{"report_id":"384e72f4-837f-426d-a340-17e8fca203d9","version":6,"status":"done","tags":[],"date":"2025-12-31T08:27:49Z","url":{"schema":"http","addr":"www.googleplaystateagantitrustlitigation.com/","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"title":"Google Play State AG Antitrust Litigation","dom":{"size":37348,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30701)","md5":"cd456996bb8257c7c82de5653b908533","sha1":"923ad6b03c1038c7636d00ca738130136a41a30b","sha256":"ecdb42cfcb55e549a1f41b3cf3bdd034d208991296ed708e6a026246b23949c1","sha512":"f83fa8424d454f382d39e6f6e82c834ae62b4847e3df2ae42475853c66b3aa6165a8c2daaad893b18e7684343cedf2ac6ae5fe3effdae2c94032cd05d670ca74","ssdeep":"384:B6xzYSmu+CdHyl9rqsg9Qaa9r2sg9QaMyH:Rv2dot7R6H","tlshash":"a6f20eb05b40907736d37c5262a33b562316d6b7e34b4a8df1ac65288fc5bbb81e178c","dom_hash":"domhash202c0fe18c2927e0121df8c20ce8d445","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.googleplaystateagantitrustlitigation.com/","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":0,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-04T08:27:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-28T22:17:36.419718Z","alert_count":0,"request_count":3,"received_data":1229213,"sent_data":1435,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googleplaystateagantitrustlitigation.com","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2024-01-08","domain_rank":0,"first_seen":"2025-12-10T15:21:44.607897Z","last_seen":"2025-12-10T15:21:44.607897Z","alert_count":51,"request_count":17,"received_data":2284500,"sent_data":10124,"comment":"","tags":null,"fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-12-28T22:22:31.188277Z","alert_count":0,"request_count":2,"received_data":1033,"sent_data":2046,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-768394904\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"284d054a1f69cfdd7b8fc35e62970893","sha1":"dd17bab1dbb9b6f0ef65518f28c7ff243f2b9c9f","sha256":"1185381e918a2ce9d07f742324cb470f42aa97bbadfcd5a98bd1b5d9b59b23e0","sha512":"d92bd6ec5f29de4c515830fae580de1c845a5170897bc51bb881471de828b238ff305bcbafd37d3e1da60bf9699e3dd535b3e54525778cae71b29ca838f28dad","ssdeep":"6144:OIeJ+2bulKYXV1u99Yye5HDmHYmyBFzfnsy/uLjmWllxei4pC:3cbu7l1mcDnsy0SWsib","tlshash":"f08429ce73c674269396e478403f118ba57b29e2b44cc895f189cce42e74a9a4277f7c","size":398675,"data":"","first_seen":"2025-12-31T08:27:56.274149Z","last_seen":"2025-12-31T08:27:56.274149Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-04-04T02:32:12.530872Z","times_seen":233083,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/main.f0cf541c4a65c903.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e37df2a22d90d7bb4ac091ee4049d56","sha1":"4329536131b7d817b85b097d9e2699e19b8beddd","sha256":"0ecfa8768556367886138431689da181c5061822bd9b3732e0b53f9f262df41b","sha512":"001763199efdac6bf1e40c33866c793fce9d1b1c52f075a56ca28b5f17f5249d99d3f38d4ce0d213dc45d530c41220aecd11d382c404aca35b9f285c06afeb8e","ssdeep":"12288:OIPnpxpbrlQZ/2wmb+pWCwe26oBrDgv3Uu4:OIPnpxpbrlQZ/2wpp2e26oBrDgv3o","tlshash":"27e41a957281b03a87e650ea007b0543f3291985740a406df67cdcee7aadd8d72bbf78","size":688241,"data":"","first_seen":"2025-12-31T08:27:56.311848Z","last_seen":"2026-01-22T19:24:11.034396Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-55RSD6NB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bcf8dd6a69c6d6238089ebd959fe459f","sha1":"fcdccca3c2e59e51e805ca12da4c4e1ea3e37456","sha256":"2e40aa93f20a40afbe1ab53e104ebad55b59d41e7956e5c5403c09c41279f665","sha512":"7b9750657599a9ce9516b957ec3d06f23e2fd39a233f33fbf244a6084560393c12ffabc3e2d8b768ef4997f572240371efde879010430b49d0ddfebfccc1f07a","ssdeep":"6144:gIeJK2bulKYXV1u99Yye5HDmHYmyBFzfnsA/63WllwpRXpI:R4bu7l1mcDnsjWYpPI","tlshash":"9e8429cdb3c6746683a2a478503f118ba57b69d1f44cc895f186cce42e74aaa0237f7d","size":392552,"data":"","first_seen":"2025-12-31T08:27:56.313491Z","last_seen":"2025-12-31T08:27:56.313491Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/polyfills.b17190ee939fe2da.