{"report_id":"22d94701-f41f-4682-8e0a-5c94aa658169","version":6,"status":"done","tags":[],"date":"2026-04-08T04:58:16Z","url":{"schema":"http","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"title":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T04:58:16Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-04-01T16:01:15.443215Z","alert_count":0,"request_count":1,"received_data":116674,"sent_data":422,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"y9p7c8a.com","ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-08T04:58:23.11297Z","last_seen":"2026-04-08T04:58:23.11297Z","alert_count":20,"request_count":10,"received_data":21202708,"sent_data":6123,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-04-05T23:05:24.249641Z","alert_count":0,"request_count":2,"received_data":105966,"sent_data":873,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":1,"received_data":43971,"sent_data":546,"comment":"","tags":null,"fingerprints":null},{"fqdn":"upload-us.f-1-g-h.com","ip":{"addr":"104.18.13.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-27","domain_rank":2825239,"first_seen":"2025-06-10T03:10:45.392134Z","last_seen":"2026-04-06T09:46:31.937753Z","alert_count":0,"request_count":2,"received_data":636118,"sent_data":912,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"o.alicdn.com","ip":{"addr":"47.246.50.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"domain_registered":"2008-06-25","domain_rank":89234,"first_seen":"2021-04-29T02:52:24Z","last_seen":"2026-04-01T23:09:42.846028Z","alert_count":0,"request_count":1,"received_data":224754,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":13,"received_data":133924,"sent_data":6265,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"616c374228da484a0d0b59d6786dc8ce","sha1":"3a5a9c753f0ff390caff54836f9395d96cc1363b","sha256":"a39cc6b560cd2dc62ea4198c94636669127b2a6e7249a27ca7feea6275c96178","sha512":"33c3e46baa9caa2090a3d02dcd55d6faec53f2cd707ed66595b78f8b5bce1f1b745f5ea6670597f642d00af00bd1b72923de5d43f60f55b6880b271b33107a2a","ssdeep":"768:sPoBt+aSh1i19M3wk4sNt0sWZIH1jYuKRJvFS68yYOA9RXC49U9b9p:5H+aShXstnT","tlshash":"8ad2ebd787cf58082bca3212c18568e50baa565f1cc5b741b38b6e366b99fc0370b67d","size":29396,"data":"","first_seen":"2026-04-08T04:58:29.449414Z","last_seen":"2026-04-08T04:58:29.449414Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"585e191a6ee01c91dc05d3add715ee81","sha1":"4896d5cfcee005c4691706ccac5fa3be0476c4f8","sha256":"d473d14290944b1a9137706db7bedf3bbde49020f3e7ab2fc9211391799e5833","sha512":"a5fb1a86ba0e4c09a2b549c8ec8eba752ce0daf82155dcf93ce68e6714e4390855634f9ffb4f6e0d1b73a5b14ba25f8af67449bb3beee511c768cd59aee1a997","ssdeep":"768:bCF+N2LM/muYLtHMZeKqAGeRHLuGSrcNsh4QJ58Q9ZqysF4pY1DrF99KypgiaiUu:72I/mzLtHMkUGeRrB0h4k5Ns2s","tlshash":"9f333b583156797226d980e0617fa3837326793af94ccc50e427cd66266cecad233b7a","size":52567,"data":"","first_seen":"2026-04-03T10:44:57.13752Z","last_seen":"2026-04-08T07:45:42.699683Z","times_seen":6995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a8a44c43cf9498a92725092f8f97f042","sha1":"c9d75fef106c54d6c6b9fe4013848ffc8b39ade3","sha256":"75e90aa9e81941c5c5fefb51a4e6557841730a270b3bd7b4d3c2bbbfd566b4b5","sha512":"60e7ceda33f5ba0d259aeb3c374119bafaf8e23d49e7ea3bf76d88361fdbf59090a64782032279a3a1f87dbe6c03799a6e081b3b70a8964c9a9b66112f78c94e","ssdeep":"","tlshash":"bc31be8f94ba69260763257c1bc7525133b7a403621cda063b6e93506fa107e4ba3aca","size":1514,"data":"","first_seen":"2025-09-16T05:17:26.584889Z","last_seen":"2026-04-08T07:40:13.949322Z","times_seen":2466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116341,"data":"","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-04-08T07:40:13.930325Z","times_seen":113,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-04-08T07:38:26.608079Z","times_seen":604061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd7a34e714de94d5c29b8ac5acdde24b","sha1":"b722bccb435490630d97ef88cafeb02d92f70fd0","sha256":"312ebfdc50a0e168cff60c206811b02e944263a7d9060c2685509dacfacd7f71","sha512":"a724bc648a508c24e5bb1788e1f02b47030893bbb0b80a99e380d95480095983a35d8ec11193c53f0a67db47a289ab608fcbc9dbca846bfdd5d61a8832290f43","ssdeep":"","tlshash":"58e07d48ff28c7f316ce28ab516e770858d104d58c1b58024cebccc86935ed87291527","size":314,"data":"","first_seen":"2023-03-11T11:23:25Z","last_seen":"2026-04-08T07:44:46.640049Z","times_seen":30162,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/versionControl/combined.js?v=v208","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6553a65108617ab0f1436b9833bbe45","sha1":"12575f47719b7204e859e8b949a85c138c5e9820","sha256":"e16f8e8822b8be6b8a671b05ebfc2a1b6036b450a89f25519c54c1c0f303f34e","sha512":"870ed4f6ce8c48543e28048d4a58c818280dc8c4c7c0378c8679e661fef813f0b6608583ea4b186b09c063ab1b8f7200179fae59214f78106ea93995fd8595d6","ssdeep":"192:lJtXatX8sEXZ7D8WQQtir56Y9tozbPlnNmfdIe9MsQxW87GnArHcfE0qp97AETQs:BS87DFi7tE4fdI8MT5AcPXUETNh7KW","tlshash":"1372e91d36b420b542a37219abefd70d3131422b2845dc157b8d83a80fa5ead46b7edb","size":16887,"data":"","first_seen":"2026-01-21T19:51:56.02324Z","last_seen":"2026-04-08T07:40:13.919684Z","times_seen":584,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v208","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"252eff85e75f98cab2ed0affd0f24ed1","sha1":"e1a739fa70c57e9ef90f33fc4ab52fcf387ad13f","sha256":"1ee4947bae28f87f22e0f400ac7ae540d0162c4102402eaafe7d3aa6a3420c7e","sha512":"55efba3ebdc87dfeb1933208acd1f727b126433e26a1b747eff534620804979acaf50139674e7d5ebab2baa3bc962b9495224f15f461a01e56b76ad269060d12","ssdeep":"1536:7ROuwOy/RQEO6odontXPi2kJP33+NR5qlr:dGBSEOLdyXPeF3+N+Z","tlshash":"92534d9ef589753503ebb054c53f0402b6332c15a64282a8f6acd5d6fc795cea063fba","size":61393,"data":"","first_seen":"2024-07-30T04:40:36Z","last_seen":"2026-04-08T07:40:13.910952Z","times_seen":2747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"528dd01eb509d1fc3c68b48e165c9d77","sha1":"8d702f33d869eb8c53cf75c17014f96385322395","sha256":"b508dff20bdbd9138e31aa48c45bc501805e509d2fd4709b39c4a60cd5c6b43a","sha512":"4c1edeec560f431005363ff5291acc80c1c42edf7c9a6d6e4fde2f7539b6a35a8e36f0bc228503263277bf5df4525dc579575faadca614c32e5dfa885a2d343b","ssdeep":"","tlshash":"78a012bb71b851710cd51ba7a40455e01c20123105052c101c8d5151c011c171d394c0","size":84,"data":"","first_seen":"2023-04-07T06:55:59Z","last_seen":"2026-04-08T07:44:46.640858Z","times_seen":33932,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/vendor_modules-RoSZvsDR.