{"report_id":"47451862-7216-4eb4-a4ae-c9237668efd5","version":6,"status":"done","tags":[],"date":"2026-04-04T23:12:51Z","url":{"schema":"https","addr":"50gg.us","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"103.224.212.210","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"title":"50gg.us","dom":{"size":106695,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14330)","md5":"6646551f8e03ecf63a90d60d350d9cc0","sha1":"d91bc94fea40887564ad39da5ac1cb3f9fef337d","sha256":"0c54e7eeddfe630e0e5d6b2b63d14a9e7d6cd95ae80cd0fa070d657e794e7b98","sha512":"1bd0c0182bb1313148c435e719a17f682ba3341106b02d7ad2eeac217df702421335f358b811579c6f6754cf6e289194218d53dbb1a683b6a64f9cb9b40cd6e7","ssdeep":"3072:5wEzkMgSH3MMQKAFQ9MfeAIIfLJpFzmzHJoJ8q1qWeW5AvnDpulQUYtE:bzkHSH3MMQKAFQ9MfeAIIf9upYlgNDpm","tlshash":"04a35c9d7047707217731194b92f2acef26e219b744c4c40a5f1d7e638acadb8a23d2e","dom_hash":"domhash3dad8800ac34a2c78ec6825d43e5dab2","first_seen":"2026-04-04T23:12:54.701237Z","last_seen":"2026-04-04T23:12:54.701237Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"50gg.us","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"103.224.212.210","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-09T23:12:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":15}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-04T23:12:32Z","timestamp":1775344352,"ip_dst":{"addr":"Client IP","port":60666,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"severity":"low","alert":"ET INFO Observed ZeroSSL SSL/TLS Certificate","source":"{\"timestamp\":\"2026-04-04T23:12:32.033113+0000\",\"flow_id\":351910743714552,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"54.75.69.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.17\",\"dest_port\":60666,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2031231,\"rev\":3,\"signature\":\"ET INFO Observed ZeroSSL SSL/TLS Certificate\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2020_11_23\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_12_01\"]}},\"tls\":{\"subject\":\"CN=*.primecirclenet.com\",\"issuerdn\":\"C=AT, O=ZeroSSL, CN=ZeroSSL ECC Domain Secure Site CA\",\"serial\":\"00:F6:74:2E:F0:5E:04:E6:19:8A:5C:47:65:CE:97:FB:07\",\"fingerprint\":\"00:01:86:31:c7:94:f2:00:69:da:e6:84:28:8a:24:99:87:83:12:5e\",\"sni\":\"obseu.primecirclenet.com\",\"version\":\"TLS 1.2\",\"notbefore\":\"2026-03-20T00:00:00\",\"notafter\":\"2026-06-18T23:59:59\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"80d47c47e3ce91bc3bd0a026dbd1664d\",\"string\":\"771,49196,5-65281-16\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":7,\"pkts_toclient\":6,\"bytes_toserver\":1080,\"bytes_toclient\":3917,\"start\":\"2026-04-04T23:12:31.928504+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"ww38.50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"yfdpco4.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"msadsscale.microsoft.com","ip":{"addr":"150.171.109.200","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"1991-05-02","domain_rank":241518,"first_seen":"2025-01-13T10:51:37Z","last_seen":"2026-04-01T12:26:00.481626Z","alert_count":0,"request_count":1,"received_data":73333,"sent_data":461,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"obseu.primecirclenet.com","ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-03-04T09:51:25.656484Z","last_seen":"2026-04-01T10:22:56.032938Z","alert_count":0,"request_count":6,"received_data":5604,"sent_data":4932,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww38.50gg.us","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2026-01-02","domain_rank":0,"first_seen":"2026-04-04T23:12:52.281757Z","last_seen":"2026-04-04T23:12:52.281757Z","alert_count":20,"request_count":4,"received_data":16761,"sent_data":1959,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"l.cdn-fileserver.com","ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":962880,"first_seen":"2025-04-11T15:28:22.753596Z","last_seen":"2026-03-30T02:24:59.500267Z","alert_count":3,"request_count":3,"received_data":2717,"sent_data":9499,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"50gg.us","ip":{"addr":"103.224.212.210","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"domain_registered":"2026-01-02","domain_rank":0,"first_seen":"2026-01-06T19:05:32.935623Z","last_seen":"2026-01-06T19:05:32.935623Z","alert_count":20,"request