{"report_id":"2e59e0cd-3f87-4a35-8619-3a2b4cf25ae0","version":6,"status":"done","tags":[],"date":"2024-07-23T20:34:37Z","url":{"schema":"http","addr":"www.powerkaraoke.com/download/powercdg2mpg.exe","fqdn":"www.powerkaraoke.com","domain":"powerkaraoke.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"about","addr":"about:privatebrowsing","fqdn":"","domain":"","tld":""},"title":"about:privatebrowsing"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T08:32:12Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"r10.o.lencr.org","ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2020-06-29","domain_rank":0,"first_seen":"2024-06-06 21:45:11","last_seen":"2024-07-22 18:12:14","alert_count":0,"request_count":7,"received_data":6213,"sent_data":2289,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.powerkaraoke.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"domain_registered":"2002-01-20","domain_rank":0,"first_seen":"2017-02-13 12:25:33","last_seen":"2024-04-17 02:13:31","alert_count":0,"request_count":4,"received_data":53711964,"sent_data":1553,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dnl.powerkaraoke.com","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2002-01-20","domain_rank":0,"first_seen":"2019-07-05 00:09:17","last_seen":"2024-04-15 18:15:47","alert_count":0,"request_count":1,"received_data":53692853,"sent_data":513,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":[{"md5":"473ea48f9b9d087cd23b2c9066443ef9","sha1":"1ea1510a91862d4c57fa55ac82804f151133ae81","sha256":"735e472ce19a9de9f305366badfca810c8dcebf4d3929ecdf752337bbadf8bc0","sha512":"3ea7563685f76907c5f57c714d41a570cda2defc0b8855d3091ac938fd682f6771b18f6ad9b44b2e3ad9d56cd44b8bebffab380a6785f239b58997d04d9fd30a","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 10 sections","size":53692360,"url":{"schema":"https","addr":"dnl.powerkaraoke.com/ultimate-cdg-video-converter-setup.exe","fqdn":"dnl.powerkaraoke.com","domain":"powerkaraoke.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"archive":null,"alerts":{"urlquery":null,"analyzer":null}}],"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-07-23T20:34:28Z","timestamp":1721766868,"ip_dst":{"addr":"192.169.69.25","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":47152,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-07-23T20:34:28.396617+0000\",\"flow_id\":33455964369027,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.18\",\"src_port\":47152,\"dest_ip\":\"192.169.69.25\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"systemsecureserverprotocolgooglegood.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":483,\"bytes_toclient\":116,\"start\":\"2024-07-23T20:30:23.405635+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":null,"eval":[{"md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","size":0,"data":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null},"http":[{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:33:59.064169654Z","timestamp":1721766839064,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"14D1B1BFFC6D4DCE79E0B1514BC55D2EBA45ECE9D721749117735DF203D7459F\"\r\nLast-Modified: Tue, 23 Jul 2024 07:16:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=4794\r\nExpires: Tue, 23 Jul 2024 21:53:53 GMT\r\nDate: Tue, 23 Jul 2024 20:33:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"2270944df735d7ff634f3a64d60a5517","sha1":"ab2b76c6ac7a9c2db08048c032917a78a093dc3e","sha256":"14d1b1bffc6d4dce79e0b1514bc55d2eba45ece9d721749117735df203d7459f","sha512":"6fe14b3fb2e25232666461c94ad07a723a5a5534c03585bc48dea0a76a5b8c49428fdfc4e456699ee3aa0cb6e78018a0c76598d848fcd2eb42e674e2cf5cea1f","ssdeep":"","tlshash":"54f00e4e25b0380afb795f051890ae096e746ced3244b1d075800aa35410baa46d406e","first_seen":"2024-07-23T10:04:18Z","last_seen":"2024-08-19T16:00:52.799038Z","times_seen":15383,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:33:59.067003188Z","timestamp":1721766839067,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"5F402181DEC0792EB40A8B380BEA4642E9AE149562170D09B95D30618C8455C1\"\r\nLast-Modified: Tue, 23 Jul 2024 08:21:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=3644\r\nExpires: Tue, 23 Jul 2024 21:34:43 GMT\r\nDate: Tue, 23 Jul 2024 20:33:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"03911e0256a676e8914fa047f1967a62","sha1":"ebb51f90d82d3a9783b8e18ce11dc6760a40d53c","sha256":"5f402181dec0792eb40a8b380bea4642e9ae149562170d09b95d30618c8455c1","sha512":"cebb2da8ee4f7198607deec49387ccf6688e5ee8d37a82614cc41547547e37068494228fed5d35a4e7d018bc66768de6ea0b34391e732b026de3388fe4ea3f15","ssdeep":"","tlshash":"63f00591076df961fbf017191a6af046fe346aa9358039c2b4d45ef464447dcc74c60e","first_seen":"2024-07-23T17:57:03Z","last_seen":"2024-08-19T15:58:44.270379Z","times_seen":9485,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:33:59.541566782Z","timestamp":1721766839541,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"A1AA4FB80B41B76F8C2F837EEF8495B3029D8012BFE126002ED0C161546C697F\"\r\nLast-Modified: Tue, 23 Jul 2024 08:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=19178\r\nExpires: Wed, 24 Jul 2024 01:53:37 GMT\r\nDate: Tue, 23 Jul 2024 20:33:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"712b83dd93b25c422e76a0874e40d710","sha1":"f87414bc899d7af9bd1b60a5b8c616b43b7cad00","sha256":"a1aa4fb80b41b76f8c2f837eef8495b3029d8012bfe126002ed0c161546c697f","sha512":"af6d9b3f164e4c22b62a6ff1a22b46a3b282062801e62030071cce7001332ff8a1f223b523d62c9b3fdcfb8f86c41a7b040c299c79353ee86cbad21dbcab7e11","ssdeep":"","tlshash":"93f0050627e57a117f6099113896ca28a934bcfc544266b06c5447d56840bf7c1440cf","first_seen":"2024-07-23T16:36:01Z","last_seen":"2024-08-19T15:59:04.822311Z","times_seen":14853,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:33:59.864805947Z","timestamp":1721766839864,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"EC10833B9FB7C5780EB8FC408E29234895F7170CAFC513A4AE80FE27D515E04D\"\r\nLast-Modified: Tue, 23 Jul 2024 08:19:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=5916\r\nExpires: Tue, 23 Jul 2024 22:12:35 GMT\r\nDate: Tue, 23 Jul 2024 20:33:59 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"c8259c463773b8bacd8cb5c66f9b285c","sha1":"6afbbe02b1e4e3f8e1ec64085c1697a6532522da","sha256":"ec10833b9fb7c5780eb8fc408e29234895f7170cafc513a4ae80fe27d515e04d","sha512":"a4590e399922bd6c157bce7d38c7f8f5fec568193c01c04a60bbe326c26b2bd3522bada953c3613907025eae596aa189ab2b2489ab20350273b5a0836e9eec31","ssdeep":"","tlshash":"98f005120f5865217f7a663d1ce8e42d2c357bbe345061f0481451a670507f78a9c0ef","first_seen":"2024-07-23T15:16:13Z","last_seen":"2024-08-19T15:59:24.516868Z","times_seen":8436,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.powerkaraoke.com/download/cdgtovideoconverter2setup.exe","fqdn":"www.powerkaraoke.com","domain":"powerkaraoke.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-23T20:34:00.412Z","timestamp":1721766840412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"powerkaraoke.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 May 2024 17:32:03 GMT","end":"Sun, 25 Aug 2024 17:32:02 GMT"},"fingerprint":{"sha1":"F7:F1:4D:D1:A4:EA:4B:A1:1B:CA:70:55:59:A8:5B:4A:88:AE:BC:40","sha256":"98:62:C4:D5:66:FD:1D:A5:51:4C:63:82:F8:42:69:B2:45:02:1F:9E:21:96:50:94:9B:5D:52:C7:A7:92:1E:F2"}}},"request":{"raw":"GET /download/cdgtovideoconverter2setup.exe HTTP/1.1\r\nHost: www.powerkaraoke.