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6d18294e46b2fab8f4c84bd919fb2bc2","sha1":"bc443d085a8e71fcbf8c0bb31b36e215ff5d3407","sha256":"28ebe58ac1503a81f87c1555bc68a8e28cfd19477cba45e05dfc65f48099eb16","sha512":"c73c533dd2899ada7a8711bf33198fdc172352b3f67692b89fb04cd117931d7cc831890d9d9fced4a6a02db6eea7eab56cfbac8e9359b66e1c18482a36bc130a","ssdeep":"49152:tudSmJj4gCV2d1xYSlH0TcWtnuOmeZj+TwsCj0d/2Rp3ZQ+aEQbDmiRLKmvPC22q:tbKTwvZQnuiZ","tlshash":"8ac54cd5b25c733543f756b440af7245b2387882f40984e8b5aad8cb1b7edc5227ab38","size":2563750,"data":"","first_seen":"2026-03-21T02:51:36.861825Z","last_seen":"2026-04-08T07:40:13.952598Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/index-CJpGqE6b.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bcda8f8bfa3543a2fafc8c2db090bf7","sha1":"2966808fbe8d60dbe318c14f3a5a20ccd5dea511","sha256":"b9eb1806a5044b67155b384125a9019731f9332b5e0cab0c218ac2a6b3f8bdd7","sha512":"d92cd38d0c4b299f307b65e88607d0ecb1ebcb0e0499286524f7ee5a9dabaa1704dd491c07854596e76730424dadee0947010438644673dc4fa52c3ef5865767","ssdeep":"49152:3lK8u83GjOvzOfQPopPFjU7ns0PD1tziM4YR5f0MHZSXot2VKv9vhOMh9DJYfo9Q:c8rpKacO0GxkOw4kR/","tlshash":"bdd55b04b02d95bab6b72468e46e9401314c1fded204d8b5f2ff8e253757da4632ab3e","size":2954274,"data":"","first_seen":"2026-03-21T02:51:36.851674Z","last_seen":"2026-04-08T07:40:13.948348Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/locale-pt_BR-BIQIdlKS.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caa92da8ca225062382801815bba8763","sha1":"de3046af1611d9d53dcacc63591136e21c05ce7e","sha256":"b4ed73cb7f7e6214e06685362c02da93ccacf3627b8f87b63f9a4a8f3c37a331","sha512":"d186319a6d7690b4b027c50704cda0b966a6ac6710bf06cf144344d1f2943028f3ad1db9c0947e545b11cbdc5395cfb9167f24dc9d53d741cd13b598fbf60a59","ssdeep":"1536:Jadw39hEoI1jIRbADxxlhTaiW3zze4thOVF4fGdeFt5ms48pvDmC6LD:kM9algiZaiWYbMYsQD","tlshash":"4f83083e2ecd023596a353417f4fbe0366c87187e8c5c86b8aeb476961d9ec0e45e325","size":85094,"data":"","first_seen":"2026-03-18T15:04:44.065166Z","last_seen":"2026-04-08T07:40:13.909679Z","times_seen":315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.50.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b5ee1d66cef100408e6de323e1187c0","sha1":"c382cd85a7f96d75826226b3ad9f9dbb35e53f67","sha256":"d5579b8af45ff8001a79df83a71e55f1b21c945e93f37801137b7583a78c885c","sha512":"a449a166dd6e95a70e8cd38162544014538e46d2a6d295f2ad6d97746d6b75faabee6595512c3e6bf9973bc88ec6dab7f3789b9259f866c4b5609b3d668ba941","ssdeep":"3072:JCRXOcW1F14CPXokzRF1gpi/gdrEsjS7P:wXOl1F1lvL1gpix7P","tlshash":"9624e98db1c5b0e94fa364a4012f640be0bb6a64744dd9d1fbb1d4c5ac79e8ea033e5c","size":223620,"data":"","first_seen":"2026-01-21T08:03:49.795351Z","last_seen":"2026-04-08T07:40:13.933573Z","times_seen":1223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-04-08T07:40:13.944546Z","times_seen":81566,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Product+Sans\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Product+Sans\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f6061bf85f699a6cefef6f02117f7567","sha1":"8c80d2379ded2b1d1a2a9565fd13f9a4db16f957","sha256":"1be04160f39c4941fd6dd1efb4d3af1f67b3094969eeb4340285f06e8a4e4d02","sha512":"d93e11f3d62b35cc8df538bc1b0414b4e402feadade5f7285a16648fa4ca9724ce5f7d1510b65b1b8eaf2ac1536377eaa35c2dc4d80314c61c0868aca8f9d226","ssdeep":"","tlshash":"aa3115e1013ba084ab831cd523df7e26ad1f6221a485d47e4efd289cfc95d564330b5d","first_seen":"2025-09-03T04:41:06.145005Z","last_seen":"2026-04-08T07:40:13.9055Z","times_seen":2459,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4887,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"3fd96ba77783845730c343cf00ac7a93","sha1":"bc4f7f4f71aeae387232155c55c4f031c5f3f769","sha256":"27b95b2fcbc857ba25f7e5a707c5c4c06c5cf93415519b7669c19f4045edca37","sha512":"20b137cf9c61842c7bad62dd6c36125833022552379ad97324dbee2c2e9cb0303b17a9aee813ea2bcdbb68541c8c6edbfecfcfb2858cf27c2cff480d756d80cd","ssdeep":"96:aYg4aMzqYg4aybFZHYg4agkYg4aUJ3vYg4aERYg4aYGJc+uTYg4aR6NDO4a3qO4L:vywfydyGy63gy/yFVyR73xpmj3U8fHN","tlshash":"37a1ed91006f9104ea431dd627cf7e32ad8e51956082e27d6ffd2dca6cdbd23122874c","first_seen":"2025-09-10T21:50:06.177565Z","last_seen":"2026-04-08T08:23:02.979159Z","times_seen":11476,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?58","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Mon, 11 Aug 2025 13:36:48 GMT","end":"Sat, 12 Sep 2026 13:36:48 GMT"},"fingerprint":{"sha1":"85:08:98:2F:A3:60:90:21:E8:78:21:C8:A4:96:E1:A2:E6:9D:2C:64","sha256":"49:35:FF:BC:17:D1:E9:B3:15:37:E4:67:C2:3A:A0:69:6C:37:DC:52:3F:7C:02:D6:30:C4:6E:45:7C:CA:F0:D2"}}},"request":{"raw":"GET /js/telegram-web-app.js?58 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.18.0\r\ndate: Wed, 08 Apr 2026 04:57:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sun, 05 Apr 2026 10:29:48 GMT\r\netag: W/\"69d2399c-1c675\"\r\nexpires: Sun, 12 Apr 2026 04:57:53 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116341,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"e327f60ff0d85c31034e21c908154d57","sha1":"d83f8a3062b70f51147c1501891b4523db34674a","sha256":"bcc5e1ca219fbea9498e826e0f5648603582c7988ec8c3ce0b85c86a9eb6299c","sha512":"fb1a2abec070c64dcda00d503093d2d1d2c30cb2a0bba78bfd2fe117e7eb159079216370e560d13dbed2f614b1e9cf7a127bff4685a8f3cdda7b02009296dce9","ssdeep":"1536:pOpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITq:spTpRdfcKFU7Rx1v","tlshash":"aab33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-04-05T10:46:58.564832Z","last_seen":"2026-04-08T07:40:13.930325Z","times_seen":113,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":204,"dns":11,"connect":21,"send":0,"wait":39,"receive":0,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/index-BykvMh2U.css","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /assets/index-BykvMh2U.css HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/download?