYU9WYy15YWFhaE15MzRTc2I2S3FiMkxWZnY2SV9JNjZmUUIzWS04SG5fbEd4VHlNREpVMFpvbldmaUN6ekFScFptS1ZoWkhtTW9wTUdzdlVLR21rbndrXzRFSEVWR3lDVE1zNFZzcW5DVE1zWVpJcHhXbXFGZmN6UTBVV3gwS25jUllFVEdyR0ZGTmNCWUZKZGFpVXpxSTBDazBReFVsbUFzbFlhbGhJaFRKeEVuR1ZDaGF5bUFlU0o0eW5QTXVVTF93bzRUb3hJa3FWNFhES2cyc0l4cXBIcHdrNlI5QnhnczRTZEExQk4tN3ZxdHd4MTk5VHVXdUZmempaNFF6NlNkbXNiUEc3WmJPaUN3SmViNkpXX2JhdFBuSzNJSnVGeVlaeGFsTE9HeGROUC1GQzlWdlZQdm5mUEJEZXZjY1VxM3B2SUpTUVdTSTROUUVYV2FZMXp5STE5NXN5SVZsazRHd1A2NDZCT3c4YmRrYmVHMWVvN0l5Yy12Z1ZDTDRMbC05QzJnWHc5Z1I0Tndrb0JiOHhZUkhGUnZGOVhpZzJGSG1yTzU3bnVobmFFcXJzVVRYSDBheDdXX2stT1RtNWZIWDV3VUZHUDNpOERpMGZrc09Dckh0VWRZOFA3YzhFS19udHllV3lJOXVYeTg2Ujd5NVdqUjNaRFQ3UDc1V0dOX3BmWDcyajE3dXlWdWZPdU0wdjM1QnpZZzd2WDlXdU9jOExaWXNWUjc1ZXRrcnAtbXhaUzAxLVBPZXVhM0dwZFRlVzI3cG9xX09YM2p4N2JsVFYyamxiRmxOd095UF9fdU16U0RzakozLTZjX0EzbzVmdlFGWTM0YW9qbmE0a0VCVkJiZ2x5ZlhUT1JRXzN0MTBjNFMxM0d5dTFCOTdjUWpIcU1hNTdqUE1lUE4tRWF4Y21UVlVfZlAzWDRLQWdjbThpOHBwc2k3eWU4M1p2WUFMTkpLVnBFdnRCYXJRZmhFcWFLQTB6RlhNYUJCcU5tOWtUcjEzN0t3QUFfXy1WQno3Vk9RVUFBQT09JzsgdmFyIGFkc0hvc3QgPSAna2V0dGxlZHJvb3Bpbmdjb250aW51YXRpb24uY29tJzsgbmV3IEltYWdlKCkuc3JjID0naHR0cHM6Ly8nICsgYWRzSG9zdCArICcvaW1wci5naWY/c2lkPScgKyBpbXByZXNzaW9uU2Vzc2lvbjs8L3NjcmlwdD4gICA8L2Rpdj48c2NyaXB0PihmdW5jdGlvbigpIHsKICB2YXIgdGVtcGxhdGUgPSBgXAogICAgIDxhIGlkPSdhdExpbmstYmRiYzk3YmEwZjNhYjk5ZWVhOTVkMzMyYzgyYmMyNWYnIGhyZWY9J2h0dHBzOi8vanVwLmFnL3Rva2Vucy83aDdGak5aR1o1NEtKelV0dngyZVM5dTYxSGJQWDhYWlM4V2p5UXRycHVtcCcgdGFyZ2V0PSdfYmxhbmsnPjxpbWcgYm9yZGVyPScwJyBhbHQ9Jycgc3JjPSdodHRwczovL2Nkbi5zdG9yYWdlaW1hZ2VkaXNwbGF5LmNvbS9jdGkvM2QvZDkvNjQvM2RkOTY0MmMxYTBmMGVhOGVjYjg3YzRmMDhhYjRlMzUvMTc1NjY1NjQ0OS5qcGcnIHdpZHRoPSczMDAnIGhlaWdodD0nMjUwJz48L2E+PHNjcmlwdCB0eXBlPSd0ZXh0L2phdmFzY3JpcHQnPiAoZnVuY3Rpb24oKSB7IHZhciBibjsgaWYgKGJuID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoJ2F0TGluay1iZGJjOTdiYTBmM2FiOTllZWE5NWQzMzJjODJiYzI1ZicpKSB7IHZhciBjYWxsYmFjayA9IGZ1bmN0aW9uICgpIHsgKG5ldyBJbWFnZSgpKS5zcmMgPSAnLy9rZXR0bGVkcm9vcGluZ2NvbnRpbnVhdGlvbi5jb20vY2xrLmdpZj9sYW5kaW5nX2lkPTYxNTAyNjUmcGxhY2VtZW50X2lkPTI3NzExNTM2JnNpZD1INHNJQUFBQUFBQUNfMVJUUFd3ZHhScWRqWk5YdkZjOHZSZEVmUXNLZnVMcjJkbF9Jb1F3SVNnaUpDRV9Tb0VvNXRjWnZIZDMyZG05YTd0QUVaRlFSR1U2MHEzUGRXSUJFUUlLT2xCMFRSY0pLWmNtTHVLR2hoWWhwVWJYc1dUNGl1ODczNXdwemhtZC1YU3IzU2NCV3I1MzZkMXl3LVk1WDRxR2RQRGlkVnVvc25PREMxY0hQaDNTMDRQcnRvakQwNE8xZWF2SHJfcEJPS1F2RGQ3V2NyVmNZdFNuMUtmLTRLeXR0U25YbGc1WTJPcC01Zzh6T2d6WjBJOUNyTlhfM0YzcndYRVBhcnhQX2ctclp2Xzl6YndQSzZjb1J0LWUwVzYxS2F0VGI0M2FuRGRsamJIYXVWYXNGbVZYWUhRRVRlM0JGRHVIdDFHNkdTRmZIRU5aN0J3NlFEbmVuanVBc0ROeTdQa25FTVhPb1V5SThkMW5Ta1VPWFVDb182QWJUNkh6WFZnLWhTeHZ3YXBIQkpBS0Z5NmlHTjI3VU5ZZFgzX0c4ams3SThlZl9nbmJ6Y2p4SjgtaEdIMnpuTnUxd1pVeWJ4dGJGZzVycG9kZG04S3VURkcxdTJnMlBOaHVGN0w1QkZiOVFwYWVua2N4MnI3bzhoSlc3YjJRQkNsUFdNSVdVNnFEeGRDUDQwVVJxR3d4akRNVGhvYWxtYUVIVDJUTkZOd3RvSFVlV3V1aE5SN2F5c05JN1ExQ21vYlM1MEZzTWlVVEd2SXdWRnJRTEdXVThrd21hT1ZjLXlhYWFoTXkzNFNzYjZLcWIyTFZmdjZJX0k2NmZRQjNZLThIbl9sR3hUeU1ESlUwWm9uV2ZpQ3p6QVJwWm1LVmhaSG1Nb3BNR3N2VUtHbWtud2tfNEVIRVZHeUNUTXM0VnNxbkNUTXNZWklweFdtcUZmY3pRMFVXeDBLbmNSWUVUR3JHRkZOY0JZRkpkYWlVenFJMENrMFF4VWxtQXNsWWFsaEloVEp4RW5HVkNoYXltQWVTSjR5blBNdVVMX3dvNFRveElrcVY0WERLZzJzSXhxcEhwd2s2UjlCeGdzNFNkQTFCTi03dnF0d3gxOTlUdVd1RmZ6alo0UXo2U2Rtc2JQRzdaYk9pQ3dKZWI2SldfYmF0UG5LM0lKdUZ5WVp4YWxMT0d4ZE5QLUZDOVZ2VlB2bmZQQkRldmNjVXEzcHZJSlNRV1NJNE5RRVhXYVkxenlJMTk1c3lJVmxrNEd3UDY0NkJPdzhiZGtiZUcxZW83SXljLXZnVkNMNExsLTlDMmdYdzlnUjROd2tvQmI4eFlSSEZSdkY5WGlnMkZIbXJPNTdudWhuYUVxcnNVVFhIMGF4N1dfay1PVG01ZkhYNXdVRkdQM2k4RGkwZmtzT0NySHRVZFk4UDdjOEVLX250eWVXeUk5dVh5ODZSN3k1V2pSM1pEVDdQNzVXR05fcGZYNzJqMTd1eVZ1Zk91TTB2MzVCellnN3ZYOVd1T2M4TFpZc1ZSNzVldGtycC1teFpTMDEtUE9ldWEzR3BkVGVXMjdwb3FfT1gzang3YmxUVjJqbGJGbE53T3lQX191TXpTRHNqSjMtNmNfQTNvNWZ2UUZZMzRhb2puYTRrRUJWQmJnbHlmWFRPUlFfM3QxMGM0UzEzR3l1MUI5N2NRakhxTWE1N2pQTWVQTi1FYXhjbVRWVV9mUDNYNEtBZ2NtOGk4cHBzaTd5ZTgzWnZJTUpVbVNSaE5FeDlxUk1lQmJGTWhVd0RreG9lcHlrYU43TW5YcnYyVndBQUFQX181UE96VURrRkFBQT0mcHNpZD0nO307IGlmIChibi5hZGRFdmVudExpc3RlbmVyKSBibi5hZGRFdmVudExpc3RlbmVyKCdjbGljaycsIGNhbGxiYWNrLCBmYWxzZSk7IGVsc2UgaWYgKGJuLmF0dGFjaEV2ZW50KSBibi5hdHRhY2hFdmVudCgnb25jbGljaycsIGNhbGxiYWNrKTsgZWxzZSBibi5vbmNsaWNrID0gY2FsbGJhY2s7IH0gfSkoKTs8L3NjcmlwdD48c2NyaXB0PiB2YXIgaW1wcmVzc2lvblNlc3Npb24gPSAnSDRzSUFBQUFBQUFDXzFSVFBXd2R4UnFkalpOWHZGYzh2UmRFZlFzS2Z1THIyZGxfSW9Rd0lTZ2lKQ0VfU29FbzV0Y1p2SGQzMmRtOWE3dEFFWkZRUkdVNjBxM1BkV0lCRVFJS09sQjBUUmNKS1pjbUx1S0doaFlocFViWHNXVDRpdTg3MzV3cHpobWQtWFNyM1NjQldyNTM2ZDF5dy1ZNVg0cUdkUERpZFZ1b3NuT0RDMWNIUGgzUzA0UHJ0b2pEMDRPMWVhdkhyX3BCT0tRdkRkN1djclZjWXRTbjFLZi00S3l0dFNuWGxnNVkyT3AtNWc4ek9nelowSTlDck5YXzNGM3J3WEVQYXJ4UF9nLXJadl85emJ3UEs2Y29SdC1lMFc2MUthdFRiNDNhbkRkbGpiSGF1VmFzRm1WWFlIUUVUZTNCRkR1SHQxRzZHU0ZmSEVOWjdCdzZRRG5lbmp1QXNETnk3UGtuRU1YT29VeUk4ZDFuU2tVT1hVQ29fNkFiVDZIelhWZy1oU3h2d2FwSEJKQUtGeTZpR04yN1VOWWRYM19HOGprN0k4ZWZfZ25iemNqeEo4LWhHSDJ6bk51MXdaVXlieHRiRmc1cnBvZGRtOEt1VEZHMXUyZzJQTmh1RjdMNUJGYjlRcGFlbmtjeDJyN284aEpXN2IyUUJDbFBXTUlXVTZxRHhkQ1A0MFVScUd3eGpETVRob2FsbWFFSFQyVE5GTnd0b0hVZVd1dWhOUjdheXNOSTdRMUNtb2JTNTBGc01pVVRHdkl3VkZyUUxHV1U4a3dtYU9WYy15YWFhaE15MzRTc2I2S3FiMkxWZnY2SV9JNjZmUUIzWS04SG5fbEd4VHlNREpVMFpvbldmaUN6ekFScFptS1ZoWkhtTW9wTUdzdlVLR21rbndrXzRFSEVWR3lDVE1zNFZzcW5DVE1zWVpJcHhXbXFGZmN6UTBVV3gwS25jUllFVEdyR0ZGTmNCWUZKZGFpVXpxSTBDazBReFVsbUFzbFlhbGhJaFRKeEVuR1ZDaGF5bUFlU0o0eW5QTXVVTF93bzRUb3hJa3FWNFhES2cyc0l4cXBIcHdrNlI5QnhnczRTZEExQk4tN3ZxdHd4MTk5VHVXdUZmempaNFF6NlNkbXNiUEc3WmJPaUN3SmViNkpXX2JhdFBuSzNJSnVGeVlaeGFsTE9HeGROUC1GQzlWdlZQdm5mUEJEZXZjY1VxM3B2SUpTUVdTSTROUUVYV2FZMXp5STE5NXN5SVZsazRHd1A2NDZCT3c4YmRrYmVHMWVvN0l5Yy12Z1ZDTDRMbC05QzJnWHc5Z1I0Tndrb0JiOHhZUkhGUnZGOVhpZzJGSG1yTzU3bnVobmFFcXJzVVRYSDBheDdXX2stT1RtNWZIWDV3VUZHUDNpOERpMGZrc09Dckh0VWRZOFA3YzhFS19udHllV3lJOXVYeTg2Ujd5NVdqUjNaRFQ3UDc1V0dOX3BmWDcyajE3dXlWdWZPdU0wdjM1QnpZZzd2WDlXdU9jOExaWXNWUjc1ZXRrcnAtbXhaUzAxLVBPZXVhM0dwZFRlVzI3cG9xX09YM2p4N2JsVFYyamxiRmxOd095UF9fdU16U0RzakozLTZjX0EzbzVmdlFGWTM0YW9qbmE0a0VCVkJiZ2x5ZlhUT1JRXzN0MTBjNFMxM0d5dTFCOTdjUWpIcU1hNTdqUE1lUE4tRWF4Y21UVlVfZlAzWDRLQWdjbThpOHBwc2k3eWU4M1p2WUFMTkpLVnBFdnRCYXJRZmhFcWFLQTB6RlhNYUJCcU5tOWtUcjEzN0t3QUFfXy1WQno3Vk9RVUFBQT09JzsgdmFyIGFkc0hvc3QgPSAna2V0dGxlZHJvb3Bpbmdjb250aW51YXRpb24uY29tJzsgbmV3IEltYWdlKCkuc3JjID0naHR0cHM6Ly8nICsgYWRzSG9zdCArICcvaW1wci5naWY/c2lkPScgKyBpbXByZXNzaW9uU2Vzc2lvbjs8L3NjcmlwdD4gXAogIGA7CiAgaWYgKHR5cGVvZiBhdEFzeW5jQ29udGFpbmVycyA9PT0gJ29iamVjdCcgJiYgYXRBc3luY0NvbnRhaW5lcnNbJ2JkYmM5N2JhMGYzYWI5OWVlYTk1ZDMzMmM4MmJjMjVmJ10pIHsKICAgIHZhciBjb250YWluZXIsIHNjcmlwdHM7CiAgICBpZiAoY29udGFpbmVyID0gZG9jdW1lbnQuZ2V0RWxlbWVudEJ5SWQoYXRBc3luY0NvbnRhaW5lcnNbJ2JkYmM5N2JhMGYzYWI5OWVlYTk1ZDMzMmM4MmJjMjVmJ10pKSB7CiAgICAgIGNvbnRhaW5lci5pbm5lckhUTUwgPSB0ZW1wbGF0ZTsKICAgICAgc2NyaXB0cyA9IGNvbnRhaW5lci5nZXRFbGVtZW50c0J5VGFnTmFtZSgnc2NyaXB0Jyk7CiAgICAgIGZvciAodmFyIGkgPSAwOyBpIDwgc2NyaXB0cy5sZW5ndGg7IGkrKykgewogICAgICAgIGlmICghIXNjcmlwdHNbaV0uc3JjKSB7CiAgICAgICAgICAoZnVuY3Rpb24ocmF3KSB7CiAgICAgICAgICAgIHZhciBzY3JpcHQgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCdzY3JpcHQnKTsKICAgICAgICAgICAgZm9yICh2YXIgaiA9IDAsIGxlbmd0aCA9IHJhdy5hdHRyaWJ1dGVzLmxlbmd0aDsgaiA8IGxlbmd0aDsgaisrKSB7CiAgICAgICAgICAgICAgc2NyaXB0W3Jhdy5hdHRyaWJ1dGVzW2pdWyduYW1lJ11dID0gcmF3LmF0dHJpYnV0ZXNbal1bJ3ZhbHVlJ107CiAgICAgICAgICAgIH0KICAgICAgICAgICAgcmF3LnBhcmVudE5vZGUucmVwbGFjZUNoaWxkKHNjcmlwdCwgcmF3KTsKICAgICAgICAgIH0pKHNjcmlwdHNbaV0pOwogICAgICAgIH0gZWxzZSB7CiAgICAgICAgICBldmFsKHNjcmlwdHNbaV0uaW5uZXJIVE1MKTsKICAgICAgICB9CiAgICAgIH0KICAgIH0KICB9Cn0pKCk7PC9zY3JpcHQ+PC9ib2R5PjwvaHRtbD4="}},"submit":{"url":{"schema":"http","addr":"aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":0,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-05T22:51:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":7}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.highperformanceformat.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-10-15","domain_rank":366864,"first_seen":"2024-10-23T18:32:34.138968Z","last_seen":"2025-10-27T10:55:45.597474Z","alert_count":3,"request_count":1,"received_data":47273,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"3.74.87.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-26T22:42:22.843604Z","alert_count":0,"request_count":1,"received_data":429,"sent_data":423,"comment":"","tags":null,"fingerprints":null},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2025-10-26T23:38:32.810918Z","alert_count":16,"request_count":4,"received_data":21332,"sent_data":5879,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-10-26T22:42:23.087984Z","alert_count":0,"request_count":1,"received_data":58154,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2025-10-26T22:15:38.172198Z","alert_count":0,"request_count":2,"received_data":152717,"sent_data":845,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"aboutvoiceactors.com","ip":{"addr":"103.195.101.37","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":3,"received_data":330641,"sent_data":1477,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"fc0c2cf7b00240184e7198d47cbcbd38","sha1":"ea3f77fa14e749a568a7fea4b23e265ab87cf1e6","sha256":"a982041f905ac33115ad7f5fac0e45598a6a9e897e5d142f9e93ee21300af002","sha512":"75e1394fd1cac64eefcb1eeff5a5695d3f0bdbb3c172e0eaca6d2db882fa943aca38d69df1ec1344a0456913b410664a1d9b0df1e856168a0825154a760230c3","ssdeep":"","tlshash":"25310a33b5961e7c049310430ced72f04d97476fb1228600898d1874b4a22a1b7c16bd","size":1534,"data":"","first_seen":"2025-10-31T22:51:28.314339Z","last_seen":"2025-10-31T22:51:28.314339Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/bdbc97ba0f3ab99eea95d332c82bc25f/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"170f22059ba85b91ed578e21731a6bcb","sha1":"72ff4ef7c1f5bc6a3145acfdb6c8559c1cda389e","sha256":"d6e40f40b661a8108d08dfdfdb61f6aec69c959bded6c2afce3488fa58d38e2b","sha512":"80fb0263cc5ece0d8143296a52b70083a0adcb388065cd830738686364dde570d02c5771791b4ab5e10bbd0557fabc2783c7c421233a3b6ad983153d58161da5","ssdeep":"768:T5/C6gfHBHuf0gCjEqeJMtQIHKmt2FOcS2TN:TI6gfhHuf0geEqeMQIHKVcSN","tlshash":"7a23f8883fa0f66b07727437126fd11ffa6acc019888cc5cc946e5e92f68b19e536b45","size":46418,"data":"","first_seen":"2025-10-31T22:51:28.310832Z","last_seen":"2025-10-31T22:51:28.310832Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f772bfcfe515eb26f074f8fe47083485","sha1":"bf54cd25783a4aaa913e067980a116285a9e3098","sha256":"7a528f9960b633ee71dbe4c7fdd6eac2de0d08bcc6f0006850764150b9409159","sha512":"29be1ca48efd7e1c1713e64af1512d45c2e697a2e35aabaf93f064a39149ba202727da141ab18de39ce33bd6b39861783f853d23a3a68d40c199bb17c5d91b15","ssdeep":"","tlshash":"11c02bf4c104f7440051dc104cfce30183028d013aad00273fd014350390f029cc136c","size":140,"data":"","first_seen":"2025-10-31T22:51:28.31531Z","last_seen":"2025-12-08T08:27:10.461857Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/highlight.js/11.11.1/highlight.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e43d5372b6165de50a5320cd67559be3","sha1":"b65f6d3a06f8ae06c184e491c8ae237ff2416fd5","sha256":"c4a399dd6f488bc97a3546e3476747b3e714c99c57b9473154c6fb8d259b9381","sha512":"1012f350bf172e5faf6bfcc0b265f04bb67607517d1d41e4670c92fd52b08774bb4ff5349c5e01694dbd10ffd949feb38222316009ca2eee9b27c76aa665f9bb","ssdeep":"1536:1G2dXrpO5M+LyD07rFc7oj/Mx50hzGeCZ9oGxvHuBLYKUAjhaohZdH7gownSZcKb:1GabpaM2rmCwist9rxvOBx97QajGW","tlshash":"1bc33c266cab7d3e8bde51cb389e0400bd98e412f70ccc89f6eede30915541652d7ab9","size":127496,"data":"","first_seen":"2025-04-15T17:22:06.590861Z","last_seen":"2026-04-03T10:56:45.81254Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","size":6461,"data":"","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a9fcc1ab02a0e73b712baf098ec0e63","sha1":"516f5806a6d647fc783f2e7b968fef3708083074","sha256":"d7594b22f7e49d79a9fca742a3c367b479d6849d9709443dfb6533a4abd03de1","sha512":"f3ad81c7f62a1a0526dc5dd39cb8ddb6d57d73779bad6a72c2f3a49d640c7a33907cc96d950bd228af5276b3b3411cad33e9f58932ce010e29f831ab48090711","ssdeep":"","tlshash":"7cc02be4ef04dd3063003d0fdf9623914cc1070b39f24e147e80411465e2a33ac80020","size":145,"data":"","first_seen":"2025-10-31T22:51:28.316243Z","last_seen":"2025-12-08T08:27:10.465347Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7daf8988028b969a6858d7b7e7816890","sha1":"5e18f8406da72942cf1409f8e2fb513014237757","sha256":"66cb55622b7f7abdffebf9c07405d832c9ecbf5c6baeb63d17dddd1e22dd3a9b","sha512":"cd51a8e125b0b21812e6ba1d2255bd342ba05d4ea8ff3eb9f017956d9a8c0eab4b8bbc4c7f2f7f5acbc4f9789d90eacb3dd1fe076941aec6a7988c13d01d965e","ssdeep":"","tlshash":"0b31b92b23f7093551bfa19e736bbb983664019fa182c846361ccf5c6f60e8654f6bc1","size":1833,"data":"","first_seen":"2025-08-11T15:31:56.332465Z","last_seen":"2026-02-20T14:55:24.680219Z","times_seen":33,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"599abe1b662c491a8492f1d369ef6436","sha1":"4ae36bccf7944d3c7db36d760e9ff5d67b5cc5ca","sha256":"9f72639cfda66f122c318b3331a28d2729867ed7fa5a91df793b9ba2406de401","sha512":"ffb23a92d58834dab975b564785ffc34c36472e95ea09f95bf6192e74f6f78d8ae0ff11fa426536ab2d47c84d3edf94b5872e8b86d8a1875142234968bbb2b5b","ssdeep":"","tlshash":"bce0ab2998e706384cf63a481039ca3934f838a0aab3d01b525cc86ccd39fc64c10aec","size":424,"data":"","first_seen":"2025-10-31T22:51:28.317627Z","last_seen":"2025-11-01T13:22:36.411104Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"90f2ea91d4a2edf4dcd919f270729fe9","sha1":"52234cac015b570ffcc0dbdd1d890fdea4795e54","sha256":"ce51cab7cc01ce492e815c1acf2c7683641a79fd7c79b1219084cf2cd126a648","sha512":"54aa5d86bb98390d79ceb6a1d40b23898928b65a0fd3035ee2312054aa4e9b787f5d870779bd38cecbc089e49d8afd577e4f673198cf939c2c366d99962d41a2","ssdeep":"96:B9ozEL4N59bcwglND82ij4p/uOk/759bcwglND82ij4p/61jD6BjCfMEDaH:MztPcwgM2hWOkzPcwgM2hWvWCkCaH","tlshash":"8991f832bd995a385853306b1cbe73b01c53861f7611ce41bd8c65a06f617e06ee5abc","size":4565,"data":"","first_seen":"2025-10-31T22:51:28.318483Z","last_seen":"2025-10-31T22:51:28.318483Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"511923e701f21c263ea426186e66f9ec","sha1":"89fb5f8865ea9a8674796e99d49ec2e1f54b84f2","sha256":"dc5bad3c4b81e276ac08010d2a1170265eb0ed1b97ce861638d041c2c4e41f3f","sha512":"cf8665494f87ff8345eb8061009502c102b5f44880584e4e289c44135f765896472299f49444cd4d9352bbed0856ef90aada727fd9b62123f4062f103b1596ef","ssdeep":"","tlshash":"7131e733b85a2a3888ab7163089d73f00d978b5b621187819c9929a064791e176e5d6d","size":1798,"data":"","first_seen":"2025-10-31T22:51:28.319283Z","last_seen":"2025-10-31T22:51:28.319283Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1298278615550.js?key=bdbc97ba0f3ab99eea95d332c82bc25f\u0026kw=%5B%22unlock%22%2C%22your%22%2C%22aoc%22%2C%22gaming%22%2C%22monitor%22%2C%22osd%22%2C%22settings%22%5D\u0026refer=https%3A%2F%2Faboutvoiceactors.com%2Fblog%2Funlock-your-aoc-gaming-monitor\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=738a7272-80e3-4166-b3d9-469f44f289f0%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.127.244","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:01.