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 23 Jul 2024 20:34:00 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://www.powerkaraoke.com/download/cdgtovideoconverter2setup.exe\r\nCache-Control: max-age=86400\r\nExpires: Wed, 24 Jul 2024 20:34:00 GMT\r\nCF-Cache-Status: MISS\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=lC9y1RoSVGFezYzCXlRE582d3v1L9OZFfhpxcl16Kuu5iuKU01aNlhn26UsxGSqAO6hb2%2FI8OTem5hj92k9xfcorir76ZDGdD%2BNH%2B6DY7Sh2tDUw0wM57mrCJhRv%2Bl%2FWxzFOoVufLg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 8a7e72df19d8568a-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":690,"size_decoded":690,"mime_type":"application/x-msdownload","magic":"HTML document, ASCII text, with very long lines (414)","md5":"41a8aec7eb1f6e26c46434b9fd4ae0ea","sha1":"0ee24bc5a283d877c62e057c3f89a0244da6f46e","sha256":"9d6de60d60acfa3dfc0bac625f6a7c81d14a722cb920d33c634ba5054600a48c","sha512":"cda428e5f02850d58074f4c3e680446315a95cd4256c95c55c21fa5f25c4cf3b9823ffc43a3f07eda7e8d6a33471fde01b74f13025ee22e9e5d0ea6b4168b490","ssdeep":"","tlshash":"7d0128ef5c1260e053432b8409d154db7b5f61f790c9a5c51aef66c2c4815f6580f789","first_seen":"2024-08-19T15:57:25.936149Z","last_seen":"2024-08-19T15:57:25.936149Z","times_seen":1,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:34:01.592276527Z","timestamp":1721766841592,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"18EA2FFDF504AAA8501D4A6DE9D56B8811C442CD1D36E4BE4D4EF96599D56CE0\"\r\nLast-Modified: Tue, 23 Jul 2024 07:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13940\r\nExpires: Wed, 24 Jul 2024 00:26:21 GMT\r\nDate: Tue, 23 Jul 2024 20:34:01 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"40fddf2c68d16c233d33b4aa3346d094","sha1":"742a80db38073ddbb885bcf49596bbe4233a4855","sha256":"18ea2ffdf504aaa8501d4a6de9d56b8811c442cd1d36e4be4d4ef96599d56ce0","sha512":"74917e601e1172b51f5eff120c74040e02fdaf86358979ff04c5d8e931813f50c752ea81238342f77ba89c727d7af06c9b293469a0b1499adf87dc9e02b71b0f","ssdeep":"","tlshash":"34f0754107f27412956208963cffcb1d1c205adc370108e528f047f1b801b698744098","first_seen":"2024-07-23T11:46:53Z","last_seen":"2024-08-19T16:00:29.793988Z","times_seen":12455,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:34:01.597294336Z","timestamp":1721766841597,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"18EA2FFDF504AAA8501D4A6DE9D56B8811C442CD1D36E4BE4D4EF96599D56CE0\"\r\nLast-Modified: Tue, 23 Jul 2024 07:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13940\r\nExpires: Wed, 24 Jul 2024 00:26:21 GMT\r\nDate: Tue, 23 Jul 2024 20:34:01 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"40fddf2c68d16c233d33b4aa3346d094","sha1":"742a80db38073ddbb885bcf49596bbe4233a4855","sha256":"18ea2ffdf504aaa8501d4a6de9d56b8811c442cd1d36e4be4d4ef96599d56ce0","sha512":"74917e601e1172b51f5eff120c74040e02fdaf86358979ff04c5d8e931813f50c752ea81238342f77ba89c727d7af06c9b293469a0b1499adf87dc9e02b71b0f","ssdeep":"","tlshash":"34f0754107f27412956208963cffcb1d1c205adc370108e528f047f1b801b698744098","first_seen":"2024-07-23T11:46:53Z","last_seen":"2024-08-19T16:00:29.793988Z","times_seen":12455,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"r10.o.lencr.org/","fqdn":"r10.o.lencr.org","domain":"lencr.org","tld":"org"},"ip":{"addr":"23.36.76.226","port":0,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:34:01.598783652Z","timestamp":1721766841598,"http_version":"","security_state":"","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: r10.o.lencr.org\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nContent-Type: application/ocsp-request\r\nContent-Length: 85\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/ocsp-response\r\nContent-Length: 504\r\nETag: \"18EA2FFDF504AAA8501D4A6DE9D56B8811C442CD1D36E4BE4D4EF96599D56CE0\"\r\nLast-Modified: Tue, 23 Jul 2024 07:17:00 UTC\r\nCache-Control: public, no-transform, must-revalidate, max-age=13940\r\nExpires: Wed, 24 Jul 2024 00:26:21 GMT\r\nDate: Tue, 23 Jul 2024 20:34:01 GMT\r\nConnection: keep-alive\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":504,"size_decoded":504,"mime_type":"application/octet-stream","magic":"data","md5":"40fddf2c68d16c233d33b4aa3346d094","sha1":"742a80db38073ddbb885bcf49596bbe4233a4855","sha256":"18ea2ffdf504aaa8501d4a6de9d56b8811c442cd1d36e4be4d4ef96599d56ce0","sha512":"74917e601e1172b51f5eff120c74040e02fdaf86358979ff04c5d8e931813f50c752ea81238342f77ba89c727d7af06c9b293469a0b1499adf87dc9e02b71b0f","ssdeep":"","tlshash":"34f0754107f27412956208963cffcb1d1c205adc370108e528f047f1b801b698744098","first_seen":"2024-07-23T11:46:53Z","last_seen":"2024-08-19T16:00:29.793988Z","times_seen":12455,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.powerkaraoke.com/","fqdn":"www.powerkaraoke.com","domain":"powerkaraoke.