{"report_id":"1d8ed1d7-024b-461c-84d5-be7d35af3605","version":0,"status":"done","tags":[],"date":"2026-10-07T05:52:13Z","url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"172.67.204.197","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"title":"Fortune Tiger OX Mouse PG - Apps no Google Play","dom":{"size":124811,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2308)","md5":"cfa694a185472a6fe54786e25ea9a78d","sha1":"34b0fbf25501872e215547c2cd07746b46c98b8c","sha256":"4024607f3feab5bebf77b7ec9acd4f80eb52996f5224bace0b905415bc98dc47","sha512":"e849b414aa6ec67891f44556cadb437be029db6899a7fb58e2ef7ecbc37e5bb72203b6b65ec6494a1040b9ed24a090f10ed51722228a1fe504cc8a48ccaa0c12","ssdeep":"1536:2BDQjcmaeQeOeueceMpJQJGP8JF5h5aquLvE5/SiWiVrbvENm1wM8gYkU2h:2Kjcmma2Lc5hrbsNmlU2h","tlshash":"eec3b7a5719d2c3b401353c6bd20679d70af4d78d82950a6bbf727a123eeca0b847357","dom_hash":"domhash5be5d3d3fab5fff8186d4d23698dee9f","first_seen":"2026-10-07T05:33:10.976802Z","last_seen":"2026-10-07T05:52:17.710252Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"172.67.204.197","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T05:52:13Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"googleepkay.com","ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-12-27","domain_rank":0,"first_seen":"2025-11-14T12:39:33.833212Z","last_seen":"2026-10-07T05:33:08.44937Z","alert_count":110,"request_count":22,"received_data":5531583,"sent_data":11331,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7752eabefa6909291522ccd2ef0f23c8","sha1":"d48cb280ca0dd21b4949f203e5a094986e5654f4","sha256":"0de37ef2fab573ad88dd9534278458b329070c21c71f2f8b32f86391cae9132a","sha512":"c7f29555982230c8f7f4198d76c28149d00aa8bdd6a35796897d68f2f98990bdb7b3d697851c5bbd9b6c7a988c4d3b0983163f25d5fbda9a8367ce64046ab51e","ssdeep":"","tlshash":"b4f081553f8ef09e0fe4b06eeb379d9e213c6a8061504d12ae94c028309085e4dd6d8c","size":602,"data":"","first_seen":"2026-10-07T05:33:11.020558Z","last_seen":"2026-10-07T05:52:17.733102Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c6ad7f5df849821fe148346ce6dc66","sha1":"12921d9a0d2e44808eee05cc115b51c77624fd8f","sha256":"64fc4f78a2c20dc4cd9df672a8f0111a180e65f88df479376593382446f9ed56","sha512":"28fdf8b4e18843be6dcc807473623afcbb21161a50fd5a4815cf190284b3267e8acaf9034e3ad4513cd46adbc6b891dfa2d429dbdf38b1406cacff4821c7d488","ssdeep":"","tlshash":"ba21be2467ed051d8216b559b5bfff8c723c6031a5e08c0dad1ce079047adbed2e992b","size":1191,"data":"","first_seen":"2026-10-07T05:33:11.022855Z","last_seen":"2026-10-07T05:52:17.734154Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c3f0f080d2be453545ee757cfafd6a4","sha1":"1cefb10b81ec89edb6bf8a941338b103b981abf0","sha256":"b1d2c6876907637e8e52f93fa7ab86de399b2d5c8802f04ba839e0df7fd68ff8","sha512":"dd6c6502d2b79d4eeaf63cf0dbbb8d53c3fd10156f994b34fec2a9607aa4848c47ed06aba758bc210e0cabcfae83e48b6a299a174a9842694077ac0aa77c88a6","ssdeep":"","tlshash":"0231ae96eb4e19a6c25d707b8e3b92cd30bc403a2c050cafbd08e5605479cae52aed64","size":1685,"data":"","first_seen":"2026-10-07T05:33:11.025219Z","last_seen":"2026-10-07T05:52:17.735222Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"370493be283463daee94529e99429d02","sha1":"4413d2375008adc1d3fb3c5320b9400f4890e69c","sha256":"5e588e2659c7094aa5c8bbc60f3b5522202500a3975e0cf386b0774769a4ecc0","sha512":"1d8c18fda064fd034881d569c1bfbc289be79ece533050b3d8aee724d16a14171bba75df9dbbbf33e33ed7cf584b8d33873566b0c5d0beb6450c53d5bd1397e2","ssdeep":"","tlshash":"9fb092c36a57183145ef567f662092483824e3a32c12a8408c9c2d208021ac6c8ebb65","size":123,"data":"","first_seen":"2026-10-07T05:33:11.027435Z","last_seen":"2026-10-07T05:52:17.736269Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-07T08:40:53.185225Z","times_seen":447126,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/config.js","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60e6158797463200c3375c89cf14a9bb","sha1":"5c3f0eb595f8921b71a5fbf6bcc13961278cec2b","sha256":"39d0410b039c6b17da1720a7ef1092eb9bf3bcc760ab292264cfeb4760601e84","sha512":"6fa7921119ce33b556bdbb2ce313fd987799374ba6583aca666ffe56c51fa804d9feb4b25a1d2dfb1adf8bbf6ce493b2716cc4a58218b761b88975b8460ab7af","ssdeep":"","tlshash":"3011e15845c0291f4b1703b2b7ca86035d880555243bd99388a76e9aa63e4429085722","size":949,"data":"","first_seen":"2025-11-14T12:39:40.62098Z","last_seen":"2026-10-07T05:52:17.726195Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"static/download/KEBETCOM.apk","filename":"https://googleepkay.com/","line_number":106,"column_number":12}]},"http":[{"url":{"schema":"https","addr":"googleepkay.com/","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T05:51:41.861Z","timestamp":1791352301861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: text/html\r\nlast-modified: Sun, 25 Feb 2024 12:58:31 GMT\r\nstrict-transport-security: max-age=0\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FdA5pQp0EkPznzzfiIzDZp5LzDaJMKzFVbeBe7zpBBHe3xcl0498McKzkSDEqs0kU6VC65uYzjkV8P8vj0TlMi1kZebKKXo8zyGs21fagzxbHomHI6A51hK2uxqFNkAhhnM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a46aa2aed92a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":141140,"size_decoded":23706,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2240)","md5":"847d839220b7ee4ea9273c6e038f039b","sha1":"cbc97c12b59fea1b004ed5f0a4922d6bd95a39d3","sha256":"4d0009c713c19bcd3ab6088d0d74fdf33332d41fd29e38229c05448f48802d43","sha512":"9ad4f1ebd4c955c3a420a4530c837819618f4929bb3c1474f9f863446b0f94daf8d26cf72bfe9cdfe4f07125ac618e7f6cbce5a9d64cb30254eb45d43a742bcf","ssdeep":"1536:eSDQjcmJe2eqeWepeDa8YgzFRtI0uVRS1Ea9jF+Wa+SMNvTQc3uTVX1Qn8P:e/jcmFC+E6jYMN7Qcpn8P","tlshash":"90d383a4629d3c3f401353cab965975a71ef8d78d83600e7fafb16a112eeca0b447217","first_seen":"2026-10-07T05:52:17.713384Z","last_seen":"2026-10-07T05:52:17.713384Z","times_seen":1,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":-1,"dns":9,"connect":17,"send":0,"wait":411,"receive":187,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/icon.png","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.565Z","timestamp":1791352302565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/icon.png HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 18 Mar 2024 11:33:44 GMT\r\npriority: u=5,i\r\netag: \"65f82698-20cd6\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ylbMDyAIby58wAax6vYduB0x%2FzrQKSrP6aTJbsw8mi8ZYOlxKXAbueNuFMsA4SkTsIjOZlXNd0aCOBSUFnkfrd8gOyM9RJ0%2B2EQ2%2FwF8a70ecTo4%2BbKis3i1aW6uga4ArfM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b30a313181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134358,"size_decoded":135141,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"78151e3be290bce7a4c56d2ad4dbf58c","sha1":"7d4cfccf827ff3ae607aad249e1f7f83653759bb","sha256":"61b2ce42b317f7cbc7a924f9cb91c5b7447b0733397b342e511bc0d1b7418571","sha512":"b14b173200bd266f78c8e05fc4db0896c52ee02567ab0d71c064b5f86dc06e68efda9e1302f2bad68e67501699e3a2c515ab580b16493cc8d80dc04665ac7af3","ssdeep":"3072:yP72eRbynMS2COSTNGVHCBb9GlSl6nPTPRcrR:yP7hbC2C9TIVHCV9GslmVc","tlshash":"67d3024e0db196fad6e43b3743b8ea019b74f86943efb7cd42459c28c6109e47911de8","first_seen":"2025-11-14T12:39:40.631464Z","last_seen":"2026-10-07T05:52:17.716174Z","times_seen":4,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/age.png","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.567Z","timestamp":1791352302567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/age.png HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 02 Dec 2023 04:01:28 GMT\r\npriority: u=5,i\r\netag: \"656aac18-e4\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLyJCzwM3sdkcU6kV9Ud5ZNDaEK%2FtVEMzdCDFaGV4SvqRojK7G5in8569dTLfqRhzxknoyvOuVgWXPJUtw%2Fg8fIzbRb65TnpsyJHO%2BwHUkg0eu7J%2FqWKQgjXRR%2B0VALLdZI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b30a363181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 228\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":228,"size_decoded":1007,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"b8b45df6624171547ebb68fd69a2ab78","sha1":"f1dd6e720d5fce22b265653f14582ffbe038aef0","sha256":"e4b1ce0c905d286bf6fa7671eb24e9001fe802e04f4445da44a6b03a7cc04534","sha512":"f230f6696dff9d4773a6709e136f9b7be63ce570d74088d12d5abfb07c483e4c74d1b04ce8d388ad6fffd8a94306ea494a5ac5a99c6c4824f60f03a8230a534f","ssdeep":"","tlshash":"4ed097d2d8b8b12e1033348c9daa9a6601bb6ac23b09818532000c7a40685813715c3a","first_seen":"2024-02-22T03:53:22Z","last_seen":"2026-10-07T05:52:17.717241Z","times_seen":44,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/2.jpg","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.570Z","timestamp":1791352302570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/2.jpg HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Dec 2023 13:43:42 GMT\r\npriority: u=5,i\r\netag: \"6579b50e-df289\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x%2FjYtOBmkeLFwm1IuPxEPE44BwYXzs4nEN7xLGg4U8PW45y%2FYz0H6Z5qXelFp7fE6MiH0FINr0fsAz%2BpWGmbVTfOnzErH9nv39brXe44nXdNhuL4V5DWoKeOgbBYMopJEeg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b31a3d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 914057\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":914057,"size_decoded":914839,"mime_type":"image/jpeg","magic":"PNG image data, 1024 x 500, 8-bit/color RGBA, non-interlaced","md5":"5c6b530e42d8b1b18d146228843511e7","sha1":"1d83c2b4b186ee2fd2ab4133fd657cd8f2a81f7b","sha256":"9d260ee607d8eccb34d9a68e660528eada9e0e24a774c18e89ce68389c8bde75","sha512":"cb1ae4b337f9502c0526931207ddea5d48046b935b511f975824453e511c6608e98ae10a41b13e4c8094dcbf9b26b2098fc069129370263015ebf2702345fbea","ssdeep":"24576:4EF6LtLnujZaXLJoIoNInsdDgMkmE1U1q6DK/WCnjd:96LtLudaLJoYnsQ1U1quKuEZ","tlshash":"6c15330950092f5f16fb9764bf037d72b6a57aa2840ea817cf2779c02c81bcb439d58e","first_seen":"2025-11-14T12:39:40.637487Z","last_seen":"2026-10-07T05:52:17.718202Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/unnamed(26).webp","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.574Z","timestamp":1791352302574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/unnamed(26).webp HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 02 Dec 2023 04:02:06 GMT\r\npriority: u=5,i\r\netag: \"656aac3e-290\"\r\naccept-ranges: bytes\r\nage: 1155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00GtjivZcfb%2BAoXa0FhpzMU0rEIrcKZPODOu2JZQoMDQM%2B5EXs8u%2BrZK1R4cRTdJXcos30EdCKzcn278XCU6xVHwTkBZ9N5mu1AIg4Tkow5Ct0mKLMuXN64k06xcBcRc0kI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b31a403181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 656\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":1391,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebf8e250fd230df1c862bc9a2303f99f","sha1":"3b51f039a01265ca8d87b6c2b31f14c57a090767","sha256":"e9c00d1505373c7b7b60ccdd09332e02b2aee1a59b1f8b558eea1d5e14865032","sha512":"1a391c0d79bbc0b2a6a09c92ced7508f64813bf22d204a8a512d8fdd3f00182ea6984a86745efa63d9cca53ee1c8b38cb532a1eef805f8fba504a789ea10b14b","ssdeep":"","tlshash":"d9f068ccce58612754483e57d0c531921c9349cb83d8516ecefa4dc9bb60cdead41f14","first_seen":"2023-12-29T12:24:18Z","last_seen":"2026-10-07T05:52:17.71909Z","times_seen":58,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/flag.png","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.580Z","timestamp":1791352302580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/flag.png HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 14 Nov 2023 07:56:16 GMT\r\npriority: u=5,i\r\netag: \"65532820-2d4\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=937u0m3B3LwXMPNHSKBpdHz3YDDi9b7IfqIlExbV89i%2Byuxi%2Fvlc4X%2Bc3vg5zjf1H%2BJaWh815rfkDAR%2BPnsNHYfwazyFCk3r1R4%2F5GGHhcUdE%2BtFNqcIqSRTuKyNDnXo67g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b32a4b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 724\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":1508,"mime_type":"image/png","magic":"PNG image data, 48 x 36, 8-bit/color RGB, non-interlaced","md5":"76a0c75a653776da156cfb5a3b1bc24b","sha1":"a1276c42ed41fe2b0a58f139e07d5a44a4afbd37","sha256":"dcc4818cc9027dcb704cef2e96ad3b2dc6a0f5e639c6af6fa823bf26126b81d3","sha512":"cc6a5e30f884b52ef43d6704c5279a8010125d9de5dd029ce7218591b85fe3c33f7655e21baaf782fc8611ea83d734448f614aa987e6c0d2fce43381b70be54e","ssdeep":"","tlshash":"9f0160f9268c9a9dcf281034e2c38862a9244ad2955b6b2163056329724a85bf811abb","first_seen":"2023-12-29T12:24:18Z","last_seen":"2026-10-07T05:52:17.719994Z","times_seen":50,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/fonts/4uarrenhsxjlgdugo1oiljfc6mgs6vhak1yobmu2vgci.woff2","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:43.068Z","timestamp":1791352303068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/fonts/4uarrenhsxjlgdugo1oiljfc6mgs6vhak1yobmu2vgci.woff2 HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://googleepkay.com/static/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:43 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 01 Dec 2023 15:38:42 GMT\r\npriority: u=3,i=?0\r\netag: \"6569fe02-604c\"\r\naccept-ranges: bytes\r\nage: 