_count":4,"received_data":35993,"sent_data":1887,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]},{"fqdn":"s.cdn-fileserver.com","ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-04-08","domain_rank":1473336,"first_seen":"2025-04-11T18:11:28.393379Z","last_seen":"2026-03-30T02:39:20.66347Z","alert_count":3,"request_count":3,"received_data":45388,"sent_data":1522,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"yfdpco4.com","ip":{"addr":"208.91.196.46","port":80,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-03-20","domain_rank":0,"first_seen":"2026-04-02T14:19:52.929311Z","last_seen":"2026-04-02T14:19:52.929311Z","alert_count":1,"request_count":1,"received_data":10994,"sent_data":625,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"s.yimg.com","ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"1997-05-14","domain_rank":4553,"first_seen":"2012-05-20T22:45:00Z","last_seen":"2026-03-30T02:39:20.625583Z","alert_count":0,"request_count":1,"received_data":26262,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"euob.primecirclenet.com","ip":{"addr":"52.84.50.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2026-01-28","domain_rank":0,"first_seen":"2026-03-04T09:51:25.652211Z","last_seen":"2026-04-01T10:22:55.916318Z","alert_count":0,"request_count":1,"received_data":122388,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]},{"fqdn":"realtimesearchresults.com","ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"domain_registered":"2025-02-14","domain_rank":464056,"first_seen":"2025-03-28T05:14:07.92032Z","last_seen":"2026-04-04T03:20:27.84947Z","alert_count":2,"request_count":1,"received_data":71771,"sent_data":1317,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"fe43622b86a9293f7d94436142bdfdc6","sha1":"01ef22d8f3292bea2b0cfa63e49be5ee758899eb","sha256":"f06061820c8cc9e6d88231bddef898d9ce4a8326f6e00e30e0aca3f924ad3dd4","sha512":"a8cf2feaa0a396472300a52b5d37f123be2249d274c947da255ba4f99a644139d92e010b65461b9575a4e63cddb1e717a085282c435d182186b0e51885f654d5","ssdeep":"","tlshash":"3e70008880202a0000e0080c030323b0238080a88cc28000822ea0033080e030288a8a","size":24,"data":"","first_seen":"2025-03-08T00:25:13.703666Z","last_seen":"2026-08-10T13:37:39.751703Z","times_seen":214532,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=5963\u0026\u0026vgd_l2type=dmola\u0026fp=WPbDfI9ikSVoMkjOpW38Eor9F0sbw-06rWn-BmP37V71uC1jhtbyHV10oVsoWIvwtcIWg-jJMquk4oOsdRgL4Ejwvwp-0tJQMgCM2AaosndqEIeBBqQ96WZITwon8L0S\u0026cme=GQOPSU1TwFb9JQmCrrKvFoe4Ik-S29w_s6W2c-conwHo553D_qKWKKJIIMN7NXQ-19QCEmCaBhrfRq7IyJNyHJ_-wacCigUHFzX508a1d3FVEOiiouqivd6Oq6v_9A1nBUAt3QQrYgL1xT-0bpwuDjRbd4BWChe6ZfQfcfWaVtZv-yPh0-VBFuG8ITKMotCUft2egtHo_CZc6z5kz2fJDcyjw_s2oRAnaopHSfLbZZuwjtWe-DNrK8kf8kmigvm9eZSa_gfyjfE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRITkm3UYmqa2ZYjzrUmpKmuM%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7ClamrFe8-Z8zzAgmKSBQrLtW1OMiJWnSiPOBp3sqvsgCgNJEw-KCjV0wVtfE7rSyeeFmElkv6Pp88KMenaa-iYcJgkFKDILhmD9dGkVWL6chytf1JnXPF7yMgmbnGJIfvBQ34DkZoDrmVBSg_InxmFbhXCa321kIYiKy0OMpH8OLdmXEzQKUU5z7XYmRlDVVbL0R4BvQxQXEM1nyQ7z97PPFJx2VIfdAAjbRGCv-EmRW7jxJq0hPTQvsdQl26ItRkQ-v260EWD5tSBB1QCg6pszgb91PdDhZoN8hcaCMN3hMwPDTZSUWy0qa6rN8uhtumWYwTOJuGVkceQOVL3K7fpg1EDqLgt5VRsSHkF2r0U50DRzZYtO3Ky-pwNb9SLCpL-R6CUrne4xuaqFclNHMdjl6NN2rnC4wa3r5s59hk10GhpTOSBlnn5-8QI94GswE07V4ICk92JYF7DsNYF5LdbvYRAYzHRgtP7bR1tpXbdSAZ9rZlnDY7UCFcnV6D5lrbdZYaMNfTRm0C5oFRzogmbl0CJeXAUVrSBEeNpOM2BghtXk-dE0rpmUFi9G0LjjeeMio9q9Bx64DIIE-HsKTgzuZn44Bi8tvuRgWrnzMIkwSUAA962jUPUb6UrzI6ApT4arqPzlXhPqV4Q-OzR-TLC7QWG6AAmTVd2zlWEzhXtVNWdtXPyyiy4oUfFHgjRKb7iPZcCd-Ja4DHQYRIuo8nZQ9l9aOsB7Y0kVeolOgXvg1lLqmR-sZq0VAGOsdGl7b6SKpBv-3LXe8cyz_chC-8lgT1gY07XVM2mSuwpxdELOBrlKAK2zFMKm1DdXK-W39C%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Play+Browser+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=1\u0026kid[]=140762482\u0026kbc2[]=clid_serp%3D7105%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D5%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D1043.59%7C5%3D30%7C6%3D0%7C16%3D1%7C19%3D1043.59%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D4.3778%7C7%3D0.0287%7C8%3D040417%7C13%3D0.0219%7C14%3D040419%7Ckus%3D0.4076%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D219410%7Cclpr%3D0.850900%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228238072134818907325600512\u0026kwd[]=Interactive+