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:34:02.86298111Z","timestamp":1721766842862,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"powerkaraoke.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 May 2024 17:32:03 GMT","end":"Sun, 25 Aug 2024 17:32:02 GMT"},"fingerprint":{"sha1":"F7:F1:4D:D1:A4:EA:4B:A1:1B:CA:70:55:59:A8:5B:4A:88:AE:BC:40","sha256":"98:62:C4:D5:66:FD:1D:A5:51:4C:63:82:F8:42:69:B2:45:02:1F:9E:21:96:50:94:9B:5D:52:C7:A7:92:1E:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.powerkaraoke.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nDate: Tue, 23 Jul 2024 20:34:02 GMT\r\nContent-Type: text/html; charset=iso-8859-1\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://www.powerkaraoke.com/\r\nCache-Control: max-age=86400\r\nExpires: Wed, 24 Jul 2024 20:34:02 GMT\r\nCF-Cache-Status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Emgc5kGMj0XdRBl4nbau%2FQ4ZGYBDvD6%2FpPdC3L6jrVe36KWPi%2BPZmMlbeSjSeV8J%2F5KaenBdXiLHm%2B7Lvd6KLkloEhH%2FqvbvHiTelcrIarA7tfVYqXCc0cGgMKntQlAFG%2FgNufYsYA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 8a7e72ee59b95695-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":237,"size_decoded":237,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"da377150ae41728369276d61d0f4002e","sha1":"a3ec701964fc61680e1756421f8cdc99a632b614","sha256":"6ec97fb7a0d61cd2cc3ce1ba2244bcda229dc0e651d83a24329aae906e76b665","sha512":"a9c83b1581511c836c26a0e986b93ab3753451ac5f377231add97baf6f2e41c2367676fda7e8b59ed069294b5f907641eecd77bf1dc1e88cb1c0010c1a95afbb","ssdeep":"","tlshash":"3cd097fceb4320c0a4533740b8d120e2649e20b0a58545ea25eb28c5c0080728c8a0c8","first_seen":"2024-08-19T15:57:25.937441Z","last_seen":"2024-08-19T15:57:25.937441Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.powerkaraoke.com/","fqdn":"www.powerkaraoke.com","domain":"powerkaraoke.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"","date":"2024-07-23T20:34:08.395728762Z","timestamp":1721766848395,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"powerkaraoke.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 May 2024 17:32:03 GMT","end":"Sun, 25 Aug 2024 17:32:02 GMT"},"fingerprint":{"sha1":"F7:F1:4D:D1:A4:EA:4B:A1:1B:CA:70:55:59:A8:5B:4A:88:AE:BC:40","sha256":"98:62:C4:D5:66:FD:1D:A5:51:4C:63:82:F8:42:69:B2:45:02:1F:9E:21:96:50:94:9B:5D:52:C7:A7:92:1E:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.powerkaraoke.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":""},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Jul 2024 20:34:03 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/8.1.17\r\naccess-control-allow-origin: https://cdn.powerkaraoke.com\r\nstrict-transport-security: max-age=31536000\r\ncache-control: max-age=86400\r\nexpires: Wed, 24 Jul 2024 20:34:03 GMT\r\nvary: Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2Zj3fkq2Ij07YNze%2BhXL6DIw7x6%2BMNNelpBw7G5G6vsytiESkKiQtgNqPz0gL%2FhhVRkFhF38CRBuSkGCrkxUAWtE4a3VV7vyjjpiBW1kwB07NsnTyttcv71x64cO%2FZyuqDFvRwnjYQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8a7e72f0c87a56cb-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":15624,"size_decoded":37382,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (681), with CRLF, LF line terminators","md5":"c9c8acdfd0d699cef5cda67bec4b5e25","sha1":"e5efefde5bde9ab22fb3ef0f3c6c4ef2b5d4d3fa","sha256":"40a2b9cdc06087eabd75f7bf8149fadb41a7afaef5b28d8244d3fdb8328116be","sha512":"9d5b614372c7d2e48203fd4d2b401ed595d95bde31c8d88a5dcdc7550ad6c0f3faeb6bf118bbc0971da6e00799d0ffee44150757fe7e93ea10b5c47f3eda77c5","ssdeep":"768:dXJ8zozKrDMgLO0WBLDOo+jyF6HlW+tvdeMSUt1LuRi:JJ8c9/LDOo+uF4lFtvgMrt1KRi","tlshash":"09f2e861b5dc1e3f022351e1a6b67b16fd8f8937e5068820b1bf03991fe4e48d42779a","first_seen":"2024-08-19T15:57:25.938106Z","last_seen":"2024-08-19T15:57:25.938106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dnl.powerkaraoke.com/ultimate-cdg-video-converter-setup.exe","fqdn":"dnl.powerkaraoke.com","domain":"powerkaraoke.