1154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ubbdin2a3PA8qogtyiQC6CYxYRn8nBrsJsZf8GIvz3TaVO1lGfODe6QBpfyZnPRznfqiL7M6623I6GVYPb3JTvGW9%2F5rQfnMk9o48QqdXQ6E9Drq8GZU71K0MuhalmuTjI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b62b473181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24652,"size_decoded":25389,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24652, version 1.0","md5":"87c2b09a983584b04a63f3ff44064d64","sha1":"8796d5ef1ad1196309ef582cecef3ab95db27043","sha256":"d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0","sha512":"df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067","ssdeep":"384:tWRPGBQntHHPd6PE5E6YmHdflgl0Eo1prsMV+5rKxOmtGPGCtZD7v6:x4BEPElVHEl0f1prs1wGOE6","tlshash":"cfb2e01e14e37f82db5cb5311d8c4a1619f76aab8eafbda290dc4db1212d09c9e2440f","first_seen":"2023-05-01T19:20:40Z","last_seen":"2026-10-07T05:52:17.720738Z","times_seen":4873,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.557Z","timestamp":1791352302557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 09 Oct 2026 05:51:42 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HYx9zMBglRSfc%2BXoH96gPRMSFDGDaa4XPK5xYyfbUKjiyOzOLFGyg7YyLmlQqQU%2BoJEvErjwYT5o%2Bby12PAgnQMAfgOAn3mHdPSUiwQPRctNB6FE%2BgEWSKzxWUxcmD8DeIE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\nserver: cloudflare\r\ncf-ray: a46aa2b2fa263181-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1239,"size_decoded":1330,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-07T08:40:53.185225Z","times_seen":447126,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/4.jpg","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.573Z","timestamp":1791352302573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/4.jpg HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Dec 2023 13:45:00 GMT\r\npriority: u=5,i\r\netag: \"6579b55c-119a9d\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=USxGp7fYv%2BU4sOF%2FeeenUnYOmltAQ8E522qs%2Bk7%2BdrnyJvgHiTvE19bXBpbjbsoCxrBMzvbieizappnL5oJ6gv1bY8vjmpL6v8ZQWCYerAp%2F7p1R5P1UKeMsc%2BK3B6mEIvc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b31a3f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1153693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1153693,"size_decoded":1154483,"mime_type":"image/jpeg","magic":"PNG image data, 1024 x 500, 8-bit/color RGB, non-interlaced","md5":"096a30abbacba0abfee475b7bf8b109c","sha1":"ba203dbbd2f1be4b48c254ed58a47e7192f36ef8","sha256":"7ef837b1e26e5a0ba8f29202bdd9e6b127816d29a5c756b6dd73d1cb14b4d773","sha512":"cdcc4c974975b6e2bd592546182b23549bff25dc46179bb7fb4be8583a1df6efdb8afbefca5c7bb355d8d72d8067bd5d8f740e9dcb9eaaf43abc32d3c17169fc","ssdeep":"24576:wVQRYKajh3NBisKTWeqXSGm84lzcW1KaU2UO6fRjGDQaGwqh+r:qQRY1TBiJcXSGEJMxpkbgUr","tlshash":"bc2533a7ec468df29032753528cdaeb9f8a28119cb06d4131fe673ec6f3c149a254b70","first_seen":"2025-11-14T12:39:40.64357Z","last_seen":"2026-10-07T05:52:17.722104Z","times_seen":4,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/unnamed(28).webp","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.578Z","timestamp":1791352302578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/unnamed(28).webp HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 02 Dec 2023 04:02:44 GMT\r\npriority: u=5,i\r\netag: \"656aac64-1f4\"\r\naccept-ranges: bytes\r\nage: 1155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PiDwVXt1XBDMmk3df8pwZSprOPqJm3NJyaW27DuB9kjC%2Fh4b2qzuCm8MyDyCRbSL1lbHRipdQpSTk2YE1Vx%2Ff59p1FdwFToX7kwcbWT2UKRFM9gQ1MZtOXD%2BxUevn9OKSH4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b31a453181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 500\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":500,"size_decoded":1235,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b552a386f6416162cdf57cf032a86c22","sha1":"e6e535858a72d2ea9e54b09eb7484b9763e049c3","sha256":"3ba417096c28217962eb4841bdb9d08d335740a88cf47b7dd0009b4395f630e0","sha512":"b4ce64b6fc59f5a0b3f634f10a220961e847c4ec9917d67ff33ff924f3cdaf3838a355c1712aa502b27a9b9aea201749233749745e521708b308d9b368a9cf58","ssdeep":"","tlshash":"ebf0059ade5843b8113ba5016a2eafb30817d14e4032dcc038423ef51874153f41ee98","first_seen":"2023-06-10T07:54:33Z","last_seen":"2026-10-07T05:52:17.722746Z","times_seen":38,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/fonts/kfomcnqeu92fr1mu4mxk.woff2","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:43.067Z","timestamp":1791352303067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/fonts/kfomcnqeu92fr1mu4mxk.woff2 HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://googleepkay.com/static/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:43 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 01 Dec 2023 15:38:46 GMT\r\npriority: u=3,i=?0\r\netag: \"6569fe06-3bf0\"\r\naccept-ranges: bytes\r\nage: 1154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XjkDD56rsaN6tKBpAtsPfg%2B3jDxTA6x8W2QR8wJvFvwV55RGKSsBwN326YViQpVfeXVGdUiw9zXpv%2Fmg4eiVXYy2wykWzfTnBtseZnNOp973AiLKvr3Yxe%2BZtRtrFY1mq4c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b62b453181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15344\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15344,"size_decoded":16085,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15344, version 1.0","md5":"5d4aeb4e5f5ef754e307d7ffaef688bd","sha1":"06db651cdf354c64a7383ea9c77024ef4fb4cef8","sha256":"3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc","sha512":"7eb7c301df79d35a6a521fae9d3dccc0a695d3480b4d34c7d262dd0c67abec8437ed40e2920625e98aaeafba1d908dec69c3b07494ec7c29307de49e91c2ef48","ssdeep":"384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw","tlshash":"5162e16aef76dc7e4f1af1361c01b45404462290ba6155eff00d6e1d4eed1aff461392","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-07T06:17:17.301859Z","times_seen":544598,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/fonts/4uarrenhsxjlgdugo1oiljfc6mgs6vhak1yobmu2vgci.woff2","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:43.070Z","timestamp":1791352303070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/fonts/4uarrenhsxjlgdugo1oiljfc6mgs6vhak1yobmu2vgci.woff2 HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://googleepkay.com/static/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:43 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 01 Dec 2023 15:38:42 GMT\r\npriority: u=3,i=?0\r\netag: \"6569fe02-604c\"\r\naccept-ranges: bytes\r\nage: 1154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=35pg5NBQXs8Gv67gnCI9Hr%2BsrDsHDEiMgkvafP%2FYUDx1BGFhnECV%2FueqloZc8L6dETIH04u%2BCUatE3Qv34iTY%2BR7Ni%2F3KNSsyal9o0P%2F7QYtBSFTw8AnU6zPmPqcVoQFGjk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b63b493181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24652,"size_decoded":25401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24652, version 1.0","md5":"87c2b09a983584b04a63f3ff44064d64","sha1":"8796d5ef1ad1196309ef582cecef3ab95db27043","sha256":"d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0","sha512":"df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067","ssdeep":"384:tWRPGBQntHHPd6PE5E6YmHdflgl0Eo1prsMV+5rKxOmtGPGCtZD7v6:x4BEPElVHEl0f1prs1wGOE6","tlshash":"cfb2e01e14e37f82db5cb5311d8c4a1619f76aab8eafbda290dc4db1212d09c9e2440f","first_seen":"2023-05-01T19:20:40Z","last_seen":"2026-10-07T05:52:17.720738Z","times_seen":4873,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/fonts/gw6kwdfw6unxljccmafzyfrxb3bl9rvi0qzg3q.woff2","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:43.071Z","timestamp":1791352303071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/fonts/gw6kwdfw6unxljccmafzyfrxb3bl9rvi0qzg3q.woff2 HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://googleepkay.com/static/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:43 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 01 Dec 2023 15:38:46 GMT\r\npriority: u=3,i=?0\r\netag: \"6569fe06-38ce4\"\r\naccept-ranges: bytes\r\nage: 1154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IC8BGEihWbhg0hZTF218oE65%2B6j6EPMyBnT3GysuLUNKJPtMZEj%2Bzx8LAOt1KTQSyQk9epWjLrD2doRq3j19cwF8EnRBta0SZTnFBtqj2F1hOSKiWWhh9sN71C4eI5w%2FLkY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b63b4d3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 232676\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232676,"size_decoded":233419,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 232676, version 1.0","md5":"22a8288d7c3b6989788d2fbcad4766f7","sha1":"35e662ab62cf514144d0126e59b667f5bfcea2e8","sha256":"9a0782a9b3c97cbe256803fd198d86427e2b1b40b85c93bc3a8e34a1be6d37bf","sha512":"25fb7a81a0f411797f722f8a6f5dc6760879744c7426f09998a1cf5348dfecf9f297c51c7650ff30fbd08fe329fcd47cd05dfcfa525fc8d1a67d8b207818de9d","ssdeep":"6144:bifkRrQ3x6aaCVAjxTjgUNaH7GQaI5i6aRYSnYx:OM6x/aAAj9jgUoSQpybYx","tlshash":"713423ac8a446f59cc12d6e47b6db09318fd97c5c8f19a2a004fb0bb42c7737ee22159","first_seen":"2023-05-16T04:25:21Z","last_seen":"2026-10-07T05:52:17.724065Z","times_seen":14543,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/unnamed(29).webp","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.579Z","timestamp":1791352302579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/unnamed(29).webp HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 02 Dec 2023 04:03:00 GMT\r\npriority: u=5,i\r\netag: \"656aac74-fa\"\r\naccept-ranges: bytes\r\nage: 1155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLDS8ZG%2FK7BG7k1YEJmNkT%2BjaIcmM%2FBatypz5mDN0W4WDGZfNctWPcdb42%2BFbUoPAfES4UnznEG1F5HP7MQob6kehVR%2B3EqENxezO1jWt8QY3qQjUEaYpAGuasMt79MUWfc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b32a483181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":250,"size_decoded":990,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2f2aef5d6242b1f03864f8a493a2fcc8","sha1":"d18f46e796f5ec5f183bae01cd5a0e0c3cbd1749","sha256":"b2548d09f2fb191f3ad538849c43f7313957e1c588bf0d82dc04938c3c3b2d58","sha512":"16a14327d147907d098c39996863570d3daa018e6469518fbf0ce3abdbe0e0755cb1004e6c32c0b790230a0b0eb7705ef98445f93ccaa3d3750f4574536ec795","ssdeep":"","tlshash":"45d09597365fd0ac54d6dfd00b631f79d5bc49404142d4410d703c9540d53411a17914","first_seen":"2023-12-29T12:24:18Z","last_seen":"2026-10-07T05:52:17.724735Z","times_seen":58,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/css/style.css","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.550Z","timestamp":1791352302550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/css/style.css HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 01 Dec 2023 10:09:40 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00jeu7X83zSityvdEa%2FVivl694s7X5bapoGKFZx056F4AQUB6ycmpoluXfnhIr%2FFH49itCae88ABU01h%2B5NJ4gnhbOPp0ZMmNBsJbUCIv3GiL51kpCILAR2dmNzTNYg04z8%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6569b0e4-a746e\"\r\nexpires: Wed, 07 Oct 2026 17:32:27 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1155\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46aa2b2fa213181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":685166,"size_decoded":106055,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b85b6a8af21fc42514c89b6ec4184b8f","sha1":"9cdb8eea441f2cf185f18a1023ccecac4bac6d4a","sha256":"7c731a6629a0d8b5e375ffbfb3b798bf2ab16e3cee0914decb5cc9813605931f","sha512":"7df00270653cbe6cedadbaf50f614427197ff25245ad8cf59ef0b92fde9ee0807857a651d91338c80fbba1d3e94fed25ae3eb92ed74d7e9c4917c51a603b92eb","ssdeep":"6144:rK009kg3K009kgeK009kg64kWO2JZLXrK3d09kgTK3d09kgdK3d09kgOK3d09kgK:q4rrSOXcnmXfIG","tlshash":"04e495868232707ffb636af8f7f09e45efc40890a91f427ab8f1690741e95782295375","first_seen":"2025-11-14T12:39:40.635179Z","last_seen":"2026-10-07T05:52:17.725404Z","times_seen":4,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/config.js","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.553Z","timestamp":1791352302553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/config.js HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cATLXH5TiOC4V0LujZkJhqSNK1ytijjEazj72tqVn11qjr2V5k3WxB1vvrWtLPDFDA3PKJpU5ZODeVcoqXKA0EGORe9y7%2FxKNW5vVz8GCSMyHHql1X0miVBkOMVfC4Hbtr4%3D\"}]}\r\nlast-modified: Sun, 25 Feb 2024 08:34:28 GMT\r\npriority: u=2,i=?0\r\nstrict-transport-security: max-age=0\r\nexpires: Wed, 07 Oct 2026 17:32:27 GMT\r\ncache-control: max-age=43200\r\netag: W/\"65dafb94-3b5\"\r\nage: 1155\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46aa2b2fa223181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":1282,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (818)","md5":"60e6158797463200c3375c89cf14a9bb","sha1":"5c3f0eb595f8921b71a5fbf6bcc13961278cec2b","sha256":"39d0410b039c6b17da1720a7ef1092eb9bf3bcc760ab292264cfeb4760601e84","sha512":"6fa7921119ce33b556bdbb2ce313fd987799374ba6583aca666ffe56c51fa804d9feb4b25a1d2dfb1adf8bbf6ce493b2716cc4a58218b761b88975b8460ab7af","ssdeep":"","tlshash":"3011e15845c0291f4b1703b2b7ca86035d880555243bd99388a76e9aa63e4429085722","first_seen":"2025-11-14T12:39:40.62098Z","last_seen":"2026-10-07T05:52:17.726195Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/3.jpg","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.571Z","timestamp":1791352302571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/3.jpg HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Dec 2023 13:43:50 GMT\r\npriority: u=5,i\r\netag: \"6579b516-e8eaa\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FzEhhwnozx1MOQGUaX%2F%2FoLYQz5a0knBob2FRL%2B5CDhLVt17oZgbfYxM0166ZaeSiqQMh0tM88b2OTn55qScKsOob26EAxHewPsFtx88J6EVlNHA3fxW%2FtRf9l%2FKwq0zt79c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b31a3e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 954026\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":954026,"size_decoded":954812,"mime_type":"image/jpeg","magic":"PNG image data, 1024 x 500, 8-bit/color RGBA, non-interlaced","md5":"7f3fcdd3d1877b34caba72ae29ed6333","sha1":"d61a311b3b3cfa06ed394492f168ab7cab862120","sha256":"8f71e9b68cf27ef8823ac44971f151eb9aca4385ffb046f9580bb6e5405a98c0","sha512":"7201a4958dabbdc0857c61adae18324527d3623e2ae083ee56efb7a847dd13352f58a471e57fd6df81df1a793d7bd327f962e4df2ad43a3f945c7e142988d28f","ssdeep":"24576:Ec0XSujnTKLWbNTEURBv44aAZ3TMgNREqu4ZdKd:EmujuiEWQVAZTnjZs","tlshash":"17153390dc871937f3d75ea129f1b8f0ca062b295e62e6ee8d05f44c5f795d09c28b0a","first_seen":"2025-11-14T12:39:40.615505Z","last_seen":"2026-10-07T05:52:17.726892Z","times_seen":4,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":75,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/1.jpg","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.569Z","timestamp":1791352302569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/1.jpg HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 13 Dec 2023 13:44:26 GMT\r\npriority: u=5,i\r\netag: \"6579b53a-e3a85\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZwIBorK1SdXjiQQibQ%2BSbhdvxl3ZTir%2Bgi7aMi7o98iSn69KXFg5xNSWu%2B%2FMSCmylDIjKQlsdnTc%2FGfme1zb40mXzlClkX4jQ6H5uXbaI1v5NDXquQIkaRxmI%2BykfeeLdk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b31a3c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 932485\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":932485,"size_decoded":933273,"mime_type":"image/jpeg","magic":"PNG image data, 1024 x 500, 8-bit/color RGBA, non-interlaced","md5":"3f43e9fb2c2bfad43d3b26e0deb93e28","sha1":"1260350eeaff5662f540706309d8201c627d0813","sha256":"4bbe297e2331bef578a655c126f29f2839b3af16dafc8a996d3e7a32211d0b10","sha512":"966b54ebc3c88e3fd89fe4ab013d41bd37b4b8ee17d5ff2ff5a43f35db62da734ea96665163a4709dc2466b35515584f6e4ba4ae45c6cae952c3f3cb7f97138c","ssdeep":"24576:/4eOKRXn8cwGUJKUd4VXfzwhkz42GOLHkMrE:/XzscwJAbzLbHkSE","tlshash":"af15330ba9c71373addf68b69bd8388e365228f4c4fe3f6d541b548e691d344c896322","first_seen":"2025-11-14T12:39:40.626935Z","last_seen":"2026-10-07T05:52:17.728698Z","times_seen":4,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/unnamed(27).webp","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:42.576Z","timestamp":1791352302576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/unnamed(27).webp HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:42 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Sat, 02 Dec 2023 04:02:30 GMT\r\npriority: u=5,i\r\netag: \"656aac56-392\"\r\naccept-ranges: bytes\r\nage: 1155\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jun38r7y5vjfeSe8P%2F1wb37fjLUihIkw4Zh6M%2Fmk%2FMR269LQQB%2FfTh2vEa4ojoVOVDmp4sEVa2HO%2FsisgGlDIENCM6B4odd8PumdxMGyKVeAGps98cA06NBz962z24FA4gI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b31a423181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 914\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":914,"size_decoded":1653,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6e3eb380a4816b7e6fed4c7b0a0d5930","sha1":"ebfa9479f8603551886a236a2aede7a17a4e55ac","sha256":"5c09164ef4a2388544eb8980ced7fcd59fdc8a951f90e5d91c4aa38e48e18605","sha512":"e298eca27e61bae0795a9b8abdf7ace1c3eb483b5d237153a32c57886964d0c2218c10a170ade01e4f0342f12a11771b381b2088c6af3c8abebeb933eb272967","ssdeep":"","tlshash":"4b11b7b5659bdb331d79035e6d44f14925b0232c7a445ec569658ca1f130015ec82e0a","first_seen":"2023-12-29T12:24:18Z","last_seen":"2026-10-07T05:52:17.729979Z","times_seen":58,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/fonts/kjejbvgx7bgnksruwt8unlvc38yydejyy-oe_lvj.woff2","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:43.073Z","timestamp":1791352303073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/fonts/kjejbvgx7bgnksruwt8unlvc38yydejyy-oe_lvj.woff2 HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://googleepkay.com/static/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:43 