Browser+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=2\u0026kid[]=1326076834\u0026kbc2[]=clid_serp%3D26036%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D3%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D2608.92%7C5%3D21%7C6%3D1%7C16%3D2%7C19%3D2608.92%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D1.1764%7C7%3D0.0157%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4036%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D134100%7Cclpr%3D0.905500%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228264045150474690374275840\u0026kwd[]=Play+Casual+Games+Online\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=3\u0026kid[]=324879774\u0026kbc2[]=clid_serp%3D-2%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D6%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D2084.74%7C5%3D17%7C6%3D1%7C16%3D2%7C19%3D2084.74%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D2.2403%7C7%3D0.0204%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4132%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D205789%7Cclpr%3D1.000000%7Ccllvl%3D3%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228264045150474690374275840\u0026kwd[]=Online+Casual+Browser+Games+Collection\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=4\u0026kid[]=2161976400\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D4%7C17%3D-1%7C18%3D451.11%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D3.1806%7C7%3D0.0216%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4071%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D205789%7Cclpr%3D0.874000%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228238072130315307698229504\u0026kwd[]=Discover+Fun+Online+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=5\u0026kid[]=1325932004\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D5076%7Cclid_serp%3D7105%7Cakp%3D8%7C17%3D-1%7C18%3D50.15%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D0.4188%7C7%3D0.0141%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4261%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D50308%7Cclpr%3D0.931500%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79440933458516512328309412096\u0026v=1\u0026gdpr=1\u0026geo=59.93%7C10.73\u0026lper=100\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763672\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1775344351569213879\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=1\u0026vgd_tsce=L1189-S1189\u0026vgd_l3_sc=03\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=64304\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=oslo\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22impl_type%22%3A%22skp%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgd_ifrmode=14\u0026sbdrId=\u0026verid=\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2152288995185836520\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3049\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=91.90.42.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_1024\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A1024\u0026vgd_sc=03\u0026hvsid=00001775344351857015326356483074\u0026rc=0\u0026rand=1775344352979\u0026acid=undefined\u0026matm=1775344352979\u0026vgde_ltimesrc=u\u0026vgde_ltime=u9u9\u0026vgde_rtime=iWu\u0026vgde_etm=AX\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AWFA%2C%22QNLLQ71L7%22%3AW9%2C%22QNLLLJzOJL%22%3AAW%2C%22QNLLJ-JN%22%3AFW%7D\u0026vgd_lhl=2343\u0026vgd_sbSup=1\u0026vgd_nrrs=64304\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","size":15,"data":"","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-08-10T13:37:39.74151Z","times_seen":216643,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60c3ba51bb1aa6a79badc97d356c8824","sha1":"0a362d28403bea199d577c45df2e196c57306f24","sha256":"25cdf13d7cec925b77d46b6f73eb37cfb5cf1369262382182130900091b002ca","sha512":"4d423f61ab40631c9189034c6e2f2867d99977895bbea63366341379e1f1358bd16811ee69bb2b1b73af3d1d6f8173fa09eaa46500e3193bdc359dab986fdcf6","ssdeep":"","tlshash":"ae21dd8a58fa011d97b730ad4f1f8844b536584f629adb0abc4c05403f28b6dd676bd6","size":1258,"data":"","first_seen":"2026-04-04T23:12:54.716855Z","last_seen":"2026-04-04T23:12:54.716855Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4b525cf8ebd962811007b8d5664ed332","sha1":"3d6e339a2e51071280db0f7e0e72f4beff1b7e3f","sha256":"9a2fc2de09ddd5dbe83a33