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8390c25c07199a559b3c536bc7ff720c","sha1":"2fbbe7f3fef81bb2a37f7b708a83123f303a7492","sha256":"6b6efed5b02089109a7518570e12ab2a03b8306178339c020497888414df4237","sha512":"4d3fe162c3b46f7244b7cee782c6083b5da40aaaa2952668a155b515b5c0905fbcf193b2b1933875cda1a9b91dcdd229d3784a8b9e440919d22cff9938010e2d","ssdeep":"768:tOqBobxDrBLY16p3fLrtAf4hXaSb8TQv/JZvKoGNpN5S/gIesS1VSTbIcRT07L64:keLxVtKTHw","tlshash":"bbe207d97392b0b687f65ab1d13b8007f73729a0784c48d8f15c89ee3937049a5a6f2d","size":33822,"data":"","first_seen":"2025-12-10T15:21:52.644081Z","last_seen":"2026-04-03T17:04:31.911419Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Y50L9K3T3X\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3b50ff3e58ab6ec6f6a865feca592bd","sha1":"7582ee856a2c9c69bc9ad7d1385924cda402ccb4","sha256":"00cf9faf1824c5cc45b66afb41668d9dc911f6ca5cbdf3e3c7129cd1cb5db7b0","sha512":"91544bd3a5bfa3ca0bb6e5461ea17004965e44a0d48b5ae4f391ec3e53802bd6fbb69f48fbfa40390ace37ddf8e44444377faab3e2d615ec417d4a85eab818a1","ssdeep":"6144:agIe7ma2bulKY/1u99xHDmHYmyBFzvnsyIO6jJWoNPad4FpC1tY:gC8bu7/1mbrnsyc9WbMpB","tlshash":"09941ace73c674269396e078503f018ba57b29e2b45dc896f189cce41e74a9a4237f7c","size":435717,"data":"","first_seen":"2025-12-31T08:27:56.295206Z","last_seen":"2025-12-31T08:27:56.295206Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/scripts.d60c9b5cf811a463.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"725a9d1aca11716b3606bc2195b3bfde","sha1":"66a03cfd130a3e000d7aee3c9cdf09fa0aef08a9","sha256":"cbd67ddd671073bd67d17edb0e0fcd9433daa9c0adec94aa53378e34f196b8aa","sha512":"ec3542f30b625e286197f301c2033107ba496491296355343dda61e34ca362ac374bcd12d76a7a30b6bfcc193bb7968b4e69246ebfc4023aa4285882532156e6","ssdeep":"1536:HLWDtmQLi7oUZrLhl9DE4Ks0J1jsE0GqaEJFaEgguyxfCgKHu+IQv8H4m5b6bOVK:E49wsJfaWFaw4gorm5b6iVvDtArlbN","tlshash":"3fe3098972d1b47246ab6079407f050bb2362c8d980da41cf6a9d8ed3ebcd49617bf3d","size":152863,"data":"","first_seen":"2025-10-27T22:49:40.967406Z","last_seen":"2026-04-03T17:04:31.899001Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b68771d0a4292e9728290c90ee507830","sha1":"90d469580db09fc3a6bcf2ec53fac9ff8f12fda4","sha256":"5205aa150eb10b6fa913cb71a720883a4d5163d368855cc1d6751d20eb565d5c","sha512":"08e982293f381617a1fa6150ff71313dd3e7d3407076e06d615c2998539f1ff9c384306a95e4e39adeae899094bec06d5ae6c7176533bb32d2dd587bb7b6cb10","ssdeep":"","tlshash":"73f0ab8b75da14342d4b90365b6c8e283152326ab0848037bcfc88356f082ae0966bf8","size":441,"data":"","first_seen":"2025-12-10T15:21:52.680084Z","last_seen":"2026-04-03T17:04:31.914463Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/runtime.4553d697efc3a5ce.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b63b73bbd7d3814ad4cbc7c584a8381d","sha1":"96fb8152e5a8be8712ef93955a9dcf0f5120ebc2","sha256":"20ddb620feb3b8b2384c6f81e5c01215e6898b1908d2130e198adf12b1b1c09a","sha512":"5211e372c50df5c52897913ba54583540d8685e3bb89df2918e4c5da4a67f405eb1d55643ba446cf51733e18850c96fdf97afa19177d2cd4e380d85635e549de","ssdeep":"","tlshash":"5c1186c0a294d4e62be9e4404a0dd0c3aa231533006cecb1db42e197e0259b2409dd30","size":1084,"data":"","first_seen":"2025-12-10T15:21:52.623922Z","last_seen":"2026-04-03T17:04:31.898017Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-768394904\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/destination?id=AW-768394904\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\nexpires: Wed, 31 Dec 2025 08:27:27 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 31 Dec 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 133808\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":398675,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"284d054a1f69cfdd7b8fc35e62970893","sha1":"dd17bab1dbb9b6f0ef65518f28c7ff243f2b9c9f","sha256":"1185381e918a2ce9d07f742324cb470f42aa97bbadfcd5a98bd1b5d9b59b23e0","sha512":"d92bd6ec5f29de4c515830fae580de1c845a5170897bc51bb881471de828b238ff305bcbafd37d3e1da60bf9699e3dd535b3e54525778cae71b29ca838f28dad","ssdeep":"6144:OIeJ+2bulKYXV1u99Yye5HDmHYmyBFzfnsy/uLjmWllxei4pC:3cbu7l1mcDnsy0SWsib","tlshash":"f08429ce73c674269396e478403f118ba57b29e2b44cc895f189cce42e74a9a4277f7c","first_seen":"2025-12-31T08:27:56.274149Z","last_seen":"2025-12-31T08:27:56.274149Z","times_seen":1,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20Desktop%20Main%20R2.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20Desktop%20Main%20R2.