\u0026from=y7l5a1d.com\r\nCookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9e8eb19e5ab55699-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 10405\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Wed, 08 Apr 2026 02:04:28 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 45ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-BykvMh2U.css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sh1%2BqYQOAxpUbo4aHk%2B0Xnqj%2BO3vgDqpgrruljlRrwOn%2FYP7pmFAhhIWgvyDYUlmCjegjpbeREONrJ2jeAL7zEAt222UzflO0U2sYNYka20wGVVT6Hrys%2FDqovhgCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"23898c9bc81fee55b700e6ad5167d231\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9933804,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bdcf8e05875e584cd0d7027d1ea2a5f4","sha1":"ca4b85bbc8d67e8f278f755c4e725da323808d61","sha256":"e67812b642bc3ee3ca170123be9ac9266afda8dc2da5413b6f49aab7485837ef","sha512":"0f7eb11fc2fa2990ac4e9fcb03f97794db8390a3a5e0e964f7cc5bdbae10ce91b14ee2427242d3687009ff5bb79035e54be5f1a96260b8b9940fcfb9df066928","ssdeep":"3072:+xbT2ZleN1tG6LFiSUOkgMwL2skAXGuwo8013roUUZo1eDmjOD0YwEIHeyRmTQZS:b7sizvl55gPkk0l","tlshash":"aa255368f25ee67e7837d8be1a6cd28c1015b942c9024badfa53f55088c3bf73265349","first_seen":"2026-03-16T10:26:12.425496Z","last_seen":"2026-04-08T07:40:13.923684Z","times_seen":350,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/vendor_modules-RoSZvsDR.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /assets/vendor_modules-RoSZvsDR.js HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://y9p7c8a.com/download?\u0026from=y7l5a1d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e8eb1a9791c5699-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nage: 0\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Wed, 08 Apr 2026 04:57:54 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 13ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-RoSZvsDR.js\r\nset-cookie: __cf_bm=6uq.VsJAXE4JsVnlcPYz6HoaoSGwhtUe_XuxQuVGMow-1775624275.434983-1.0.1.1-5s_iBp67Dja0Z61bXNAtlEcTFvW9Z2hZZU9YfzNLzI5PFDKsBavsDqi8JqwvELdkgyW5ItkWWsDIwFooXY5y1sztlUrzqkM2fZiwD0pxEHxXBeLlkpFgLGFnixwgTF6i; HttpOnly; Secure; Path=/; Domain=y9p7c8a.com; Expires=Wed, 08 Apr 2026 05:27:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y3EAvikLgW%2FfOPniIMwNFLq4S0KibQ7Vbmm5%2B5njTN8zBNQhLrLjbeCsRDr0pTXMZdWxWsJ0WTdR09kK6rosUPvWxXnxDhWthXDFXeN9cuJVkTkEXK2kATcKWohVwg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6d18294e46b2fab8f4c84bd919fb2bc2\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2563750,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41635)","md5":"bc93ec04e49ec4e2ca526d7d1b6e2362","sha1":"b7afefa9369ea00c52260e5f810157f172164da2","sha256":"e40a4cd6a14d69b4c9f6e012e9e8abb0a244fde0b13fed81d3e4b6f1bfa6f6cd","sha512":"2c50ff262c06a644ff7aec36d1f1634b9cc95bcbfa3d52244b41c81c8a6230a6f5a59c5a643efebca75464f5fd8e53393b5cfa7ee234348ddfb22c7e224be60e","ssdeep":"24576:tuZdmxmJjfAgCnEryEOwd/nQ9L6TpXxYlkPZBkCXe:tudSmJj4gCV2d1xYSle","tlshash":"f9255c94b14035398bbb8ae581aa6100b3359482f80648ddf56ad8c74fdffc9137bb79","first_seen":"2026-03-21T02:51:36.819348Z","last_seen":"2026-04-08T07:40:13.924453Z","times_seen":68,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Google+Sans:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Google+Sans:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21906,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"e5fb4b90572c7a887b03c11dbbbc8926","sha1":"0d878190795b61bd8ab29b2a38a04582b5c4440a","sha256":"81e589c0597887264a5c4a78f13cfd2ba16b1f7195ddc60fd62d4a072589dcba","sha512":"c1253542a9cb558886ffefd3ad0ef2a0664a2a578a4168443eb7ac8b080b5a11e3323a4d7d995256c18ab4d495101eebe9304f7a7a982a25800cb54f8d152126","ssdeep":"192:BHdNwwF4SQgNy8G8w55Oe5IXkbqGIwVhVP4lYloPcgeNXwm/B3gOh8GDXKKNdKPG:fhlOqYopBZHqYD8","tlshash":"91a2ffa11047a028be67bcdb33ce2d146e5e11791501d63e9bfe1ac5dcc786603b1bae","first_seen":"2025-12-10T22:39:20.596071Z","last_seen":"2026-04-08T07:40:13.94365Z","times_seen":870,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /turnstile/v0/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Apr 2026 04:57:53 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public\r\ncross-origin-resource-policy: cross-origin\r\nlocation: /turnstile/v0/b/625261456364/api.js\r\nserver: cloudflare\r\ncf-ray: 9e8eb19e682556c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-08T07:38:16.649537Z","times_seen":13494560,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":4,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/index-CJpGqE6b.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /assets/index-CJpGqE6b.js HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/download?\u0026from=y7l5a1d.com\r\nCookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e8eb19e5ab35699-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 24336\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Tue, 07 Apr 2026 22:12:16 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 35ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-CJpGqE6b.