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /watch.1298278615550.js?key=bdbc97ba0f3ab99eea95d332c82bc25f\u0026kw=%5B%22unlock%22%2C%22your%22%2C%22aoc%22%2C%22gaming%22%2C%22monitor%22%2C%22osd%22%2C%22settings%22%5D\u0026refer=https%3A%2F%2Faboutvoiceactors.com%2Fblog%2Funlock-your-aoc-gaming-monitor\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=738a7272-80e3-4166-b3d9-469f44f289f0%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aboutvoiceactors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Fri, 31 Oct 2025 22:51:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://aboutvoiceactors.com\r\naccess-control-allow-credentials: true\r\nlocation: https://kettledroopingcontinuation.com/watch.1298278615550.js?dev=e\u0026key=bdbc97ba0f3ab99eea95d332c82bc25f\u0026kw=%5B%22unlock%22%2C%22your%22%2C%22aoc%22%2C%22gaming%22%2C%22monitor%22%2C%22osd%22%2C%22settings%22%5D\u0026pst=1761951121\u0026rb=\u0026refer=https%3A%2F%2Faboutvoiceactors.com%2Fblog%2Funlock-your-aoc-gaming-monitor\u0026res=14.3095\u0026rmtc=t\u0026shu=121fd6a45f0c0627ee13c99f389f6d945eac55f86c8fdcfc19b13a352d6f39ec66dd1072f272c2dda08eda19f0b966be869332ce22d2dad33f8e4dde95854f35679f3c228f240bdf675ad8b2426a3ca72a8a99d1b157ae7fb58dfa\u0026tz=0\u0026uuid=738a7272-80e3-4166-b3d9-469f44f289f0%3A3%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.56GLsPOxxSssW6_XWduz7nI7dlN42PXhUhhMCfCZLkE; expires=Fri, 31 Oct 2025 22:52:01 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 6\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: ff332b3c62e7a955aef4f64109e1b522\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4598,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":688,"timings":{"blocked":286,"dns":1,"connect":92,"send":0,"wait":116,"receive":0,"ssl":190},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1298278615550.js?dev=e\u0026key=bdbc97ba0f3ab99eea95d332c82bc25f\u0026kw=%5B%22unlock%22%2C%22your%22%2C%22aoc%22%2C%22gaming%22%2C%22monitor%22%2C%22osd%22%2C%22settings%22%5D\u0026pst=1761951121\u0026rb=\u0026refer=https%3A%2F%2Faboutvoiceactors.com%2Fblog%2Funlock-your-aoc-gaming-monitor\u0026res=14.3095\u0026rmtc=t\u0026shu=121fd6a45f0c0627ee13c99f389f6d945eac55f86c8fdcfc19b13a352d6f39ec66dd1072f272c2dda08eda19f0b966be869332ce22d2dad33f8e4dde95854f35679f3c228f240bdf675ad8b2426a3ca72a8a99d1b157ae7fb58dfa\u0026tz=0\u0026uuid=738a7272-80e3-4166-b3d9-469f44f289f0%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:01.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /watch.1298278615550.js?dev=e\u0026key=bdbc97ba0f3ab99eea95d332c82bc25f\u0026kw=%5B%22unlock%22%2C%22your%22%2C%22aoc%22%2C%22gaming%22%2C%22monitor%22%2C%22osd%22%2C%22settings%22%5D\u0026pst=1761951121\u0026rb=\u0026refer=https%3A%2F%2Faboutvoiceactors.com%2Fblog%2Funlock-your-aoc-gaming-monitor\u0026res=14.3095\u0026rmtc=t\u0026shu=121fd6a45f0c0627ee13c99f389f6d945eac55f86c8fdcfc19b13a352d6f39ec66dd1072f272c2dda08eda19f0b966be869332ce22d2dad33f8e4dde95854f35679f3c228f240bdf675ad8b2426a3ca72a8a99d1b157ae7fb58dfa\u0026tz=0\u0026uuid=738a7272-80e3-4166-b3d9-469f44f289f0%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aboutvoiceactors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.56GLsPOxxSssW6_XWduz7nI7dlN42PXhUhhMCfCZLkE\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 31 Oct 2025 22:51:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 2247\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://aboutvoiceactors.com\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=738a7272-80e3-4166-b3d9-469f44f289f0:3:1; expires=Fri, 07 Nov 2025 22:51:01 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sat, 01 Nov 2025 22:51:01 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sat, 01 Nov 2025 22:51:01 GMT; path=/; secure; SameSite=None\npdhtkv5=true; expires=Sat, 01 Nov 2025 22:51:01 GMT; path=/; secure; SameSite=None\nuncs5=1; expires=Sat, 01 Nov 2025 22:51:01 GMT; path=/; secure; SameSite=None\nu_pl27711536=1; expires=Sat, 01 Nov 2025 22:51:01 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 17\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 1619e05bf3a092895f9f6aa123845bb1\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4598,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3722)","md5":"4830d0a263bb9c297235041e09f2c68f","sha1":"0627a247560e4226f4600882c4c5e0bd2951e98b","sha256":"f528227da4dd0b0fb71eb4a3eeccb8f9c78452509e912a74bf767d775f3c19d5","sha512":"65a258fb19ad33588ee1655326df646847ce9866c48e097d1fd4a5f977853b36b6221e2d083736c4f435829705de995555d212309118e3098e5820dd6293556f","ssdeep":"96:Q9ozEL4N59bcwglND82ij4p/uOk/759bcwglND82ij4p/61ZD6BjCfMEDaH:nztPcwgM2hWOkzPcwgM2hWVWCkCaH","tlshash":"e6910833bd955a3c5453306b1cbe73b01c53861f3211ce41bd8c65a06f617a06ee5abc","first_seen":"2025-10-31T22:51:28.305929Z","last_seen":"2025-10-31T22:51:28.305929Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/3d/d9/64/3dd9642c1a0f0ea8ecb87c4f08ab4e35/1756656449.