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 404404\r\netag: \"1dc63a7c92d2fb4\"\r\nlast-modified: Tue, 02 Dec 2025 16:22:00 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393k\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":404404,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1698 x 864, 8-bit colormap, non-interlaced","md5":"69d56ca445d1eb1102a3c350525da1cb","sha1":"e9f921e5dc1f59bf539c49a96b0c38a909100343","sha256":"bf7dcad117bd6830543479fcdec6877c309bfa9d0d5841a1b1abac2cbd637b62","sha512":"f23eca1d000b889a51c28ff3dc56e55f82f8650bdd1b4bf5f2b8b4597eca02a7fe6bdb55ef0d9aaf6bdcf783464e1946df2f9d467ab911921cbeff814ed0eb62","ssdeep":"6144:f04KPy+iIPbfg0CTN3r600+Qth3tke0FQCOoCKDhIfFS6My3EoG7KfVDepKA15:fGy+iu2byDmFtVkF7My3IgVe15","tlshash":"ac8423c272c9bffba1c52f0e9568a6aada8ce10d947b88d20b731ef45419d01e1df744","first_seen":"2025-12-10T15:21:52.669653Z","last_seen":"2026-04-03T17:04:31.901671Z","times_seen":11,"resource_available":false,"data":null}},"time_used":601,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":466,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/favicon.ico","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:29.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:29 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 5430\r\netag: \"1dbd1711ddb8436\"\r\nlast-modified: Fri, 30 May 2025 14:42:50 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082729Z-17f644c5599j4wklhC1SVGreq40000002s30000000003946\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":5430,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel","md5":"9200225b96881264e6481c77d69c622c","sha1":"27608d84e28f926b740038252240f715eeb9d2bd","sha256":"26dc5ff4bfb9213291735808465e156d4a4691135f3815e3613761243e1f69c3","sha512":"b236b79924c705dca8b60fe07c886b3af2df0bcc13be6b915063fcdf691775a941de3eee5b59068508b55a7a9f5ec07d19792946d9f04b8b0cb95cb73ee10236","ssdeep":"96:cr+NYnzNJKil6fxxRJxfCoIfCOmcdCRfbNgFsLT+joiM4S:GnKEKxxLI0bcslyFsedMx","tlshash":"7cb171d264010dd0cc66faf83a2ead500656bde9e0a5960934ebb2661bb3f138c73917","first_seen":"2023-04-20T05:48:24Z","last_seen":"2026-04-04T02:29:20.469545Z","times_seen":2909,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20URL%20icon.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20URL%20icon.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 6461\r\netag: \"1da53c60b5b0e3d\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:22 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s30000000003939\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":6461,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 529 x 88, 8-bit colormap, non-interlaced","md5":"cc9da9896905e8bf5e6c73796fca855c","sha1":"f963927825924d40efa0f1e32c6501a894a02e39","sha256":"2ab9a86814395441510eaa59b5090891e182feb994a4daf7c49370b15cab304c","sha512":"63e4fc51234201bd1c2e20d96b1bfe5a5d943656492c7a0228f6ebf4b6655254f3e68035f6a73efb794fc2450c7b896c830435b664db8294483873f0e363ba65","ssdeep":"96:r1VNq+93IdBER7d68S6wzG0C049xfS+Jt5XpnKe8SB6ctw71QQbfCQkordJO//wd:xqq3IUhd7GjC9N5jKABlm71QDorW/y","tlshash":"6bd15b60b64970bed90451bd9be658f14420beeb5282c80ba4ebd19f0e1753dbdc301f","first_seen":"2025-12-10T15:21:52.649256Z","last_seen":"2026-04-03T17:04:31.896414Z","times_seen":11,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20Phone.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20Phone.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 1741\r\netag: \"1da53c60b5b11cd\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:22 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393a\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":1741,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 174 x 38, 8-bit colormap, non-interlaced","md5":"a68e60dfa50206b35c6ed79ff62e58cb","sha1":"ab3fa596902f288a6214f19ee3f8fd89bb3d21ec","sha256":"763e9f5e0be3bef119da826c0b0996ff987a77f39c639db1a669afe8c33b13f5","sha512":"ea033ddff3e2e4ac1c694e33372e804d4218be4c6537deea157865013e095142df9dd0c05149eba0fec7ac8dbc0a8cd2354a7a52f78731a9cc580cafa8fff8a3","ssdeep":"","tlshash":"d53176d6fd89643ccc1074bb199cd4d74d98bd943048cc47819da18e32e16b2dde78da","first_seen":"2025-12-10T15:21:52.667463Z","last_seen":"2026-04-03T17:04:31.897379Z","times_seen":11,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20Blue%20date%20circle.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20Blue%20date%20circle.