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9A1fBNjMugqawiTUvB1JiC4fvppDRMB8w9AXPVjxG%2FsvbkuuIonDxX0WteaDcuxMTzD%2ByURrnGoasPw0ALY1y4CWY0zcxocx4dbVY5wIr%2FUEAy68pWTfRjC9f4kIRg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9bcda8f8bfa3543a2fafc8c2db090bf7\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2954274,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63694)","md5":"ae7ec4afa2aeba51ead7e476a04794b2","sha1":"f097c964edd502be71ca132523359af2a19bc142","sha256":"550b06113dcc96a47708ff7f1e5f0acf1556da064be04e01bdd0647b0a30aa7d","sha512":"290af62d631e077247372964e9c603f8afd0abaca4083dc631cccf9339b7e79ec0c0e123ccc75f3d275ce07f6aa2890b42ffeb9f128f6975c82dbed4cc0d867d","ssdeep":"24576:3lK8uOb3GjOv3zOfQPopqx4NCfjU7ns0PD1tziM4YR5ss0nMHZSXotiqDIoYXVKy:3lK8u83GjOvzOfQPopgFjU7ns0PD1tzG","tlshash":"3f354c1471683132adf635acf8fb767221481e08d646c4bdf2ba9c953287d84a137b7e","first_seen":"2026-04-08T04:58:29.436282Z","last_seen":"2026-04-08T04:58:29.436282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/625261456364/api.js","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 19:28:54 GMT","end":"Tue, 19 May 2026 20:28:50 GMT"},"fingerprint":{"sha1":"83:61:74:2B:F1:77:DF:F1:68:3A:D1:0B:F1:05:8B:A7:0C:B7:B3:C2","sha256":"AB:12:F8:E1:72:C8:68:10:80:3A:9F:9D:C6:84:76:A4:16:06:31:A9:10:4A:34:B0:5D:62:B4:80:3D:63:F3:C5"}}},"request":{"raw":"GET /turnstile/v0/b/625261456364/api.js HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://y9p7c8a.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:53 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nlast-modified: Thu, 02 Apr 2026 14:51:17 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e8eb19e783656c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (52566)","md5":"585e191a6ee01c91dc05d3add715ee81","sha1":"4896d5cfcee005c4691706ccac5fa3be0476c4f8","sha256":"d473d14290944b1a9137706db7bedf3bbde49020f3e7ab2fc9211391799e5833","sha512":"a5fb1a86ba0e4c09a2b549c8ec8eba752ce0daf82155dcf93ce68e6714e4390855634f9ffb4f6e0d1b73a5b14ba25f8af67449bb3beee511c768cd59aee1a997","ssdeep":"768:bCF+N2LM/muYLtHMZeKqAGeRHLuGSrcNsh4QJ58Q9ZqysF4pY1DrF99KypgiaiUu:72I/mzLtHMkUGeRrB0h4k5Ns2s","tlshash":"9f333b583156797226d980e0617fa3837326793af94ccc50e427cd66266cecad233b7a","first_seen":"2026-04-03T10:44:57.13752Z","last_seen":"2026-04-08T07:45:42.699683Z","times_seen":6995,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Share+Tech\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Share+Tech\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":413,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e445997a42031fd5f59241d9e90a2488","sha1":"1c85d73b72928eba91ee394d01138ed57e6d234e","sha256":"f2061f59c6fa22d7e1f7e8089baddd9500d980f6ca7062687aa53b4f079d2612","sha512":"ba6cb5cf8c7a66c0aa5736bd831ff470db2388d5ec56ff4bbfa5830199ab1e06dd04f905b433ec0d4687d59b36e8551c6893f8a391204ec2974f15ff6af91f41","ssdeep":"","tlshash":"b7e02b4118276514e6931dc1129e7a31ef0fa0946444d9659afa14d8bc4ac565357b1c","first_seen":"2025-09-14T10:40:02.434998Z","last_seen":"2026-04-08T07:40:13.922851Z","times_seen":2456,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/download?\u0026from=y7l5a1d.com","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T04:57:52.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /download?\u0026from=y7l5a1d.com HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:53 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-cache-date: Wed, 08 Apr 2026 04:57:53 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: MISS\r\nx-data-time: 426ms\r\nx-from: R2\r\nx-original-cache-control: no-cache\r\nx-r2-path: v208/index.html\r\nx-version: v208\r\nset-cookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY; HttpOnly; Secure; Path=/; Domain=y9p7c8a.com; Expires=Wed, 08 Apr 2026 05:27:53 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wlyLFhKoOb5UlfzreShVCbo%2BC0NqIZeG%2FvlWxrweFKdFpJJPfcqQJx5fE5UaM4RQXZ5FcDhEqXdSpipsRQv511wc5trtOsrh65%2FFYOnfajKycIM%2BaE%2F%2Fm00YKoqTaQ%3D%3D\"}]}\r\netag: W/\"0abb10dd31773bd219f5992b80968441\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e8eb19a3b870883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Alibaba Cloud CDN","description":"Alibaba Cloud CDN is a global network of servers designed to deliver high-performance, low-latency content to users around the world. It is a cloud-based service provided by Alibaba Cloud, a subsidiary of the Alibaba Group, that enables businesses to accelerate the delivery of their web content, including images, videos, and static files, to end-users.","website":"https://www.alibabacloud.com/product/content-delivery-network","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["CDN"]}],"data":{"size":35858,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (30822)","md5":"51b1a5c660d1c4093f855ffe3d60d7b5","sha1":"0c68381d240ec215b81d218598c9015734524010","sha256":"c9cfd6c9b6c948db84bad92ce78d1fa5487f58c40242722a7b2b52239ac6bb9c","sha512":"5a5bef9db3fbf6f2781011caebdc24e1f06344b1c5548382429a49f8221e01566447d129bb2509124f0fa3ff16fbc0beee00b3f9e663f87d471d69ca8daf9c4c","ssdeep":"768:lPoBt+aSh1i19M3wk4sNt0sWZIH1jYuKRJvFS68yYOA9RXC49U9b9pV1QxOkdWw:uH+aShXstnX1u","tlshash":"7af22dd7868e48081bda3222c58564d50baa5a4f5cc5fb40b3cf6e366b99fc0370b67d","first_seen":"2026-04-08T04:58:29.438002Z","last_seen":"2026-04-08T04:58:29.438002Z","times_seen":1,"resource_available":true,"data":null}},"time_used":586,"timings":{"blocked":64,"dns":46,"connect":1,"send":0,"wait":457,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/vendor_modules-9b7WOkhW.css","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /assets/vendor_modules-9b7WOkhW.css HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/download?