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 01 Dec 2023 15:38:48 GMT\r\npriority: u=3,i=?0\r\netag: \"6569fe08-27c6c\"\r\naccept-ranges: bytes\r\nage: 1154\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ysb3XiJyN1IhcFMdT60Vg4rUG9QnsopH24nobhfXhVGLWkP1KdiRXFphNrGD5ukvPQcbpWhjmd4xrSWeJlb8nZS9zINBynGecmp3c1eoYrxi0tUfIUD%2BzBDDsdeZ4Af6JQk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b63b4e3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 162924\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":162924,"size_decoded":163663,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 162924, version 1.0","md5":"7f2e1b48b71ec58fda4539018a2f56cc","sha1":"507bf81f52fa8c99bf2c5c8bd59a981899ca9995","sha256":"7f80c4c91054b3d6c80721939242c2d4f68f15e41f251e12641f695d78eb2f35","sha512":"dd7b52119d1179332147984f6c7d8cdcb3388aeb1e8af708ef9036acdde6e7b3900acc965221f4e4864dad89797072e19e5b308cf065a65dda7656be884cdd77","ssdeep":"3072:XdhkQyBlHVVYwHUFDrzXtPz/qJwZmUyhjpimMS6DW4hb59a06EziVFKth8Biq:wQyBBvYw0FD/tPWJZjI3PXhbrduVFc8f","tlshash":"04f313d43eb4ca89e20ccfdc7777e01fa316e06ff0a1855d96b7742a1ed880245661ab","first_seen":"2023-04-05T04:58:41Z","last_seen":"2026-10-07T09:05:47.001922Z","times_seen":26793,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/fonts/kfolcnqeu92fr1mmeu9fbbc4.woff2","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:43.074Z","timestamp":1791352303074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/fonts/kfolcnqeu92fr1mmeu9fbbc4.woff2 HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://googleepkay.com/static/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:43 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o3gTynXDrzFL6jVmxPxHzeM1fhFQg4%2FmnJEAqumbF6TFIDBRr6RktRBTATapQImPiyzVarkvQDwZ60HSh4LEo1Jh3n8CMGvANVRCAQdwVCRbY6LK3Gb%2FnMRCoaBGVrMXEVA%3D\"}]}\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a46aa2b63b4f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":146,"size_decoded":763,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-10-07T08:40:45.192034Z","times_seen":565961,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googleepkay.com/static/picture/icon.png","fqdn":"googleepkay.com","domain":"googleepkay.com","tld":"com"},"ip":{"addr":"104.21.34.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googleepkay.com/","date":"2026-10-07T05:51:43.203Z","timestamp":1791352303203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googleepkay.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 27 Sep 2026 15:02:10 GMT","end":"Sat, 26 Dec 2026 15:59:54 GMT"},"fingerprint":{"sha1":"A8:7A:63:9F:A0:FD:18:2A:18:22:6B:44:BA:06:9F:5C:51:69:B5:BF","sha256":"F5:D6:1B:50:A8:E4:88:8E:6F:D0:32:0E:79:F1:11:90:D0:F2:91:6E:49:AE:CD:B4:0D:17:BF:A3:4C:D6:98:62"}}},"request":{"raw":"GET /static/picture/icon.png HTTP/1.1\r\nHost: googleepkay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://googleepkay.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 07 Oct 2026 05:51:43 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Mon, 18 Mar 2024 11:33:44 GMT\r\npriority: u=6,i=?0\r\netag: \"65f82698-20cd6\"\r\nexpires: Fri, 06 Nov 2026 05:32:27 GMT\r\ncache-control: max-age=2592000\r\naccept-ranges: bytes\r\nage: 1155\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Roq%2BASXKhT6f2orb8cXZRTQDYfuUdxNUHLhs5SdBjfa%2FjCNu8fBiywQMyzKaUWbzqetFxT6vLncaZNaPDjG0bHYYC75VBR%2F04cKro147MGHDwWIU0lLATSAUXCJeoOKyrho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=0\r\ncf-ray: a46aa2b70b9c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134358,"size_decoded":135142,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 1024x1024, components 3","md5":"78151e3be290bce7a4c56d2ad4dbf58c","sha1":"7d4cfccf827ff3ae607aad249e1f7f83653759bb","sha256":"61b2ce42b317f7cbc7a924f9cb91c5b7447b0733397b342e511bc0d1b7418571","sha512":"b14b173200bd266f78c8e05fc4db0896c52ee02567ab0d71c064b5f86dc06e68efda9e1302f2bad68e67501699e3a2c515ab580b16493cc8d80dc04665ac7af3","ssdeep":"3072:yP72eRbynMS2COSTNGVHCBb9GlSl6nPTPRcrR:yP7hbC2C9TIVHCV9GslmVc","tlshash":"67d3024e0db196fad6e43b3743b8ea019b74f86943efb7cd42459c28c6109e47911de8","first_seen":"2025-11-14T12:39:40.631464Z","last_seen":"2026-10-07T05:52:17.716174Z","times_seen":4,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"googleepkay.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"googleepkay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}