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 3082\r\netag: \"1da53c60c8c480a\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:24 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393p\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":3082,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 177 x 177, 8-bit colormap, non-interlaced","md5":"eca4ef00cb5805fab3d315fe9bcb04f8","sha1":"bf1dbaddd12e1b369e3a0315b1b9d0aad81de4df","sha256":"642dc1b957258b8e36359f04686c9281807d2e7e6189724bd8f15f44b500ffd6","sha512":"3fda1d234579dbfdd0569dade51acef33beb03dc683fb93394d1d76d0447af816d1712da7b8da9146f7dda9370b5d6310325d60d5c09ae07742a2ca66f403558","ssdeep":"","tlshash":"1f51b863f841943df90d6137c4aa88e639223ec81424dcc256029a2e3e33178f8df5da","first_seen":"2025-12-10T15:21:52.674266Z","last_seen":"2026-04-03T17:04:31.894685Z","times_seen":11,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":496,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.googleplaystateagantitrustlitigation.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=50900267.1767169648\u0026dt=Google%20Play%20State%20AG%20Antitrust%20Litigation\u0026auid=950150359.1767169648\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1v9174765012za200zd9174765012xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495938~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940\u0026tft=1767169647551\u0026tfd=1461\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:29.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"68:80:26:07:1C:4F:AC:C8:FF:32:F4:DD:86:41:D6:6E:85:27:90:D4","sha256":"6D:27:81:39:F2:6D:26:4E:B8:CE:4F:0B:02:95:B6:5D:C4:E2:58:C9:A9:A0:80:1D:02:70:91:FB:E9:98:E6:8B"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.googleplaystateagantitrustlitigation.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=50900267.1767169648\u0026dt=Google%20Play%20State%20AG%20Antitrust%20Litigation\u0026auid=950150359.1767169648\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1v9174765012za200zd9174765012xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495938~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940\u0026tft=1767169647551\u0026tfd=1461\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nOrigin: https://www.googleplaystateagantitrustlitigation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 31 Dec 2025 08:27:29 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.googleplaystateagantitrustlitigation.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":96,"dns":0,"connect":28,"send":0,"wait":45,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-31T08:27:26.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:26 GMT\r\ncontent-type: text/html\r\ncontent-encoding: gzip\r\netag: \"1dc79c30b554c9f\"\r\nlast-modified: Tue, 30 Dec 2025 19:32:33 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082726Z-17f644c5599j4wklhC1SVGreq40000002s30000000003916\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4639,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1640)","md5":"41f336127484088572a08db782dc6a42","sha1":"e08a3a4d7900545e9cf0cefa90d5d5bae505b667","sha256":"a62719e56a45a1912b05eaf89258697c4d32e9005c746ae64b4a3d10ab834789","sha512":"93fc1e112f9d9eb0256e83c294a0b4a6273e34485677ac246e37f4c933e3498cd6186b964030bab497984276f43e9bd6ecf64987a5ab664eb412f975283c6f49","ssdeep":"96:TB6xllYSq6r/1h2PtpPbDGSWqPWIfFjgd1L0Fj:t6xllYSp/1ILO1ufFjgd1L0Fj","tlshash":"93a14307f818d02a979ac6f63cc5b41889138427e2417e58b45e137aafca59f07e3b4c","first_seen":"2025-12-31T08:27:56.290866Z","last_seen":"2026-01-22T19:24:11.044072Z","times_seen":7,"resource_available":true,"data":null}},"time_used":1235,"timings":{"blocked":382,"dns":124,"connect":9,"send":0,"wait":470,"receive":0,"ssl":247},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/styles.0801d01ff1a3fc5c.css","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /styles.0801d01ff1a3fc5c.css HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\netag: \"1dc79c30a27ce91\"\r\nlast-modified: Tue, 30 Dec 2025 19:32:31 