\u0026from=y7l5a1d.com\r\nCookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: 9e8eb19e5ab65699-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nage: 10405\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Wed, 08 Apr 2026 02:04:28 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 35ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-9b7WOkhW.css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JcoIAM2mBplYxhA0Y9%2FaeBGQxIM%2BDBSvkr%2F3Bsd9WY6o936TNV7jTLqICk6ixBKKwCiOqxZey%2Bovkx%2FAkZaK8%2FKTYrM9HNeq7JbHMeE2x23PgcTX0iKP7HDM40l2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f4368789de81fbaab97e1a5baa502a74\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23223,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (23222)","md5":"f4368789de81fbaab97e1a5baa502a74","sha1":"e59868ea619fdbf9f91b6cba557cd55a256ecaf8","sha256":"dfea356615307ae05cd31120263fe556b65b19a1e030f991d0b0fd6ab398aae5","sha512":"ef5df72676ac899f15f560096b8bf60ab65e248f9577c6931bf3e4f1ebbcd41c11d10dc425fa34de8b6ced93e1e36831f9fd6959c9a58b10311b2234f1393975","ssdeep":"384:nPp2CsOG40aC4q7ECCACqLJCpJi7WaAyzVOn4D9fCNSf7UNGKwZtLCheVa7GC874:nPpZsOG40l4q7XCrqLMpJi7WaAyzVOnn","tlshash":"e3a21042f58015aaafb700b5998db73cbb7aa4c0fa076ed62140f3651bcf6f70597128","first_seen":"2025-04-19T03:35:33.17216Z","last_seen":"2026-04-08T07:40:13.934482Z","times_seen":2728,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/index-CJpGqE6b.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /assets/index-CJpGqE6b.js HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://y9p7c8a.com/download?\u0026from=y7l5a1d.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e8eb1a9791b5699-OSL\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nage: 1\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Wed, 08 Apr 2026 04:57:53 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: HIT\r\nx-data-time: 16ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/index-CJpGqE6b.js\r\nset-cookie: __cf_bm=lbknotWZFf93tgWJChc4SQUmsCHMjdcIWqLib6akGzY-1775624275.434497-1.0.1.1-U8p3YLKDc5W_NKr0kzdZ95busMdfGeg0uv4TL9HLeNpQQfXnGUk2aSSRwLW4rUSV2O28u4qAfoA.i.N4Lc.oKNh9gzoSqTfVljnyz5DxOBWJysCA0v_ax9ERv_NHHyVV; HttpOnly; Secure; Path=/; Domain=y9p7c8a.com; Expires=Wed, 08 Apr 2026 05:27:55 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LzF4xdUx2YOoek%2FU%2FZwNQrqI%2Bv8WBNv0vWCu482G1WAFwbmdob%2FkdyNllqbTHtp9WGIXGEpvqCiaQ5TbjqW%2BPoO4XAHQV%2FcWy6RN5Y83ImzFe3eufaKaMBbnSL%2B%2BXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"9bcda8f8bfa3543a2fafc8c2db090bf7\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2954274,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63694)","md5":"1dab12fcdec1321f2d73301fbe647ce0","sha1":"771eac73844c95a76be918a047954a73a4f66afb","sha256":"707b88af0f9060b4214ed331507bf8d1a12c385ff1141b18c30be84e5195b5c3","sha512":"e3449bd41736b21783fa4a2834ceef960f7b1bc4020ec5be56683d53833de9b7128983927552222022506f2607db9e89ae2b60cc034dfbd58ec8f3c76ddb1871","ssdeep":"24576:3lK8uOb3GjOv3zOfQPoppx4NCfjU7ns0PD1tziM4YR5ss0nMHZSXotiqDIoYXVKQ:3lK8u83GjOvzOfQPopPFjU7ns0PD1tzk","tlshash":"63353d1871683032a9f639acf8fb797221481e08d646c4bdf1bb9d953287d846137b7e","first_seen":"2026-03-21T02:51:36.836093Z","last_seen":"2026-04-08T07:40:13.941742Z","times_seen":64,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Saira:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Saira:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3987,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"246b884243ad78331c25bee413c87635","sha1":"27b39458c291175631348fe91d4bcb11fbcbadda","sha256":"2daa0b75af27e4c6459213fd9b27b7bf8005f8d787fc3c2dcc419cac3328277a","sha512":"4e4a380b4f060edff0e33d92a2a4234b3d2efc897bdc741e4d10a503124f52d729b5631194a5b5685caf2f3dbbf362bf7fc575ffe98dab89df827c0306ab4aa9","ssdeep":"","tlshash":"b581bb90442a9044ea574cc523df7e72af8eb0257054d5797ffd28989ceec32532570d","first_seen":"2025-11-19T03:47:26.841816Z","last_seen":"2026-04-08T07:40:13.932623Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Smooch+Sans:wght@100..900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Smooch+Sans:wght@100..900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1281,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6bc9cecd1b7fa846febdcf65dc5df15e","sha1":"d95bb74efb0feedc043beb2b8fcca2242a0b257c","sha256":"11df099f5c41493ca5be2126517978eb204707e7222a9b6f2ca5f2a9a9c4be00","sha512":"0c88fff713c785573abe70dfdbac1574c48c9fdf29b456a3f9eeef9664da5c804c9ed0c0d41579298ce5fdcba6e2417892630609423cc5fbc9fbc609e3fb6a58","ssdeep":"","tlshash":"dc210f93046b9104e6870ec622ce7d35ae8fe1213041e579fffd1889adbad296371b0c","first_seen":"2025-09-14T10:40:02.437373Z","last_seen":"2026-04-08T07:40:13.908476Z","times_seen":2616,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/locale-pt_BR-BIQIdlKS.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:56.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /assets/locale-pt_BR-BIQIdlKS.js HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/assets/index-CJpGqE6b.js\r\nCookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e8eb1adfbe25699-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9435\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Wed, 08 Apr 2026 02:20:40 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 23ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/locale-pt_BR-BIQIdlKS.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FNujoISC8xnhn3L4TSSzTtPK4%2BVUBfPJj4eZNDP%2Fq3J3aN4CMsqKrFbdgEO6exekN9UNnVuESRqnesvv%2Fhv%2Bf%2BtfDjeYC8z149%2BxI%2BgNQtZXt4qmyip4ss5RyRU6xQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f9abc86d2a00cebaaa37f76505b575de\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85108,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64059), with no line terminators","md5":"caa92da8ca225062382801815bba8763","sha1":"de3046af1611d9d53dcacc63591136e21c05ce7e","sha256":"b4ed73cb7f7e6214e06685362c02da93ccacf3627b8f87b63f9a4a8f3c37a331","sha512":"d186319a6d7690b4b027c50704cda0b966a6ac6710bf06cf144344d1f2943028f3ad1db9c0947e545b11cbdc5395cfb9167f24dc9d53d741cd13b598fbf60a59","ssdeep":"1536:Jadw39hEoI1jIRbADxxlhTaiW3zze4thOVF4fGdeFt5ms48pvDmC6LD:kM9algiZaiWYbMYsQD","tlshash":"4f83083e2ecd023596a353417f4fbe0366c87187e8c5c86b8aeb476961d9ec0e45e325","first_seen":"2026-03-18T15:04:44.065166Z","last_seen":"2026-04-08T07:40:13.909679Z","times_seen":315,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:56.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://y9p7c8a.