b037c4519972a252103614203019dec30522301fdd","sha512":"b8a7dfd8f65660c948daea9a5177f217a66dc3246bcc7acfefadf6c35c761208f9a99c73cd960e6081e0765b370ffbb178151bf792784c05de5c822b56ebb936","ssdeep":"","tlshash":"79c08c7b3c8220304edf725e281c93883860c206a883a202fc2c08ed4ff1e47323ab58","size":164,"data":"","first_seen":"2025-10-01T08:32:45.366407Z","last_seen":"2026-06-07T08:16:09.45503Z","times_seen":78512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"889ca9e2c79a3ce7aaadbcdfd0ce4ef5","sha1":"b05c2c051bae71f80cb8c289e5a42d4f96d323fa","sha256":"6477acf082d26199b6ce8346b93149b1b999233d9fe76b0340ebf43317cf98f8","sha512":"122a494d50a5e8077cdda40e8d6edb442bb9d89fff078852aad7f84fe24f1c58fe693f0388ca6c9453d1b33036da0b9c4e9fb394a18268e254d306ffc2ca57a3","ssdeep":"","tlshash":"46a002d4b4ed8125564583390104d91cf936c934c0d5701873f0466ca6e700a53610b2","size":62,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-08-10T13:25:32.244489Z","times_seen":397600,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"50gg.us/js/fingerprint/iife.min.js","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"103.224.212.210","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","size":34240,"data":"","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-08-10T13:37:39.751039Z","times_seen":71060,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"b326b5062b2f0e69046810717534cb09","sha1":"5ffe533b830f08a0326348a9160afafc8ada44db","sha256":"b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b","sha512":"9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de","ssdeep":"","tlshash":"5430000000000000000000000000300c00000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:44Z","last_seen":"2026-08-10T13:25:32.251799Z","times_seen":429446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"yfdpco4.com/sk-park.php?pid=9PO15V947\u0026dn=50gg.us\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Fww38.50gg.us%2F\u0026al=en-US%2Cen%3Bq%3D0.5","fqdn":"yfdpco4.com","domain":"yfdpco4.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":80,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"ae386363a353590fb3dff6d65b8613ee","sha1":"b3f611611c6760a5746ce6cfa308c5fe2d40a0ca","sha256":"ae851f099afb8026752ff5001cce5baed07e3bdaf10c3bfb1664b10bb8d248d6","sha512":"9907d091968cc0d3f3952ddcf7d80f4e1f446a5efdba40bdc7a1b7413a07b7ea2df8b4fdca9d8e7df9a6896bd6862b46f1fc335faf02dd8dd30a1bee8a837797","ssdeep":"192:wLbD5Jev4XaZpwf7EDFmCRZOoP9LGAvPLbD5Jev4XaZpwf7EDFmCRZOoP/fyqi6b:wev4wvLyAvPev4wvpyL69w+","tlshash":"2712e85242374c2058da0482de7e6fcb31aa5d7f3cbc740d48cc8890a16eb676e369b6","size":9885,"data":"","first_seen":"2026-04-04T23:12:54.719415Z","last_seen":"2026-04-04T23:12:54.719415Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"807fa1254fcfeb80361ea747a3692fbe","sha1":"c7f11bca0326618734903f67e8e257a926c0297e","sha256":"6b30ec887618fe46ba84bc2cb7772576a3f2c993166fef606bed3575e6c1d9d3","sha512":"007257554fe46b992796700ddbb66cc515507890a31b6d22707c84cafa1a8ffccb7fa399b68524858b5c60a1044a2994dbb178b9d4b88ef1de34f4678489081e","ssdeep":"192:SzykzB2ceBby8ET/5WlkXrF3GXBkMXwSH3MMQKAFQ9MfeAMLFALfLW8Vi:YyiyM5BZqBkMXwSH3MMQKAFQ9MfeAI+6","tlshash":"8af1c35ac4aacdb1046d19dcbe3c6e4d74c9790cf5cc3c9fca82ea9958ae5b4df01908","size":7514,"data":"","first_seen":"2026-04-04T23:12:54.720431Z","last_seen":"2026-04-04T23:12:54.720431Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"c7a958c41580722342804f3cbd184333","sha1":"4a67139d52c5d4183172f9453df34afe310f158d","sha256":"3795ecef264f7a5b74bd1eaad944064f3f5d25b223c0bf442fd98d2752ff2c1f","sha512":"c435722200506ec5bf0f90ec0fe601ae988db69307ac0db47a396822e0ebda96a27109a787ba69d2ff87ad5719c93a0d14ee8db402aae43c175f7f7e63b470ac","ssdeep":"","tlshash":"caf0ec5c4fd750603975511d725ef3c0b094909b32a3c40af5ec96445f42a5e977a2fc","size":460,"data":"","first_seen":"2026-04-04T23:12:54.721489Z","last_seen":"2026-04-04T23:12:55.25623Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"6559111e4eae643ce013ce0821e91a02","sha1":"fa1086c9aa2cb2d14f5c13bceefe21511bcdae5a","sha256":"d72255f7e5ea4dfdf9821df800356367d0bc7df07ecd103bb660018cb1e4f400","sha512":"a6e3e096076dc152b69e95709dad8925c9c2799c23ad226b9ce7b6ee78936bea7300b66c92821ea0728ce7433d4f53787f27f5e7101f97e4d882be0a461fc051","ssdeep":"","tlshash":"407000000380020020c80233a200882af228003c00030200c008888800a808002080c2","size":25,