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-23T20:34:00.859Z","timestamp":1721766840859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dnl.powerkaraoke.com","organization":"Microsoft Corporation"},"issuer":{"commonName":"DigiCert TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 06 Dec 2023 00:00:00 GMT","end":"Fri, 06 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"D8:27:68:AF:80:B4:59:01:41:B0:0D:45:9A:A8:26:F3:5E:3D:E8:A3","sha256":"17:CE:5C:E6:34:F8:B8:E7:9E:DF:6B:BB:6F:3B:8C:06:0A:A3:27:8F:F7:7C:91:59:C0:74:A5:D5:98:C6:3F:92"}}},"request":{"raw":"GET /ultimate-cdg-video-converter-setup.exe HTTP/1.1\r\nHost: dnl.powerkaraoke.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 23 Jul 2024 20:34:02 GMT\r\ncontent-type: application/x-msdownload\r\ncontent-length: 53692360\r\nlast-modified: Thu, 22 Jun 2023 11:20:27 GMT\r\netag: 0x8DB7312AE96FF4C\r\nx-ms-request-id: db3da314-f01e-0066-543f-dd9c3d000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\nx-azure-ref: 20240723T203401Z-r16f8dd6b4b8fmhbewan9u0myw000000009g000000005fgr\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":53692360,"size_decoded":53692360,"mime_type":"application/x-msdownload","magic":"PE32 executable (GUI) Intel 80386, for MS Windows, 10 sections","md5":"473ea48f9b9d087cd23b2c9066443ef9","sha1":"1ea1510a91862d4c57fa55ac82804f151133ae81","sha256":"735e472ce19a9de9f305366badfca810c8dcebf4d3929ecdf752337bbadf8bc0","sha512":"3ea7563685f76907c5f57c714d41a570cda2defc0b8855d3091ac938fd682f6771b18f6ad9b44b2e3ad9d56cd44b8bebffab380a6785f239b58997d04d9fd30a","ssdeep":"","tlshash":"","first_seen":"2023-06-29T12:40:23Z","last_seen":"2024-08-19T15:57:25.938766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24463,"timings":{"blocked":514,"dns":354,"connect":21,"send":0,"wait":1249,"receive":22186,"ssl":137},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.powerkaraoke.com/download/powercdg2mpg.exe","fqdn":"www.powerkaraoke.com","domain":"powerkaraoke.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-07-23T20:33:59.656Z","timestamp":1721766839656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"powerkaraoke.com","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 May 2024 17:32:03 GMT","end":"Sun, 25 Aug 2024 17:32:02 GMT"},"fingerprint":{"sha1":"F7:F1:4D:D1:A4:EA:4B:A1:1B:CA:70:55:59:A8:5B:4A:88:AE:BC:40","sha256":"98:62:C4:D5:66:FD:1D:A5:51:4C:63:82:F8:42:69:B2:45:02:1F:9E:21:96:50:94:9B:5D:52:C7:A7:92:1E:F2"}}},"request":{"raw":"GET /download/powercdg2mpg.exe HTTP/1.1\r\nHost: www.powerkaraoke.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Tue, 23 Jul 2024 20:34:00 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nlocation: http://www.powerkaraoke.com/download/cdgtovideoconverter2setup.exe\r\ncache-control: max-age=86400\r\nexpires: Wed, 24 Jul 2024 20:34:00 GMT\r\ncf-cache-status: MISS\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=i%2BmnLFHLn9K9%2F7mK%2FPQtXCT1Rp9gf7OPZcrS7rrlKitIH%2FTfleUzMSONp7Dg1Jx0EU04YTU%2FbfEzFsCoeSx1nX1SH%2Bg6aqEKjKKO%2Fvj5gREMRv2qEBTStbZIclVerxCwZBuOv3E%2FZw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8a7e72dc1bb05693-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":null,"data":{"size":53692360,"size_decoded":53692360,"mime_type":"application/x-msdownload","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T08:11:44.873372Z","times_seen":13414019,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":35,"dns":1,"connect":1,"send":0,"wait":446,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}