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082727Z-17f644c5599j4wklhC1SVGreq40000002s3000000000391z\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":261905,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b5e1942e393e55ab4de8ccf44a85604d","sha1":"1d3215d70f06c2635c50cdc4ed62b33e7393cc55","sha256":"dae355b58e3b2cbc715e0d0b7322ad102a52d1c9a7ff1c4863bf640ab4030b7d","sha512":"4c5fa9c3146ef57282c5ff5a07d32000d0e9025dcc67162d64ef247c31d20fdcf46567e0c6effaa0001354f0d89ab7a47ce374bda922eea0807a5e6039296fc7","ssdeep":"6144:d744szL19B7ZL3WIN7ZL3WIG7zLL3WIu7zLL3WIq7zLL3WIJ44szL19tauKvuDHt:dEauKvq","tlshash":"9944e791f1013029f4a7c1ba54d0ba695adf9681cb224bf6f0577f7c82ce9cb1667e08","first_seen":"2025-12-10T15:21:52.657176Z","last_seen":"2026-04-03T17:04:31.899941Z","times_seen":11,"resource_available":false,"data":null}},"time_used":542,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":542,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-Y50L9K3T3X\u0026cx=c\u0026gtm=4e5ca1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-Y50L9K3T3X\u0026cx=c\u0026gtm=4e5ca1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\nexpires: Wed, 31 Dec 2025 08:27:27 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143632\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435717,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"c3b50ff3e58ab6ec6f6a865feca592bd","sha1":"7582ee856a2c9c69bc9ad7d1385924cda402ccb4","sha256":"00cf9faf1824c5cc45b66afb41668d9dc911f6ca5cbdf3e3c7129cd1cb5db7b0","sha512":"91544bd3a5bfa3ca0bb6e5461ea17004965e44a0d48b5ae4f391ec3e53802bd6fbb69f48fbfa40390ace37ddf8e44444377faab3e2d615ec417d4a85eab818a1","ssdeep":"6144:agIe7ma2bulKY/1u99xHDmHYmyBFzvnsyIO6jJWoNPad4FpC1tY:gC8bu7/1mbrnsyc9WbMpB","tlshash":"09941ace73c674269396e078503f018ba57b29e2b45dc896f189cce41e74a9a4237f7c","first_seen":"2025-12-31T08:27:56.295206Z","last_seen":"2025-12-31T08:27:56.295206Z","times_seen":1,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/ABdata_logo_highres_%20small.jpg","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/ABdata_logo_highres_%20small.jpg HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 671561\r\netag: \"1dbd1712037d449\"\r\nlast-modified: Fri, 30 May 2025 14:42:54 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393c\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":671561,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS3 Windows, datetime=2011:01:13 14:40:06], baseline, precision 8, 900x1309, components 4","md5":"f442c332c6d0d0a705dd12a09412a4ba","sha1":"49f2d22a859788ca89db2dc802532ec0ff35c093","sha256":"304c1e9d62e7fa49d13028b6d16b1b23a202729f1e4cd486d806a94d48fc90a8","sha512":"c2093f1522710f8e305aef55498e7d5af0411c8170685d0d06784c91008c4512ef59f8a9a7cc9bd4ca68754e7142584df2e1cf21efa1e3e5fa8385d0d647746b","ssdeep":"6144:KequwWvJEIV13Z1RIw47cteF4o6dfXHB11LT0BoTyNzTQF1CUye/iaPKaMap/oyC:ZE0p1RE70zxntT/ylTyaaSMn2fSS","tlshash":"55e4360520d27bedcaf75a3d0483eb3a60d66d7138db9122b1eb3d19fbb1500d5ea294","first_seen":"2024-01-01T04:51:52Z","last_seen":"2026-04-03T17:04:31.912694Z","times_seen":18,"resource_available":false,"data":null}},"time_used":546,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":408,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20AG%20Seal.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20AG%20Seal.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 15217\r\netag: \"1da53c60b5b2c71\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:22 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393h\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":15217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 203, 8-bit colormap, non-interlaced","md5":"22cb5f5ae89780e70371e52bb31c94ed","sha1":"ac07aadf1ec68944e00c9690b0ceea79afbfb799","sha256":"c23e2312f18af1546c4be196f46a82011eaa35558a353fffa371eee0f2c67e5e","sha512":"e6c741eb98aef4111b3fc3413d4575ff4e0e6f4d3cf7d057a52bf56d0b19474b704cd3b6703f4780be7b3e0e70d843b0482519dfc5e9f7a50de429b023db812d","ssdeep":"384:uuESWgkabok65apBVSF+5SXiHVhAYru7hmnjYV:uGUaccSF+8iHXAYCMjYV","tlshash":"32629ef6bc08047cd64aa5f6009ec8ea0af437542649c9d269452a8ead319b4eccf0df","first_seen":"2025-12-10T15:21:52.633638Z","last_seen":"2026-04-03T17:04:31.890971Z","times_seen":11,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20People%20graphic.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20People%20graphic.