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:02.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/3d/d9/64/3dd9642c1a0f0ea8ecb87c4f08ab4e35/1756656449.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 22:51:02 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 57804\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:07:29 GMT\r\netag: \"68b47341-e1cc\"\r\nexpires: Sun, 02 Nov 2025 22:51:02 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57804,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 12:01:08], progressive, precision 8, 300x250, components 3","md5":"824db83fb47e0a4aa226db9a9466c8fb","sha1":"7e968550f726c370b806345e6a8b553c16532e62","sha256":"a6d919f12896285dffac6679aa238ff266d0df399bd91d53008571218bdcf6e1","sha512":"1dd3fe4d4ce6f2139f9ef18284437c08b2a360ccd46fc702d1a6802d728e18f8ca0245dd68936a6ceaac02c3cb4628bc21939516b6f9414a54f90b425648aa4e","ssdeep":"768:LA3DDT+b75AiF3DDT+b75K22YyqwsZmXRPpB+8mwvecNaeJKY2YtWImlYwaVJesk:LA3DDCPX3DDCP022p36wv+S5pnJeb","tlshash":"2043d024db51ad33ece4b5b1edd1ebe76311ae547b136d447c6c28a43b703884a6e203","first_seen":"2025-09-02T17:46:38.163709Z","last_seen":"2026-04-03T17:23:29.916273Z","times_seen":961,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":93,"dns":20,"connect":19,"send":0,"wait":23,"receive":41,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/highlight.js/11.11.1/highlight.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:00.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/highlight.js/11.11.1/highlight.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 22:51:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 37714\r\ncf-ray: 9976b6f20b2f4c11-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"676c489d-9352\"\r\nlast-modified: Wed, 25 Dec 2024 18:02:05 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1384508\r\nexpires: Wed, 21 Oct 2026 22:51:00 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=WxtbA6q%2FZabHg%2FC9NKio0HrZV%2FUBq769EY%2BUiG3dmcDHqHy1EE6W32eS5c5u9FlZ1f47Iu%2Bjx8LYDRWVjZzm8KSKDJ4jo%2BsKZ3WG7LSREomnRmozgZSLz54B4fPEbYbp9ijCqrY9\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127496,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11260)","md5":"e43d5372b6165de50a5320cd67559be3","sha1":"b65f6d3a06f8ae06c184e491c8ae237ff2416fd5","sha256":"c4a399dd6f488bc97a3546e3476747b3e714c99c57b9473154c6fb8d259b9381","sha512":"1012f350bf172e5faf6bfcc0b265f04bb67607517d1d41e4670c92fd52b08774bb4ff5349c5e01694dbd10ffd949feb38222316009ca2eee9b27c76aa665f9bb","ssdeep":"1536:1G2dXrpO5M+LyD07rFc7oj/Mx50hzGeCZ9oGxvHuBLYKUAjhaohZdH7gownSZcKb:1GabpaM2rmCwist9rxvOBx97QajGW","tlshash":"1bc33c266cab7d3e8bde51cb389e0400bd98e412f70ccc89f6eede30915541652d7ab9","first_seen":"2025-04-15T17:22:06.590861Z","last_seen":"2026-04-03T10:56:45.81254Z","times_seen":140,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":63,"dns":19,"connect":2,"send":0,"wait":14,"receive":3,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/KaTeX/0.16.9/katex.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:00.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 17 Sep 2025 19:09:23 GMT","end":"Tue, 16 Dec 2025 20:08:48 GMT"},"fingerprint":{"sha1":"E5:FA:6E:21:DA:AB:92:8F:E0:CB:31:C2:87:D4:E2:CE:9F:23:BF:C1","sha256":"E8:C7:D4:A8:29:E6:45:C0:C5:E3:AD:6A:90:36:30:4A:D7:2E:7C:F7:8F:57:44:E8:3B:2D:AF:F6:80:F7:4B:46"}}},"request":{"raw":"GET /ajax/libs/KaTeX/0.16.9/katex.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 22:51:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 2797\r\ncf-ray: 9976b6f21b404c11-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"651b4556-aed\"\r\nlast-modified: Mon, 02 Oct 2023 22:33:58 GMT\r\ncf-cdnjs-via: cfworker/kv\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 236493\r\nexpires: Wed, 21 Oct 2026 22:51:00 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=v393ugrmritcEVjMgDowbO90eeJ%2BuwlW6A73CsWdv0HurYxLsSTSL3i9EpvmlRUPJDrmD%2BIy5OXwmYkqwdiyGdP0hZejcpoIUsldNq2a0gcZ6HWHOEIgJAy66GL7Un%2FBJOb1e3Go\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23196,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23195)","md5":"1612bcd72cc503f18e2f302b3a2addd1","sha1":"94edbc490693da7f3ce048546ed3b790d8810247","sha256":"505d5f829022bb7b4f24dfee0aa1141cd7bba67afe411d1240335f820960b5c3","sha512":"7c7c1a59e6eec00ecd485e5083f69fe14783c7d5ea52962938682e6e8df25aef9bd88411e14790c1b6f8d938bb81502336d56823f23d4c4a187aef689b0702ea","ssdeep":"192:FbM9ll0weFl1zkMPgefBEALkLiqRd2s3cnNlsBRrUco7lcCSjyXR:SckMPgefBEA4LiqRd2s3cnNU5o5Oy","tlshash":"d7a23b0bb39a2b13b95d4d39b09b23f029952a1cf211c553a5ac92618cd2c7f059fbfd","first_seen":"2023-10-23T11:02:36Z","last_seen":"2026-04-03T18:01:29.30083Z","times_seen":669,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":66,"dns":21,"connect":6,"send":0,"wait":12,"receive":1,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aboutvoiceactors.com/favicon.ico","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:01.