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Apr 2026 10:17:38 GMT\r\nexpires: Fri, 02 Apr 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 499218\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-04-08T07:38:14.742569Z","times_seen":68836,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":139,"dns":1,"connect":29,"send":0,"wait":29,"receive":38,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload-us.f-1-g-h.com/s3/app-icon/2070999/55518.png","fqdn":"upload-us.f-1-g-h.com","domain":"f-1-g-h.com","tld":"com"},"ip":{"addr":"104.18.13.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a5b48714.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 14:37:21 GMT","end":"Tue, 23 Jun 2026 15:37:14 GMT"},"fingerprint":{"sha1":"E6:01:1A:53:3A:6B:2B:99:74:E3:5A:80:07:6D:25:C7:A0:4B:4A:51","sha256":"90:06:1E:F8:FB:FA:EB:57:BF:CB:6C:05:1C:CA:3A:2E:3D:D4:FA:F7:BA:A5:CE:21:95:92:C5:0D:19:23:FE:0E"}}},"request":{"raw":"GET /s3/app-icon/2070999/55518.png HTTP/1.1\r\nHost: upload-us.f-1-g-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 317444\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\netag: \"24ef0349164e6b5f72f07f2e5115ff0a\"\r\nlast-modified: Wed, 11 Mar 2026 03:55:50 GMT\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nage: 551\r\nexpires: Wed, 08 Apr 2026 05:07:55 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\ncf-ray: 9e8eb1a70ec77131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"24ef0349164e6b5f72f07f2e5115ff0a","sha1":"85b088771d031defb22b69ed96b7c64719d5fe6c","sha256":"cec80a322d7e3d7409c3f1bbe0565ebf37d5643842b4425c7d6157c0b705fe97","sha512":"8af921f08e52303c9da79e14abbc44675db65bfb0288f03d8be8274563b7e348ba6d56fd4744a56532c03263ff164d593ee8bafc6cc9bc9244486de3adf301a1","ssdeep":"6144:zVkmU/gScwz3AbAl8euZ7hTcglYolEx85NZj+R35lpawew9V5yeNarX8N:hk7/h1A8lTuZ7hcgldlEINZCR35lPF9/","tlshash":"9464231754b46b08f54f130792d3a19d772e46eaaf95190bfea9c80f3d1d0b1980af8b","first_seen":"2026-03-15T10:23:14.046953Z","last_seen":"2026-04-08T04:58:29.442791Z","times_seen":17,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":21,"connect":3,"send":0,"wait":140,"receive":13,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b3aa47c04f634f874e9fe24da03e44c2","sha1":"d6233fb889991ce8ab543cf6a3dedfa597e8c8bd","sha256":"1c87a812c578a613533eee262e5564ff39d369f62a5d9d8f0cda4daf92755241","sha512":"930654c03131317f868a8b908537b51f208c654d835caa93d129f0371820222f21a88cca41646271d967b881c7b44a65f8b0b699555d51b43cb8e2f93b831b18","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKj:Xxyll3","tlshash":"2ec210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.045053Z","last_seen":"2026-04-08T07:40:13.935399Z","times_seen":741,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons+Extended","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /icon?family=Material+Icons+Extended HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":612,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7018b90a0b4af059254573bfaad0b3c0","sha1":"21005aad8ea9cc2218265105d4bca7bede012990","sha256":"939d23fa38a234e289a02eba362cb98351b28de6868212a1f0450bcdc4cb1e39","sha512":"de7cf24c3c9d55aa7955662c930cc8c20abe2d4e7e036af63eca0115bcd9ab943ff228815088d1d228087ac0f525b0603269ed6ce4fa227ec4cf6cda5f597b90","ssdeep":"","tlshash":"90f04c556e57698665a14c57334f3f124d1d401ba90accfd8bc10d0c5cfe9bb538ab0e","first_seen":"2025-09-18T01:33:29.712118Z","last_seen":"2026-04-08T07:40:13.936239Z","times_seen":4368,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-04-08T07:40:13.937499Z","times_seen":32413,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Prompt:ital,wght@0,400;0,600;0,700;0,900;1,400;1,600;1,700;1,900\u0026display=swap%22","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Prompt:ital,wght@0,400;0,600;0,700;0,900;1,400;1,600;1,700;1,900\u0026display=swap%22 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11512,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a0c1c6b3c2cf85e6844b3b880cc2ce3e","sha1":"814890f8d7b34836c16f0c8c98233efcfec0290f","sha256":"dc959e820ef9dbb831620e21e8c056e0de93d09a5e465f12377b8f7af6149e8d","sha512":"4a4c8d18bcf2358e40f90260f62d57b8b0f7ff1c8389546facd1a24fe97f75d9070a0a82c203630686cc83d97d6f7d8a991eeaf9adbb53864c4fbf290eaddd59","ssdeep":"192:GkkskZkyLkX2ns2h2OL2ip1spfpsLpsTWsTcT3LTTfGefrLH0/4lBnf0Yi7tdkG4:GFs03KAsupRLs9+eas4nX5F2w","tlshash":"a332abb1052ad540a7831ec663df7d36cf8eb165b0908436affe1d88fda6c22526075d","first_seen":"2025-09-03T04:41:06.141904Z","last_seen":"2026-04-08T07:40:13.918744Z","times_seen":2625,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=Prompt:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:54 GMT\r\ndate: Wed, 08 Apr 2026 04:57:54 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32402,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f56f25fe74b525652cef3b25ad44adad","sha1":"853baf42fe3870c440e75943df69e1a84ec86bc4","sha256":"66b0fc3a90229a3f56d0df87208c6d7dcca4e5bca850029a64528d06d57b5de0","sha512":"cb5c524b2fc5702e5e4bc81b0a09374775b88b19c431cacd5c7a6f850d8f1506966cf2c349726690d132be9afce67aacd4ddec432cbd8c0116c9ab7fbdec9188","ssdeep":"384:vtfcHjg8ciIg3is3X3D35CsAfXosWBZTsmNUUsKVdqso3/5srQICsAfX4sGRcnZD:83HDaZzcC","tlshash":"f9e2b8b1042bd500ea871dc627cf7e369e8eb1667490c579affd1888eceac22532475d","first_seen":"2025-09-14T10:40:02.408446Z","last_seen":"2026-04-08T07:40:13.940313Z","times_seen":2673,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":144,"dns":1,"connect":7,"send":0,"wait":23,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/assets/vendor_modules-RoSZvsDR.js","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:54.