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 11233\r\netag: \"1da53c60c8c6fe1\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:24 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393t\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11233,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 801 x 187, 8-bit colormap, non-interlaced","md5":"0f86d5208d99ecd1ea165212c381f204","sha1":"173bccbbd0f253c6b626ce0f9c962e9c99e67939","sha256":"243dee70ce4da5cbf3a20540d5dceb210bb2e4e66b46b53d35242512f76a08d9","sha512":"090a404c2b0746fa3ac18452b870faf5b94bb0e03ffceedf682ffc755e82ba34662715149190fc8a0563b14647226a336a762ed3f861c244ee4da80255d4ef78","ssdeep":"192:mrOLyUkejwJICl+TEqidiPns6oPvDl5VeezIGtoUH3OG0kbm2GR298xfzvQZWfZw:m6Ly1+waC4udiPnsxrDcez1XOG0kS2Go","tlshash":"25325b76f801007df58c86b369eb89f4556478f25165c8839310b2ee7a732b2fd872e8","first_seen":"2025-12-10T15:21:52.651744Z","last_seen":"2026-04-03T17:04:31.910108Z","times_seen":11,"resource_available":false,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.googleplaystateagantitrustlitigation.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=50900267.1767169648\u0026dt=Google%20Play%20State%20AG%20Antitrust%20Litigation\u0026auid=950150359.1767169648\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1v9174765012za200zd9174765012xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495938~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940\u0026tft=1767169647551\u0026tfd=1461\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:29.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:57:31 GMT","end":"Wed, 25 Feb 2026 15:57:30 GMT"},"fingerprint":{"sha1":"68:80:26:07:1C:4F:AC:C8:FF:32:F4:DD:86:41:D6:6E:85:27:90:D4","sha256":"6D:27:81:39:F2:6D:26:4E:B8:CE:4F:0B:02:95:B6:5D:C4:E2:58:C9:A9:A0:80:1D:02:70:91:FB:E9:98:E6:8B"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2Fwww.googleplaystateagantitrustlitigation.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=50900267.1767169648\u0026dt=Google%20Play%20State%20AG%20Antitrust%20Litigation\u0026auid=950150359.1767169648\u0026navt=n\u0026npa=1\u0026gtm=45He5ca1v9174765012za200zd9174765012xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527906~104528501~104684208~104684211~105391252~115495938~115583767~115616985~115938465~115938469~116184927~116184929~116251938~116251940\u0026tft=1767169647551\u0026tfd=1461\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ndate: Wed, 31 Dec 2025 08:27:29 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T02:31:02.170255Z","times_seen":13313751,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/runtime.4553d697efc3a5ce.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /runtime.4553d697efc3a5ce.js HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: \"1dc79c30a2435bc\"\r\nlast-modified: Tue, 30 Dec 2025 19:32:31 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082727Z-17f644c5599j4wklhC1SVGreq40000002s3000000000391v\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":1084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1084), with no line terminators","md5":"b63b73bbd7d3814ad4cbc7c584a8381d","sha1":"96fb8152e5a8be8712ef93955a9dcf0f5120ebc2","sha256":"20ddb620feb3b8b2384c6f81e5c01215e6898b1908d2130e198adf12b1b1c09a","sha512":"5211e372c50df5c52897913ba54583540d8685e3bb89df2918e4c5da4a67f405eb1d55643ba446cf51733e18850c96fdf97afa19177d2cd4e380d85635e549de","ssdeep":"","tlshash":"5c1186c0a294d4e62be9e4404a0dd0c3aa231533006cecb1db42e197e0259b2409dd30","first_seen":"2025-12-10T15:21:52.623922Z","last_seen":"2026-04-03T17:04:31.898017Z","times_seen":11,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/polyfills.b17190ee939fe2da.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /polyfills.b17190ee939fe2da.js HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: \"1dc79c30a24b59e\"\r\nlast-modified: Tue, 30 Dec 2025 19:32:31 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082727Z-17f644c5599j4wklhC1SVGreq40000002s3000000000391w\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":33822,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (33822), with no line terminators","md5":"8390c25c07199a559b3c536bc7ff720c","sha1":"2fbbe7f3fef81bb2a37f7b708a83123f303a7492","sha256":"6b6efed5b02089109a7518570e12ab2a03b8306178339c020497888414df4237","sha512":"4d3fe162c3b46f7244b7cee782c6083b5da40aaaa2952668a155b515b5c0905fbcf193b2b1933875cda1a9b91dcdd229d3784a8b9e440919d22cff9938010e2d","ssdeep":"768:tOqBobxDrBLY16p3fLrtAf4hXaSb8TQv/JZvKoGNpN5S/gIesS1VSTbIcRT07L64:keLxVtKTHw","tlshash":"bbe207d97392b0b687f65ab1d13b8007f73729a0784c48d8f15c89ee3937049a5a6f2d","first_seen":"2025-12-10T15:21:52.644081Z","last_seen":"2026-04-03T17:04:31.911419Z","times_seen":11,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":468,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20What%20Is%20Banner.