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aboutvoiceactors.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 06:21:16 GMT","end":"Wed, 21 Jan 2026 06:21:15 GMT"},"fingerprint":{"sha1":"AE:EF:1C:9D:E0:B4:35:73:00:1B:58:9A:97:FA:79:D6:68:E6:64:5A","sha256":"AA:53:4D:4A:70:79:C5:6E:B0:F4:A3:71:31:3B:6E:5C:CA:30:C1:89:F4:4A:18:02:D9:9B:8F:6B:49:03:BE:75"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aboutvoiceactors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=738a7272-80e3-4166-b3d9-469f44f289f0%3A3%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Oct 2025 22:51:01 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 285478\r\nConnection: keep-alive\r\nContent-Security-Policy: default-src 'self' https:;style-src 'self' 'unsafe-inline' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;img-src 'self' data: https:;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none'\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 0\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=0\r\nLast-Modified: Tue, 21 Oct 2025 22:00:55 GMT\r\nETag: W/\"45b26-19a08ca2169\"\r\nX-Served-By: aboutvoiceactors.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":285478,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 4 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"dd03b32a498d10416f48197ba7d36287","sha1":"dee7a9ebe2a8d27d745aa6e9d6cfb9e4fd52e08a","sha256":"094f1199aa7a2722c03bc392fec7920edf93cf69886d0802424259340779e9db","sha512":"d020abb27842336e0fdd33f9671cf424f95510023a20e537f3d4ce063e49764ccf6c32ec5f2456d17715636939dec03ac976acf871ab0ef01afc7e631eb449bf","ssdeep":"768:FwMOMUoRyl5nVYhEMY0urW6JV8DQBvmn0nTb2x0QGOwdrizg7m+yX3+XybJuOA7w:r","tlshash":"cd54410c5d39206dea8c9bb7d511ed8bce7ba2e0ed5105c740458ee37927c71fa631a2","first_seen":"2025-10-31T22:51:28.308983Z","last_seen":"2025-11-08T04:11:23.363302Z","times_seen":3,"resource_available":false,"data":null}},"time_used":661,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":257,"receive":404,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1RTPWwdxRqdjZNXvFc8vRdEfQsKfuLr2dl_IoQwISgiJCE_SoEo5tcZvHd32dm9a7tAEZFQRGU60q3PdWIBEQIKOlB0TRcJKZcmLuKGhhYhpUbXsWT4iu8735wpzhmd-XSr3ScBWr536d1yw-Y5X4qGdPDidVuosnODC1cHPh3S04PrtojD04O1eavHr_pBOKQvDd7WcrVcYtSn1Kf-4KyttSnXlg5Y2Op-5g8zOgzZ0I9CrNX_3F3rwXEParxP_g-rZv_9zbwPK6coRt-e0W61KatTb43anDdljbHauVasFmVXYHQETe3BFDuHt1G6GSFfHENZ7Bw6QDnenjuAsDNy7PknEMXOoUyI8d1nSkUOXUCo_6AbT6HzXVg-hSxvwapHBJAKFy6iGN27UNYdX3_G8jk7I8ef_gnbzcjxJ8-hGH2znNu1wZUybxtbFg5rpoddm8KuTFG1u2g2PNhuF7L5BFb9Qpaenkcx2r7o8hJW7b2QBClPWMIWU6qDxdCP40URqGwxjDMThoalmaEHT2TNFNwtoHUeWuuhNR7aysNI7Q1CmobS50FsMiUTGvIwVFrQLGWU8kwmaOVc-yaaahMy34Ssb6Kqb2LVfv6I_I66fQB3Y-8Hn_lGxTyMDJU0ZonWfiCzzARpZmKVhZHmMopMGsvUKGmknwk_4EHEVGyCTMs4VsqnCTMsYZIpxWmqFfczQ0UWx0KncRYETGrGFFNcBYFJdaiUzqI0Ck0QxUlmAslYalhIhTJxEnGVChaymAeSJ4ynPMuUL_wo4ToxIkqV4XDKg2sIxqpHpwk6R9Bxgs4SdA1BN-7vqtwx199TuWuFfzjZ4Qz6SdmsbPG7ZbOiCwJeb6JW_batPnK3IJuFyYZxalLOGxdNP-FC9VvVPvnfPBDevccUq3pvIJSQWSI4NQEXWaY1zyI195syIVlk4GwP646BOw8bdkbeG1eo7Iyc-vgVCL4Ll-9C2gXw9gR4NwkoBb8xYRHFRvF9Xig2FHmrO57nuhnaEqrsUTXH0ax7W_k-OTm5fHX5wUFGP3i8Di0fksOCrHtUdY8P7c8EK_ntyeWyI9uXy86R7y5WjR3ZDT7P75WGN_pfX72j17uyVufOuM0v35BzYg7vX9WuOc8LZYsVR75etkrp-mxZS01-POeua3GpdTeW27poq_OX3jx7blTV2jlbFlNwOyP__uMzSDsjJ3-6c_A3o5fvQFY34aojna4kEBVBbglyfXTORQ_3t10c4S13Gyu1B97cQjHqMa57jPMePN-EaxcmTVU_fP3X4KAgcm8i8ppsi7ye83ZvYALNJKVpEvtBarQfhEqaKA0zFXMaBBqNm9kTr137KwAA__-VBz7VOQUAAA==","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:02.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTPWwdxRqdjZNXvFc8vRdEfQsKfuLr2dl_IoQwISgiJCE_SoEo5tcZvHd32dm9a7tAEZFQRGU60q3PdWIBEQIKOlB0TRcJKZcmLuKGhhYhpUbXsWT4iu8735wpzhmd-XSr3ScBWr536d1yw-Y5X4qGdPDidVuosnODC1cHPh3S04PrtojD04O1eavHr_pBOKQvDd7WcrVcYtSn1Kf-4KyttSnXlg5Y2Op-5g8zOgzZ0I9CrNX_3F3rwXEParxP_g-rZv_9zbwPK6coRt-e0W61KatTb43anDdljbHauVasFmVXYHQETe3BFDuHt1G6GSFfHENZ7Bw6QDnenjuAsDNy7PknEMXOoUyI8d1nSkUOXUCo_6AbT6HzXVg-hSxvwapHBJAKFy6iGN27UNYdX3_G8jk7I8ef_gnbzcjxJ8-hGH2znNu1wZUybxtbFg5rpoddm8KuTFG1u2g2PNhuF7L5BFb9Qpaenkcx2r7o8hJW7b2QBClPWMIWU6qDxdCP40URqGwxjDMThoalmaEHT2TNFNwtoHUeWuuhNR7aysNI7Q1CmobS50FsMiUTGvIwVFrQLGWU8kwmaOVc-yaaahMy34Ssb6Kqb2LVfv6I_I66fQB3Y-8Hn_lGxTyMDJU0ZonWfiCzzARpZmKVhZHmMopMGsvUKGmknwk_4EHEVGyCTMs4VsqnCTMsYZIpxWmqFfczQ0UWx0KncRYETGrGFFNcBYFJdaiUzqI0Ck0QxUlmAslYalhIhTJxEnGVChaymAeSJ4ynPMuUL_wo4ToxIkqV4XDKg2sIxqpHpwk6R9Bxgs4SdA1BN-7vqtwx199TuWuFfzjZ4Qz6SdmsbPG7ZbOiCwJeb6JW_batPnK3IJuFyYZxalLOGxdNP-FC9VvVPvnfPBDevccUq3pvIJSQWSI4NQEXWaY1zyI195syIVlk4GwP646BOw8bdkbeG1eo7Iyc-vgVCL4Ll-9C2gXw9gR4NwkoBb8xYRHFRvF9Xig2FHmrO57nuhnaEqrsUTXH0ax7W_k-OTm5fHX5wUFGP3i8Di0fksOCrHtUdY8P7c8EK_ntyeWyI9uXy86R7y5WjR3ZDT7P75WGN_pfX72j17uyVufOuM0v35BzYg7vX9WuOc8LZYsVR75etkrp-mxZS01-POeua3GpdTeW27poq_OX3jx7blTV2jlbFlNwOyP__uMzSDsjJ3-6c_A3o5fvQFY34aojna4kEBVBbglyfXTORQ_3t10c4S13Gyu1B97cQjHqMa57jPMePN-EaxcmTVU_fP3X4KAgcm8i8ppsi7ye83ZvYALNJKVpEvtBarQfhEqaKA0zFXMaBBqNm9kTr137KwAA__-VBz7VOQUAAA== HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.56GLsPOxxSssW6_XWduz7nI7dlN42PXhUhhMCfCZLkE; uid_id2=738a7272-80e3-4166-b3d9-469f44f289f0:3:1; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1; u_pl27711536=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 31 Oct 2025 22:51:02 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\nvary: Origin\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 4811cace4337fb3827e83d9e3ef895b6\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-03T18:31:03.533086Z","times_seen":13299059,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T22:50:59.