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-08-10T13:25:32.252728Z","times_seen":397561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"9fcdbbfde00a8ec73560963c72c73347","sha1":"e8c9c85a8c6b7eca8123541d9c1d4891fe31a491","sha256":"b26af6105faa115ec8b18b9fa6edf231ef0e01bc9da4ee1cd25147b2c611df16","sha512":"077a6a0398cc386edaa406ab77afda7c3f6aeed50eb2fe2be5b393230123c0d7a0780c86b9e5e5526dda604dc9d74ea163d4416d1de6fd5b4cf3137cf4a976a0","ssdeep":"768:dfCGm5LEEyzKHJWv6v4DaTu3ru+b4GK7ZN/cbeFr2wK5akaj8kEtlVUYtdC8:bm5JuvnDay7uXMcnQUYtD","tlshash":"9b23f8dc30c2746a176721a6413f3d4bf17b16543a4e8c40e9b5eaa67c3ca5f8623e4e","size":48745,"data":"","first_seen":"2026-04-03T11:46:51.2768Z","last_seen":"2026-04-06T13:17:45.992515Z","times_seen":5016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ea336f637477485ccd6f9a5b167bd7d","sha1":"8153e4b97c42ab5b73f2f577b43043c8c9283b4b","sha256":"ce4d01ea989bb3b9243f9917fe20a39064135a99b2f3b8cd6832cccb10006b96","sha512":"1ac3fbd0a0c12ef1eacf5dc2a5848e72574bc9ebab4b159fbd080d02b3c49320e5862be0d7404e6ded0c2e2c8c0c43f84d93b966d200007782e282bbab8b3c65","ssdeep":"","tlshash":"c6f0e5b694b3c8285b0f264673ffd684145043e45c05764df1ede49a03e1d4cc0d9eaa","size":481,"data":"","first_seen":"2025-03-08T00:25:13.728891Z","last_seen":"2026-06-07T08:16:09.460583Z","times_seen":189978,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e8be5ce7a18d21c61ddaa3be3fd99ea","sha1":"7d2e7dcc6e15405e8d20e4287f271756e7f874f3","sha256":"5211c581ce1e9891281e16e8820398ab1f3a835b862b9e168bbffffe8e66ea19","sha512":"202c8e96e23f05dc95606ba0b7b318973a6ce95f22f28d05b4fe3762f335f0db7d989c73f8f0fc4e55cfa2b4c4980bc17433b8132ffba6b6975658322e7eb308","ssdeep":"","tlshash":"a6b02b103d301002007a0183c874c4290136d8f3330044d44b003cec908e440605e74c","size":122,"data":"","first_seen":"2025-04-02T18:01:59.542907Z","last_seen":"2026-06-09T14:13:38.522143Z","times_seen":190915,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"50gg.us/","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"103.224.212.210","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bfd19a6ce5e9e75d3364d16fe50aa3c0","sha1":"6d5bbd77712440c39ee9bae4273f05cf928be8a8","sha256":"8c5df2c936d53e253903bf2c95ad965cc6f9c6b20b6bf216046315a3e01bfa09","sha512":"f7a064338cc7a6aeda67803227e37d024ee60fbb6cdd9e3111901e9caa94d0dedb172bccb33c7393002e84e0761d12a58e54607bfda63aaf48ca098a9af0e75b","ssdeep":"","tlshash":"f1f0dc48b5da3862b53820ae8ef4810ec17b0284008da5fcd40abb2cdd4126be229de7","size":503,"data":"","first_seen":"2026-04-04T23:12:54.725186Z","last_seen":"2026-04-04T23:12:54.725186Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"euob.primecirclenet.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"52.84.50.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef287973bbf79645f483e0b89805c24f","sha1":"07c9f19a5b3c4c5c88452320c63d7f131228a00f","sha256":"aefd1799aee2a4a1bee047144fc3942f78ddbb11270a25d11d5afcc6168ded70","sha512":"1c35ee3c44279118cac0681545711983d5f2b7acd1b3e509c0e9986f5e928c244ef771c835a45c4037b08fe691a952910c2d880232531f2866d2687e4e3dee41","ssdeep":"1536:XOuWmlw1eU32zEb0wu0RnWuGyVxlicnYtMolHAEh8sqrfje+wUK8LonhdbErReKG:+4lwAZP0RGyARWsqumrRnvlyv/","tlshash":"20c3d6adb2f27025439335a5147f410ae27b1e543c4b8290d17ae9d4ac7ce8e857bfac","size":121862,"data":"","first_seen":"2026-03-15T13:25:10.579891Z","last_seen":"2026-04-15T18:10:04.205259Z","times_seen":10426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e5d8c139688b25ef77b263d88ea99150","sha1":"7abc9c61c4966543f66d150c0155bfac575f86a7","sha256":"53e5f34ac520035c7f124076d1e68c70a85c83cf68a339fa713b872b54126148","sha512":"1cd4eb192d987ea1b21f3b553eea3881c807f8bf4a5299982675d57314a0eaa084db1722c38d02eb73178660ecb1ca3667a795a512527f843f2526dc0a99dc20","ssdeep":"","tlshash":"7440000000003000033c0000000000c0000c00000000000000000c00030000000c0000","size":7,"data":"","first_seen":"2023-03-07T01:20:41Z","last_seen":"2026-08-10T13:25:32.248617Z","times_seen":397609,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"msadsscale.microsoft.com/bingads/telemetryJS.js","fqdn":"msadsscale.microsoft.com","domain":"microsoft.com","tld":"com"},"ip":{"addr":"150.171.109.200","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-04-04T23:12:33.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"msadsscale.microsoft.