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20What%20Is%20Banner.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 3432\r\netag: \"1da53c60c8c4968\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:24 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393m\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":3432,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 615 x 93, 8-bit colormap, non-interlaced","md5":"b5bf7c73cf663b1c044a7f96acdbab95","sha1":"1368db3be3b4ebaeb96592a3bb51616a8e6c5aa4","sha256":"e3e12112fdcf5c1b69e7414d1aa6f67bc87821d977874fee831fd633e39e9188","sha512":"9d852ff1448b7380e420cb44bfa8b08058d5593e40ec348801a40183fd17d7aa9a002fadfa5391211a484d28a826e3364ff1540d71a46bb4228507337452036b","ssdeep":"","tlshash":"b0610747f02c2add843247ef4915a2fd7448700d487d598bceb692de69b1c8a3a0e3d5","first_seen":"2025-12-10T15:21:52.671934Z","last_seen":"2026-04-03T17:04:31.893631Z","times_seen":11,"resource_available":false,"data":null}},"time_used":495,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":495,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20ImportantDates.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20ImportantDates.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 2405\r\netag: \"1da53c60c8c4d65\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:24 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393n\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":2405,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 566 x 46, 8-bit colormap, non-interlaced","md5":"c8c3cc8da2f586aa3dee578dd12e3260","sha1":"a7f0f042a23b74cd10fc30385cfcdfddbd6a2259","sha256":"9ac241c9ae746e89347be5d2017b382dff217b67972c346d09e37ff4a79f0fe8","sha512":"e780de74e26c79d4ed0ea25fc9d374abbad705b0ca6ad61f1c87c97004ccd457a98979e39ddd4f5c4e7e7757526d51129827e4e1a1d84e20d64cfd553c005901","ssdeep":"","tlshash":"1b414d90f13ee86cc44195b3356451f48bb02df8208e2ae6c534f5ee88b7136f984798","first_seen":"2025-12-10T15:21:52.636695Z","last_seen":"2026-04-03T17:04:31.900755Z","times_seen":11,"resource_available":false,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/assets/GP%20Green%20date%20circle.png","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:28.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /assets/GP%20Green%20date%20circle.png HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nCookie: _gcl_au=1.1.950150359.1767169648; _ga_Y50L9K3T3X=GS2.1.s1767169647$o1$g0$t1767169647$j60$l0$h0; _ga=GA1.1.1509436326.1767169648\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 3080\r\netag: \"1da53c60c8c4808\"\r\nlast-modified: Tue, 30 Jan 2024 21:48:24 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082728Z-17f644c5599j4wklhC1SVGreq40000002s3000000000393q\r\nx-cache: CONFIG_NOCACHE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 177 x 177, 8-bit colormap, non-interlaced","md5":"51c352fbbdd8b9d93014ffe8228bdeca","sha1":"2499f1ca75f7a89bf68c712dec25f7397488cc01","sha256":"33c9f2ecd7ca237b2a79f0272a65c9f11b0c8ed84ba06b8b3f1861872f724560","sha512":"04fa644992e8ec2fd9bc80b466e5d7e7cd1cbf31f3f4fac8eae6202bcf9fc44218438ace19738ee7379e2afab174be12f417e85e5a19195cee8e1ab48f02f480","ssdeep":"","tlshash":"e6519863f052643df91d563bc5da88e62a3329d85004ddc65a016a6e3a2313dfcef4ee","first_seen":"2025-12-10T15:21:52.659817Z","last_seen":"2026-04-03T17:04:31.913556Z","times_seen":11,"resource_available":false,"data":null}},"time_used":509,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":509,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/scripts.d60c9b5cf811a463.