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aboutvoiceactors.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 06:21:16 GMT","end":"Wed, 21 Jan 2026 06:21:15 GMT"},"fingerprint":{"sha1":"AE:EF:1C:9D:E0:B4:35:73:00:1B:58:9A:97:FA:79:D6:68:E6:64:5A","sha256":"AA:53:4D:4A:70:79:C5:6E:B0:F4:A3:71:31:3B:6E:5C:CA:30:C1:89:F4:4A:18:02:D9:9B:8F:6B:49:03:BE:75"}}},"request":{"raw":"GET /blog/unlock-your-aoc-gaming-monitor HTTP/1.1\r\nHost: aboutvoiceactors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Oct 2025 22:51:00 GMT\r\nContent-Type: text/html; charset=utf-8\r\nContent-Length: 10952\r\nConnection: keep-alive\r\nContent-Security-Policy: default-src 'self' https:;style-src 'self' 'unsafe-inline' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;img-src 'self' data: https:;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none'\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 0\r\ncontent-encoding: gzip\r\nCache-Control: public, max-age=86400, s-maxage=86400, immutable\r\nETag: W/\"2ac8-CPZxpMndfUgSjW9Caz+hOgaj0jg\"\r\nX-Served-By: aboutvoiceactors.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]}],"data":{"size":35026,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6527), with CRLF, LF line terminators","md5":"780c590f6b59c0d6b2ccf218085b3e06","sha1":"aa66557cb0d14cb60e74f790deadeeaa4618903a","sha256":"4c3232903332b83f499800dfb9c2213987f9a37311280dfc65ed9b3e7082b1b2","sha512":"37b6ba23c6684ac8313f02a142fd21437adba1158705f2de429073f25f63189682377908cdb41991a6b2870486f271c093ff908b4f848517c39707512650db70","ssdeep":"768:TYAYv4mKlMq4f4z4WstDMav4bmVBmlsgUv9CSEcSLSag4R:TYAYYgA8WstIaImSegBSag4R","tlshash":"9bf20c1fe2e4123a153381a5a599b7d9ff108057e391069578afe37c2fb3da24233ad4","first_seen":"2025-10-31T22:51:28.309974Z","last_seen":"2025-10-31T22:51:28.309974Z","times_seen":1,"resource_available":false,"data":null}},"time_used":849,"timings":{"blocked":297,"dns":24,"connect":128,"send":0,"wait":254,"receive":1,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.highperformanceformat.com/bdbc97ba0f3ab99eea95d332c82bc25f/invoke.js","fqdn":"www.highperformanceformat.com","domain":"highperformanceformat.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:00.752Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"highperformanceformat.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Oct 2025 22:02:13 GMT","end":"Thu, 08 Jan 2026 22:02:12 GMT"},"fingerprint":{"sha1":"77:A0:FB:EB:5C:7E:49:7D:87:94:CB:C5:AB:72:11:AE:6F:98:F7:81","sha256":"A3:92:D0:6C:23:66:83:18:50:AC:6C:E2:27:1F:6A:82:CE:FC:2B:6B:7E:B7:B3:EA:B9:6A:56:B2:EC:04:AF:40"}}},"request":{"raw":"GET /bdbc97ba0f3ab99eea95d332c82bc25f/invoke.js HTTP/1.1\r\nHost: www.highperformanceformat.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 31 Oct 2025 22:51:01 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18472\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: www.highperformanceformat.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: df47f12a15f71b5c5f3b92b4c33c9807\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46418,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46418), with no line terminators","md5":"170f22059ba85b91ed578e21731a6bcb","sha1":"72ff4ef7c1f5bc6a3145acfdb6c8559c1cda389e","sha256":"d6e40f40b661a8108d08dfdfdb61f6aec69c959bded6c2afce3488fa58d38e2b","sha512":"80fb0263cc5ece0d8143296a52b70083a0adcb388065cd830738686364dde570d02c5771791b4ab5e10bbd0557fabc2783c7c421233a3b6ad983153d58161da5","ssdeep":"768:T5/C6gfHBHuf0gCjEqeJMtQIHKmt2FOcS2TN:TI6gfhHuf0geEqeMQIHKVcSN","tlshash":"7a23f8883fa0f66b07727437126fd11ffa6acc019888cc5cc946e5e92f68b19e536b45","first_seen":"2025-10-31T22:51:28.310832Z","last_seen":"2025-10-31T22:51:28.310832Z","times_seen":1,"resource_available":true,"data":null}},"time_used":769,"timings":{"blocked":287,"dns":13,"connect":93,"send":0,"wait":97,"receive":91,"ssl":185},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"www.highperformanceformat.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aboutvoiceactors.com/image?q=Unlock%20Your%20AOC%20Gaming%20Monitor%20OSD%20Settings","fqdn":"aboutvoiceactors.com","domain":"aboutvoiceactors.com","tld":"com"},"ip":{"addr":"103.195.101.37","port":443,"asn":23470,"as":"RELIABLESITE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:00.