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Sun, 21 Dec 2025 00:00:00 GMT","end":"Sun, 21 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2C:BD:B0:AB:44:13:2E:20:B9:4A:CE:77:54:53:0B:D3:6F:B7:12:AB","sha256":"F0:73:26:EC:1A:F7:21:8F:A5:59:85:8A:09:7C:FC:E8:93:49:67:48:66:67:5E:8F:5C:8E:AE:44:2A:82:6B:F0"}}},"request":{"raw":"GET /bingads/telemetryJS.js HTTP/1.1\r\nHost: msadsscale.microsoft.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:12:33 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 12 Mar 2025 08:06:51 GMT\r\netag: W/\"0x8DD613CD8BAF720\"\r\nx-ms-request-id: 100aeced-501e-002a-06c0-c11d3c000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: content-length\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260404T231233Z-157fb874dd7qc6ndhC1SVG8pe000000016y0000000000y9a\r\nx-fd-int-roxy-purgeid: 3\r\nx-cache: TCP_HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":72824,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65504), with no line terminators","md5":"84bf71fe11d71bedaac885462b1d2940","sha1":"bdcf95799b79eea873329ddbd112eda32f47877e","sha256":"a8d28463855fcf949fb31963246cc6c55ea9baf9c5551b327687dcd6076502f7","sha512":"02d7de1db70f021c17bc184e1e795cc01f63889731f444ca429040f3599dccdb346c68e8e5e69fc81060972b7ccbcebf1e9294e50318957ded8cb0cbeecacb3e","ssdeep":"768:TM4lJgxIU3OPOEUi6UsQ6R1k/Y7/LKF/ZE/4OkeZChQZqeYQYTyCLJV6N//MFgPc:A4voIU+POE3kMMmF/6VbqXQQfI/EgYuo","tlshash":"5a63938df1d1b0f607e7a0e5412f960ae1b72968b45ea8d6e6a1d4e09c7884f1037f7c","first_seen":"2025-03-13T12:39:24.627452Z","last_seen":"2026-07-01T06:36:02.618154Z","times_seen":144011,"resource_available":true,"data":null}},"time_used":167,"timings":{"blocked":51,"dns":25,"connect":21,"send":0,"wait":40,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.yimg.com/ds/scripts/selectTier-p1.1.0.js","fqdn":"s.yimg.com","domain":"yimg.com","tld":"com"},"ip":{"addr":"87.248.119.252","port":443,"asn":203220,"as":"Yahoo-UK Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-04-04T23:12:33.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.www.yahoo.com","organization":"Yahoo Holdings Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Mon, 23 Feb 2026 00:00:00 GMT","end":"Wed, 15 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"84:C1:83:1D:78:C9:B7:8A:5A:A8:A1:3A:D1:2D:07:74:F7:40:BF:69","sha256":"30:9D:82:0E:FF:36:AB:C3:61:0C:B1:7B:4F:10:14:11:09:6C:44:3F:CF:03:8A:C3:71:1B:6A:74:BC:17:8C:B6"}}},"request":{"raw":"GET /ds/scripts/selectTier-p1.1.0.js HTTP/1.1\r\nHost: s.yimg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: zqrQBvowlBgFDf/aZIFOpUO7Xr4rOjHyK3mm2m4B8EIXPTtl0xeIS7t3xy5Qle50PmxYTBNWSohJFAtXFZ06lPPbH7lGEfgqtwKLFuAhY6o=\r\nx-amz-request-id: GBRRZPV7GZ1P2MBT\r\ndate: Sat, 04 Apr 2026 23:11:57 GMT\r\nlast-modified: Tue, 17 Mar 2026 16:07:48 GMT\r\ncache-control: public,max-age=60\r\nx-amz-version-id: MYILtxSp4D3g9IIiusm3XYc.Lrxqvgn9\r\naccept-ranges: bytes\r\ncontent-type: application/javascript\r\nserver: ATS\r\nvary: Origin, Accept-Encoding\r\netag: \"a141400493d06236f13b5ec5e7993178-df\"\r\nage: 37\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: gzip\r\ncontent-length: 7528\r\nstrict-transport-security: max-age=31536000\r\nats-carp-promotion: 1, 1\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Apache Traffic Server","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25545,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25545), with no line terminators","md5":"a141400493d06236f13b5ec5e7993178","sha1":"bbe007343d7ea3461a040a88c15e3034a344863c","sha256":"61db003df491f58c5cba0781ae8a764c69c5d165eebe1b79bb59289f83a8242c","sha512":"c029685beb47b16e0956deda40d4dbe036f3f22a627602491125dd1003e90834ecf7ff42332f31a5ee12081052b1e0eafb3e8156baf73c3fe4dc9a6c9a712e40","ssdeep":"768:AvPr83BT2T2x4ebxteeqrkp3KQZ91/Rp537jm7t+wjvooXsxsdh:Avj83ET2+KzmQZ7/Rpx7/Qsxu","tlshash":"4bb2c7a574c9343f03ab80f3903b231933765d2a3906a568368886de5dace5b5317f7e","first_seen":"2026-03-17T16:10:23.974009Z","last_seen":"2026-08-10T13:47:03.568111Z","times_seen":68181,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":68,"dns":15,"connect":31,"send":0,"wait":33,"receive":28,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.primecirclenet.com/mon","fqdn":"obseu.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:42.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.primecirclenet.