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /scripts.d60c9b5cf811a463.js HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: \"1dc79c30a26649f\"\r\nlast-modified: Tue, 30 Dec 2025 19:32:31 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082727Z-17f644c5599j4wklhC1SVGreq40000002s3000000000391x\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":152863,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"725a9d1aca11716b3606bc2195b3bfde","sha1":"66a03cfd130a3e000d7aee3c9cdf09fa0aef08a9","sha256":"cbd67ddd671073bd67d17edb0e0fcd9433daa9c0adec94aa53378e34f196b8aa","sha512":"ec3542f30b625e286197f301c2033107ba496491296355343dda61e34ca362ac374bcd12d76a7a30b6bfcc193bb7968b4e69246ebfc4023aa4285882532156e6","ssdeep":"1536:HLWDtmQLi7oUZrLhl9DE4Ks0J1jsE0GqaEJFaEgguyxfCgKHu+IQv8H4m5b6bOVK:E49wsJfaWFaw4gorm5b6iVvDtArlbN","tlshash":"3fe3098972d1b47246ab6079407f050bb2362c8d980da41cf6a9d8ed3ebcd49617bf3d","first_seen":"2025-10-27T22:49:40.967406Z","last_seen":"2026-04-03T17:04:31.899001Z","times_seen":12,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googleplaystateagantitrustlitigation.com/main.f0cf541c4a65c903.js","fqdn":"www.googleplaystateagantitrustlitigation.com","domain":"googleplaystateagantitrustlitigation.com","tld":"com"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.googleplaystateagantitrustlitigation.com","organization":""},"issuer":{"commonName":"GeoTrust Global TLS RSA4096 SHA256 2022 CA1","organization":"DigiCert, Inc."},"validity":{"start":"Mon, 08 Dec 2025 00:00:00 GMT","end":"Tue, 14 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"93:5B:90:1D:E3:42:9A:53:F7:17:68:1E:FA:BB:37:77:28:5F:5E:61","sha256":"BF:5F:0C:88:F4:6D:A9:5F:F7:F5:A1:61:9F:1D:78:40:46:43:61:36:32:20:49:15:A1:F9:59:33:71:8C:20:C0"}}},"request":{"raw":"GET /main.f0cf541c4a65c903.js HTTP/1.1\r\nHost: www.googleplaystateagantitrustlitigation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: gzip\r\netag: \"1dc79c30a2eb1f1\"\r\nlast-modified: Tue, 30 Dec 2025 19:32:31 GMT\r\nset-cookie: ARRAffinity=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\nARRAffinitySameSite=54400adf1c9d0764aefa6d4ffdd7d4c6a996801b0ccad3ab4611b3892b419729;Path=/;HttpOnly;SameSite=None;Secure;Domain=googleplaystateagantitrustlitigation.azurewebsites.net\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=2592000\r\nrequest-context: appId=cid-v1:a4739eff-ec4c-4139-8270-188273f4aed9\r\nx-powered-by: ASP.NET\r\nx-azure-ref: 20251231T082727Z-17f644c5599j4wklhC1SVGreq40000002s3000000000391y\r\nx-cache: CONFIG_NOCACHE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":688241,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5e37df2a22d90d7bb4ac091ee4049d56","sha1":"4329536131b7d817b85b097d9e2699e19b8beddd","sha256":"0ecfa8768556367886138431689da181c5061822bd9b3732e0b53f9f262df41b","sha512":"001763199efdac6bf1e40c33866c793fce9d1b1c52f075a56ca28b5f17f5249d99d3f38d4ce0d213dc45d530c41220aecd11d382c404aca35b9f285c06afeb8e","ssdeep":"12288:OIPnpxpbrlQZ/2wmb+pWCwe26oBrDgv3Uu4:OIPnpxpbrlQZ/2wpp2e26oBrDgv3o","tlshash":"27e41a957281b03a87e650ea007b0543f3291985740a406df67cdcee7aadd8d72bbf78","first_seen":"2025-12-31T08:27:56.311848Z","last_seen":"2026-01-22T19:24:11.034396Z","times_seen":7,"resource_available":true,"data":null}},"time_used":521,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":521,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-31","alert":"Sinkholed","trigger":"www.googleplaystateagantitrustlitigation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-55RSD6NB","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.googleplaystateagantitrustlitigation.com/","date":"2025-12-31T08:27:27.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtm.js?id=GTM-55RSD6NB HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.googleplaystateagantitrustlitigation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 31 Dec 2025 08:27:27 GMT\r\nexpires: Wed, 31 Dec 2025 08:27:27 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 31 Dec 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 133719\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":392552,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5340)","md5":"bcf8dd6a69c6d6238089ebd959fe459f","sha1":"fcdccca3c2e59e51e805ca12da4c4e1ea3e37456","sha256":"2e40aa93f20a40afbe1ab53e104ebad55b59d41e7956e5c5403c09c41279f665","sha512":"7b9750657599a9ce9516b957ec3d06f23e2fd39a233f33fbf244a6084560393c12ffabc3e2d8b768ef4997f572240371efde879010430b49d0ddfebfccc1f07a","ssdeep":"6144:gIeJK2bulKYXV1u99Yye5HDmHYmyBFzfnsA/63WllwpRXpI:R4bu7l1mcDnsjWYpPI","tlshash":"9e8429cdb3c6746683a2a478503f118ba57b69d1f44cc895f186cce42e74aaa0237f7d","first_seen":"2025-12-31T08:27:56.313491Z","last_seen":"2025-12-31T08:27:56.313491Z","times_seen":1,"resource_available":true,"data":null}},"time_used":225,"timings":{"blocked":78,"dns":11,"connect":7,"send":0,"wait":33,"receive":25,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}