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aboutvoiceactors.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 23 Oct 2025 06:21:16 GMT","end":"Wed, 21 Jan 2026 06:21:15 GMT"},"fingerprint":{"sha1":"AE:EF:1C:9D:E0:B4:35:73:00:1B:58:9A:97:FA:79:D6:68:E6:64:5A","sha256":"AA:53:4D:4A:70:79:C5:6E:B0:F4:A3:71:31:3B:6E:5C:CA:30:C1:89:F4:4A:18:02:D9:9B:8F:6B:49:03:BE:75"}}},"request":{"raw":"GET /image?q=Unlock%20Your%20AOC%20Gaming%20Monitor%20OSD%20Settings HTTP/1.1\r\nHost: aboutvoiceactors.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: openresty\r\nDate: Fri, 31 Oct 2025 22:51:00 GMT\r\nContent-Type: image/jpeg\r\nContent-Length: 5482\r\nConnection: keep-alive\r\nContent-Security-Policy: default-src 'self' https:;style-src 'self' 'unsafe-inline' https:;script-src 'self' 'unsafe-inline' 'unsafe-eval' https:;img-src 'self' data: https:;base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none'\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: same-origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nX-DNS-Prefetch-Control: off\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Permitted-Cross-Domain-Policies: none\r\nX-XSS-Protection: 0\r\nContent-Encoding: gzip\r\nCache-Control: public, max-age=31536000, immutable\r\nETag: W/\"156a-ydWzbSoVYl73ES9lUrqRAhnpD7U\"\r\nX-Served-By: aboutvoiceactors.com\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenResty","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7181,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x300, components 3","md5":"74ceed48d9cccfa1c701d3a066940294","sha1":"0868e76d0605b10062f9a0eaee08a193e3857d26","sha256":"3e63722384ba2e7195c2ae36676e540f0d1e19a0c1814ae5969f1c604221d2d8","sha512":"7b3a67c7bdff0342693e55365890f0107c25a99793e5f8a5c847d3b55f9dbe9dfa27ecaab07647d405df4afcd637828294dfb099406b2fa06a11412b73c61f45","ssdeep":"192:LG2fCDOK84BUhvniv2B0nRce8oPyEDFCXI:S2fOOKt8vniv/nSenP3CXI","tlshash":"66e1f91ba906cf934f44cba93f5b26a29f21129d32c072ed766346279f50fb9489e40c","first_seen":"2025-10-31T22:51:28.311578Z","last_seen":"2025-10-31T22:51:28.311578Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":133,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:01.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Oct 2025 22:01:12 GMT","end":"Sat, 24 Jan 2026 22:01:11 GMT"},"fingerprint":{"sha1":"15:FA:E2:08:0A:F1:68:03:29:64:51:B0:FA:3B:8E:DD:DC:B7:CD:01","sha256":"F8:EA:EA:FF:5A:CA:9D:E1:82:F0:8C:3C:7C:6B:FB:06:8F:72:6C:0E:64:EF:7B:3B:2B:21:25:C2:25:7D:0C:BD"}}},"request":{"raw":"GET /1b/50/e5/1b50e57a5911fd0a5b46962ab48ca22b.js HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Fri, 31 Oct 2025 22:51:01 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 3422\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 6d034272a1bcf90128752d04e2d9b693\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6461,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6461), with no line terminators","md5":"26ce7791f08fb671816e8ac15c21abcc","sha1":"cd121446322214f9ee849fadd1686452f9acf3a9","sha256":"e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d","sha512":"01af678dd36e5bcfaf95c43fee3d7ac605299c1aca9187b5b330dffac03c16910e373e8ccb57e00c66810daff06b475d561370c05abe8a3beb00f5f9f950c409","ssdeep":"96:PKheeIZELV3rtYwDxXvH9VLgjY6oB/rCKTQ3l35AcOrzYdOtkiz9u5Z4tTpfn7:Pbj6VbjxXvw8zTCKTvlSQpfn7","tlshash":"b9d185883e81f0d513a3b5779a3f6549b3ad6814549fd804e107a0d03e2ce2ae97b6a5","first_seen":"2025-10-22T08:34:06.793976Z","last_seen":"2025-12-01T10:40:04.095127Z","times_seen":3160,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":313,"dns":30,"connect":92,"send":0,"wait":95,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"3.74.87.185","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://aboutvoiceactors.com/blog/unlock-your-aoc-gaming-monitor","date":"2025-10-31T22:51:01.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://aboutvoiceactors.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 22:51:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://aboutvoiceactors.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=738a7272-80e3-4166-b3d9-469f44f289f0:3:1; expires=Mon, 29 Oct 2035 22:51:01 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"44b9bfa92c40f61f3485efbbed1ce72f","sha1":"c7e87f895881b843df5ca76ec76af35ba959c01c","sha256":"1561d75f7836e7aba9306ec0b570b71d87d054605e17ae9449e2047dc571a88b","sha512":"ea43373e0b52b06048fe417ca42238027cde4ade1b61cb29fb4f8f83b8bba9ec62a71c02be8b8d3b2a7b19deba9533c3bdb664956d79adeb628644b9dbe71637","ssdeep":"","tlshash":"c490040441fd10d00f0d045f0dc133cc7d55d417c41111150713f430d044d0c4470c07","first_seen":"2025-10-31T22:51:28.313287Z","last_seen":"2025-10-31T22:51:28.313287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":103,"dns":24,"connect":21,"send":0,"wait":22,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}