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 20 Mar 2026 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:01:86:31:C7:94:F2:00:69:DA:E6:84:28:8A:24:99:87:83:12:5E","sha256":"84:B7:2E:03:A4:57:90:2F:B2:0A:BB:A6:15:71:11:6B:05:6E:31:4E:5E:76:55:C2:DA:56:13:76:B0:85:E0:6F"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.primecirclenet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1790\r\nOrigin: http://ww38.50gg.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nCookie: cg_uuid=0a864cde3a787be97cb3392856db1131\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1790,"data":"e=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\u0026cri=ABw8CiUCGl\u0026sf=0\u0026dc=\u0026cp=10\u0026gtm=-\u0026gac=-\u0026uvid=3fdd95063869056165ad570f0ebb51be8fe06c52\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=10040\u0026mo=0\u0026pn=11144\u0026spn=1104\u0026fp=432\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.50gg.us\r\ncontent-type: application/json\r\ndate: Sat, 04 Apr 2026 23:12:42 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T23:12:27.997Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww38.50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"ww38.50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"euob.primecirclenet.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js","fqdn":"euob.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"52.84.50.67","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:31.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.primecirclenet.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"77:CB:09:91:B7:EA:42:3C:3E:84:33:70:0A:98:69:44:32:8B:1F:96","sha256":"DF:34:95:1F:9C:A1:61:3F:8F:6A:34:E9:94:51:D8:E0:06:6A:32:14:97:BE:01:16:4E:02:BB:87:9F:8A:1D:34"}}},"request":{"raw":"GET /sxp/i/636f8b858f681acb7bfa6f583a96630a.js HTTP/1.1\r\nHost: euob.primecirclenet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 45183\r\ncontent-encoding: gzip\r\nserver: Caddy\r\ndate: Sat, 04 Apr 2026 13:24:26 GMT\r\ncache-control: max-age=43200\r\nexpires: Sun, 05 Apr 2026 01:24:00 GMT\r\netag: \"1dc06-B8nxmls8TFyIRSMgxj1/ExIooA8\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 2f1d504785a7b18c010970da2bd4ab8c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: -cwiVnPMrI8DGd2dl9-YjJ5XZmjEtHLSPAF-TT01jFmQNE6YLt23yQ==\r\nage: 35311\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":121862,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"data","md5":"ef287973bbf79645f483e0b89805c24f","sha1":"07c9f19a5b3c4c5c88452320c63d7f131228a00f","sha256":"aefd1799aee2a4a1bee047144fc3942f78ddbb11270a25d11d5afcc6168ded70","sha512":"1c35ee3c44279118cac0681545711983d5f2b7acd1b3e509c0e9986f5e928c244ef771c835a45c4037b08fe691a952910c2d880232531f2866d2687e4e3dee41","ssdeep":"1536:XOuWmlw1eU32zEb0wu0RnWuGyVxlicnYtMolHAEh8sqrfje+wUK8LonhdbErReKG:+4lwAZP0RGyARWsqumrRnvlyv/","tlshash":"20c3d6adb2f27025439335a5147f410ae27b1e543c4b8290d17ae9d4ac7ce8e857bfac","first_seen":"2026-03-15T13:25:10.579891Z","last_seen":"2026-04-15T18:10:04.205259Z","times_seen":10426,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":52,"dns":30,"connect":2,"send":0,"wait":19,"receive":2,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/favicon.ico","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"185.53.179.200","port":80,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:31.592Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ww38.50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 23:12:31 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 0\r\nLast-Modified: Wed, 11 Sep 2024 11:38:26 GMT\r\nConnection: keep-alive\r\nETag: \"66e18132-0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"ww38.50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.primecirclenet.com/ct","fqdn":"obseu.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:31.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.primecirclenet.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 20 Mar 2026 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:01:86:31:C7:94:F2:00:69:DA:E6:84:28:8A:24:99:87:83:12:5E","sha256":"84:B7:2E:03:A4:57:90:2F:B2:0A:BB:A6:15:71:11:6B:05:6E:31:4E:5E:76:55:C2:DA:56:13:76:B0:85:E0:6F"}}},"request":{"raw":"POST /ct HTTP/1.1\r\nHost: obseu.primecirclenet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 4462\r\nOrigin: http://ww38.50gg.