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /assets/vendor_modules-RoSZvsDR.js HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/assets/index-CJpGqE6b.js\r\nCookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e8eb1a24d475699-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 24337\r\ncache-control: public,s-maxage=3600, max-age=432000, immutable\r\nserver: cloudflare\r\nx-cache-date: Tue, 07 Apr 2026 22:12:16 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 17ms\r\nx-from: R2\r\nx-original-cache-control: public,s-maxage=3600, max-age=432000, immutable\r\nx-r2-path: assets/vendor_modules-RoSZvsDR.js\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dfy%2B8YcvIv%2FkDV01P%2BPy2VNaQAvztX%2Fz0k5%2Fa6uINQLUDKZqAVfPwvTqZP%2FjT5xXW%2FNo4UBo4Bsc7AKW7bVaTekhBOdZ7ou9P88oR%2B%2F3nxs89eGXvlbfaYBMCUz2jA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"6d18294e46b2fab8f4c84bd919fb2bc2\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2563750,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (41635)","md5":"bc93ec04e49ec4e2ca526d7d1b6e2362","sha1":"b7afefa9369ea00c52260e5f810157f172164da2","sha256":"e40a4cd6a14d69b4c9f6e012e9e8abb0a244fde0b13fed81d3e4b6f1bfa6f6cd","sha512":"2c50ff262c06a644ff7aec36d1f1634b9cc95bcbfa3d52244b41c81c8a6230a6f5a59c5a643efebca75464f5fd8e53393b5cfa7ee234348ddfb22c7e224be60e","ssdeep":"24576:tuZdmxmJjfAgCnEryEOwd/nQ9L6TpXxYlkPZBkCXe:tudSmJj4gCV2d1xYSle","tlshash":"f9255c94b14035398bbb8ae581aa6100b3359482f80648ddf56ad8c74fdffc9137bb79","first_seen":"2026-03-21T02:51:36.819348Z","last_seen":"2026-04-08T07:40:13.924453Z","times_seen":68,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"upload-us.f-1-g-h.com/s3/app-icon/2070999/55518.png","fqdn":"upload-us.f-1-g-h.com","domain":"f-1-g-h.com","tld":"com"},"ip":{"addr":"104.18.13.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"a5b48714.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 14:37:21 GMT","end":"Tue, 23 Jun 2026 15:37:14 GMT"},"fingerprint":{"sha1":"E6:01:1A:53:3A:6B:2B:99:74:E3:5A:80:07:6D:25:C7:A0:4B:4A:51","sha256":"90:06:1E:F8:FB:FA:EB:57:BF:CB:6C:05:1C:CA:3A:2E:3D:D4:FA:F7:BA:A5:CE:21:95:92:C5:0D:19:23:FE:0E"}}},"request":{"raw":"GET /s3/app-icon/2070999/55518.png HTTP/1.1\r\nHost: upload-us.f-1-g-h.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncontent-type: image/png\r\ncontent-length: 317444\r\naccess-control-allow-headers: *\r\naccess-control-allow-credentials: true\r\naccept-ranges: bytes\r\netag: \"24ef0349164e6b5f72f07f2e5115ff0a\"\r\nlast-modified: Wed, 11 Mar 2026 03:55:50 GMT\r\naccess-control-max-age: 86400\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nexpires: Wed, 08 Apr 2026 05:07:55 GMT\r\ncache-control: public, max-age=600\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,HEAD,OPTIONS,PATCH\r\ncf-ray: 9e8eb1a70ec67131-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317444,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"24ef0349164e6b5f72f07f2e5115ff0a","sha1":"85b088771d031defb22b69ed96b7c64719d5fe6c","sha256":"cec80a322d7e3d7409c3f1bbe0565ebf37d5643842b4425c7d6157c0b705fe97","sha512":"8af921f08e52303c9da79e14abbc44675db65bfb0288f03d8be8274563b7e348ba6d56fd4744a56532c03263ff164d593ee8bafc6cc9bc9244486de3adf301a1","ssdeep":"6144:zVkmU/gScwz3AbAl8euZ7hTcglYolEx85NZj+R35lpawew9V5yeNarX8N:hk7/h1A8lTuZ7hcgldlEINZCR35lPF9/","tlshash":"9464231754b46b08f54f130792d3a19d772e46eaaf95190bfea9c80f3d1d0b1980af8b","first_seen":"2026-03-15T10:23:14.046953Z","last_seen":"2026-04-08T04:58:29.442791Z","times_seen":17,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":21,"connect":1,"send":0,"wait":143,"receive":17,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/versionControl/combined.js?v=v208","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:56.337Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /versionControl/combined.js?v=v208 HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/download?\u0026from=y7l5a1d.com\r\nCookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e8eb1af1cac5699-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 33142\r\ncache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nserver: cloudflare\r\nx-cache-date: Tue, 07 Apr 2026 19:45:34 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 15ms\r\nx-from: R2\r\nx-original-cache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nx-r2-path: v208/versionControl/combined.js\r\nx-version: v208\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qbekG9PpqFSIvL4acVtnX%2B5nKPPM0WPZA7BmaVlN0xK7IbGVNZ1EGoQQ9VNkD9KYQd55ruOR5lNR7NADmt2MmQpiMSEwr0JTKNXukPjJZSs8slx1NcnxeV009vmlUA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f6553a65108617ab0f1436b9833bbe45\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16887,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3127)","md5":"f6553a65108617ab0f1436b9833bbe45","sha1":"12575f47719b7204e859e8b949a85c138c5e9820","sha256":"e16f8e8822b8be6b8a671b05ebfc2a1b6036b450a89f25519c54c1c0f303f34e","sha512":"870ed4f6ce8c48543e28048d4a58c818280dc8c4c7c0378c8679e661fef813f0b6608583ea4b186b09c063ab1b8f7200179fae59214f78106ea93995fd8595d6","ssdeep":"192:lJtXatX8sEXZ7D8WQQtir56Y9tozbPlnNmfdIe9MsQxW87GnArHcfE0qp97AETQs:BS87DFi7tE4fdI8MT5AcPXUETNh7KW","tlshash":"1372e91d36b420b542a37219abefd70d3131422b2845dc157b8d83a80fa5ead46b7edb","first_seen":"2026-01-21T19:51:56.02324Z","last_seen":"2026-04-08T07:40:13.919684Z","times_seen":584,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"y9p7c8a.com/versionControl/webPushSdk.produce.min.2.1.6.js?v=v208","fqdn":"y9p7c8a.com","domain":"y9p7c8a.com","tld":"com"},"ip":{"addr":"172.64.144.10","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:56.338Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"y9p7c8a.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Mar 2026 14:56:23 GMT","end":"Thu, 11 Jun 2026 15:56:16 GMT"},"fingerprint":{"sha1":"F4:FD:3B:71:34:1D:3B:A7:3E:2B:7B:B5:E2:BA:16:FF:B9:37:14:87","sha256":"E4:B1:D3:AA:9B:A8:67:F9:41:B5:A3:15:13:E5:02:88:19:B1:B8:B9:B4:0C:6B:E6:0C:4C:05:36:C0:19:32:6F"}}},"request":{"raw":"GET /versionControl/webPushSdk.produce.min.2.1.6.js?v=v208 HTTP/1.1\r\nHost: y9p7c8a.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/download?\u0026from=y7l5a1d.com\r\nCookie: __cf_bm=fNeq0245GShOBYfKOtbPUZ.Lp8jGqKrpS.rSzUqQmVc-1775624272.9961288-1.0.1.1-86UlEjLVIOTr6eyoHQ.m77xIT_a5279KtHM_TESSxlLEz_N7n2NUg0N0v0LGbe2xjVap0LzKqgMEX99MdxtbMMMvWlq8CKvrV84VZabAAO_u6srXuKnkwcoui8dS4EPY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 08 Apr 2026 04:57:56 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e8eb1af1cae5699-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nage: 9435\r\ncache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nserver: cloudflare\r\nx-cache-date: Wed, 08 Apr 2026 02:20:40 GMT\r\nx-cache-source: R2-CACHE\r\nx-cache-status: STALE\r\nx-data-time: 19ms\r\nx-from: R2\r\nx-original-cache-control: public, s-maxage=600, max-age=432001, must-revalidate\r\nx-r2-path: v208/versionControl/webPushSdk.produce.min.2.1.6.js\r\nx-version: v208\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPX5MhZigvxbVOFKd0aFIX96dXMP5s2du2ichx0a4AIsnL6GQDh2Ifl5RMjCeYNwElFPoQ9azMvQtVUqrg21O7RpugDnTKgMM4DlpeAhv1jwSUu7%2BOrXRkhnqR2tiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"252eff85e75f98cab2ed0affd0f24ed1\"\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61393,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (61099), with no line terminators","md5":"252eff85e75f98cab2ed0affd0f24ed1","sha1":"e1a739fa70c57e9ef90f33fc4ab52fcf387ad13f","sha256":"1ee4947bae28f87f22e0f400ac7ae540d0162c4102402eaafe7d3aa6a3420c7e","sha512":"55efba3ebdc87dfeb1933208acd1f727b126433e26a1b747eff534620804979acaf50139674e7d5ebab2baa3bc962b9495224f15f461a01e56b76ad269060d12","ssdeep":"1536:7ROuwOy/RQEO6odontXPi2kJP33+NR5qlr:dGBSEOLdyXPeF3+N+Z","tlshash":"92534d9ef589753503ebb054c53f0402b6332c15a64282a8f6acd5d6fc795cea063fba","first_seen":"2024-07-30T04:40:36Z","last_seen":"2026-04-08T07:40:13.910952Z","times_seen":2747,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"y9p7c8a.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Roboto:ital,wght@0,500;0,700;0,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"8fde1366ef7b5fbd87212493c7710f10","sha1":"de3c7deb47cdb042fd5640edf4df660425a7e166","sha256":"6a256702c691c606c6126cc73c01a1515977a15f64e2a96ae2635ab0b3a64d12","sha512":"339f787611f6a8349aa8099420bccbe4dcc121f63c5928a6e5a64996b7c13e0fa801f10be065c1f7044c1f431347f686fab2892f22a8f7f8ae4452192b7c8e7f","ssdeep":"384:z9fD9O9d9B9ya9/qY4Q9G9m949fd9k9D939yQ9/qY4a989c9+9fn9y9x9t9yG9/4:z5svvYaR7AIWP2ZZYQRVKyg1A77YGRvc","tlshash":"5b721fa1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.041248Z","last_seen":"2026-04-08T07:40:13.926011Z","times_seen":561,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"o.alicdn.com/captcha-frontend/aliyunCaptcha/AliyunCaptcha.js","fqdn":"o.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.50.180","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:53.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 28 Nov 2025 03:07:13 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"01:40:62:EF:8C:E5:C1:8A:19:4C:8D:B6:F5:C2:24:7F:DC:C0:9C:8A","sha256":"60:3C:41:A0:78:62:E6:5E:82:F0:FA:CF:5C:C9:D3:22:E4:64:EE:1A:EE:C7:CC:BA:DD:25:08:90:6F:CC:C4:F2"}}},"request":{"raw":"GET /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js HTTP/1.1\r\nHost: o.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding, Accept-Encoding\r\ndate: Tue, 07 Apr 2026 08:47:14 GMT\r\nx-oss-request-id: 69D4C49203265602C746E87E\r\nx-oss-cdn-auth: success\r\nx-oss-object-type: Normal\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=604800,s-maxage=86400\r\ncontent-md5: O17h1mzvEAQI5t4yPhGHwA==\r\nx-oss-server-time: 17\r\nvia: ens-cache16.l2de4[227,227,304-0,H], ens-cache14.l2de4[230,0], ens-cache14.fr4[0,0,200-0,H], ens-cache6.fr4[1,0], ens-cache21.fr4[5,0]\r\netag: W/\"3B5EE1D66CEF100408E6DE323E1187C0\"\r\nlast-modified: Wed, 21 Jan 2026 05:51:50 GMT\r\nx-oss-hash-crc64ecma: 4210720851302824767\r\nage: 72639\r\nali-swift-global-savetime: 1775551634\r\nx-cache: HIT TCP_MEM_HIT dirn:-2:-2\r\nx-swift-savetime: Tue, 07 Apr 2026 08:47:14 GMT\r\nx-swift-cachetime: 86400\r\nx-assets-grey: false\r\nx-assets-path: /captcha-frontend/aliyunCaptcha/AliyunCaptcha.js\r\naccess-control-allow-origin: *\r\nx-er-version: 0.0.6\r\nx-assets-pt: pt0\r\ntiming-allow-origin: *\r\neagleid: 2ff632a917756242739326875e\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":223620,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3b5ee1d66cef100408e6de323e1187c0","sha1":"c382cd85a7f96d75826226b3ad9f9dbb35e53f67","sha256":"d5579b8af45ff8001a79df83a71e55f1b21c945e93f37801137b7583a78c885c","sha512":"a449a166dd6e95a70e8cd38162544014538e46d2a6d295f2ad6d97746d6b75faabee6595512c3e6bf9973bc88ec6dab7f3789b9259f866c4b5609b3d668ba941","ssdeep":"3072:JCRXOcW1F14CPXokzRF1gpi/gdrEsjS7P:wXOl1F1lvL1gpix7P","tlshash":"9624e98db1c5b0e94fa364a4012f640be0bb6a64744dd9d1fbb1d4c5ac79e8ea033e5c","first_seen":"2026-01-21T08:03:49.795351Z","last_seen":"2026-04-08T07:40:13.933573Z","times_seen":1223,"resource_available":true,"data":null}},"time_used":633,"timings":{"blocked":297,"dns":118,"connect":28,"send":0,"wait":32,"receive":0,"ssl":152},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Alfa+Slab+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://y9p7c8a.com/download?\u0026from=y7l5a1d.com","date":"2026-04-08T04:57:55.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Alfa+Slab+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://y9p7c8a.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 04:57:55 GMT\r\ndate: Wed, 08 Apr 2026 04:57:55 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1285,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b31e2904a6e32f4161586436600b5734","sha1":"60b00739b894c9805dbbeaf89cba68072d62ce15","sha256":"eb5bea77ad59277fd1b845a6563a67f346dcad0b8e66b86c5528f00df5091786","sha512":"b7cb8d7a1111e502e91384b5fd29b2dcd70dfa1f7d48f25269b26cefe676c15e46e1d164744adeec719b3f2131e62d171b57c883f53d7bc56545213b87481719","ssdeep":"","tlshash":"2e21cd9204b69a00db471dc623ce3d359f5f61406550a93e9ffe0dc8dc9ac2ab325b0e","first_seen":"2025-09-05T02:27:06.478426Z","last_seen":"2026-04-08T07:40:13.931528Z","times_seen":1827,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}