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4462,"data":"id=92098\u0026url=http%3A%2F%2Fww38.50gg.us%2F\u0026sf=0\u0026tpi=\u0026ch=AdsDeli%20-%20iFrame\u0026uvid=3fdd95063869056165ad570f0ebb51be8fe06c52\u0026tsf=0\u0026tsfmi=\u0026tsfu=\u0026cb=1775344351909\u0026hl=3\u0026op=0\u0026ag=2881387774\u0026rand=73182680516690221925051288221962978891198007767615029820201121019627560012156837062779976122\u0026fs=1280x1024\u0026fst=1280x1024\u0026np=win32\u0026nv=\u0026ref=\u0026ss=1280x1024\u0026nc=0\u0026at=\u0026di=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%3D%3D\u0026dep=0\u0026pre=0\u0026sdd=\u0026cri=ABw8CiUCGl\u0026pto=864\u0026ver=65\u0026gac=-\u0026mei=\u0026ap=\u0026fe=1\u0026duid=1.1775344351.rmucd5xcBSFS6dJP\u0026suid=1.1775344351.HxcWGk5S5mOIqYPG\u0026tuid=1.1775344351.FrMAjNuRywfF0YEb\u0026sid=1.1775344351911.p5JKLfaTVjJ6Ldc2\u0026fbc=-\u0026gtm=-\u0026it=5%2C386%2C123\u0026fbcl=-\u0026gacl=-\u0026gacsd=-\u0026rtic=-\u0026rtict=-\u0026bgc=-\u0026spa=1\u0026urid=0\u0026ab=\u0026sck=-\u0026io=aGA2Oi15fzZz"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.50gg.us\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-type: application/json\r\ndate: Sat, 04 Apr 2026 23:12:32 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\nset-cookie: cg_uuid=0a864cde3a787be97cb3392856db1131; Max-Age=29030400; Path=/; Expires=Sat, 06 Mar 2027 23:12:32 GMT; HttpOnly; Secure; SameSite=None\r\ntiming-allow-origin: http://ww38.50gg.us\r\ncontent-length: 1275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3616,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc7eb519852c8afe98aabb1002612553","sha1":"645fb69a99cf83c87cbc39b9f73ba525202e420b","sha256":"fe20e7c7a5baa57c4e9247c42896382820576274223608847fa93fd16e077686","sha512":"849e72a6b52cce53b515cf7edf18520bae5da19decda7f5fce11599ff749f898e3bfe6195fe9f94f2bf59a3dce6319f98bb306df7679e8e9cd03b14f2e94db1e","ssdeep":"","tlshash":"e8712a38ee644b74e6bd9f6d9ac408ca23d35e21a68f484b4199ffcd06d7361af07084","first_seen":"2026-04-04T23:12:54.706014Z","last_seen":"2026-04-04T23:12:54.706014Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":120,"dns":14,"connect":34,"send":0,"wait":69,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bping.php?vgd_cdv=O3048\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026cid=8CU6073RK\u0026vi=1775344351569213879\u0026hvsid=00001775344351857015326356483074\u0026requrl=http%3A%2F%2F50gg.us\u0026vgd_asn=50304\u0026vgd_rpth=%2Fola\u0026wshp=0\u0026vgd_cage=2\u0026crid=848515096\u0026ugd=4\u0026cc=NO\u0026sc=03\u0026lper=100\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22mQjm%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%229A%22%7D\u0026mspa=0\u0026vgd_tsce=L1189\u0026prid=8PR11258V\u0026gdpr=1\u0026vgd_l2type=dmola\u0026vgd_setup=c21\u0026vgd_wlstp=0\u0026lf=6\u0026wsip=170763362\u0026r=1775344351859\u0026vgd_len=523\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://yfdpco4.com/sk-park.php?pid=9PO15V947\u0026dn=50gg.us\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Fww38.50gg.us%2F\u0026al=en-US%2Cen%3Bq%3D0.5","date":"2026-04-04T23:12:32.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 17:23:40 GMT","end":"Fri, 26 Jun 2026 18:21:19 GMT"},"fingerprint":{"sha1":"14:40:6C:50:EB:72:8B:4F:5B:EB:47:42:A4:23:EB:35:15:51:12:E8","sha256":"BA:91:84:85:E2:31:BD:3E:58:6F:57:08:D1:C4:A3:1E:2F:8A:AE:6E:C6:E4:BC:C8:47:10:06:D6:9F:53:4E:4B"}}},"request":{"raw":"GET /bping.php?vgd_cdv=O3048\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026cid=8CU6073RK\u0026vi=1775344351569213879\u0026hvsid=00001775344351857015326356483074\u0026requrl=http%3A%2F%2F50gg.us\u0026vgd_asn=50304\u0026vgd_rpth=%2Fola\u0026wshp=0\u0026vgd_cage=2\u0026crid=848515096\u0026ugd=4\u0026cc=NO\u0026sc=03\u0026lper=100\u0026ssld=%7B%22QQNN%22%3A%22Ia%22%2C%22QQN75%22%3A%22mQjm%22%2C%22QQ8E%22%3A%22%22%2C%22QQQN%22%3A%229A%22%7D\u0026mspa=0\u0026vgd_tsce=L1189\u0026prid=8PR11258V\u0026gdpr=1\u0026vgd_l2type=dmola\u0026vgd_setup=c21\u0026vgd_wlstp=0\u0026lf=6\u0026wsip=170763362\u0026r=1775344351859\u0026vgd_len=523\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://yfdpco4.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 04 Apr 2026 23:12:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\nexpires: Fri, 03 Apr 2026 23:12:32 GMT\r\npragma: no-cache\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIdy5w%2Bgqyt6NUtMGEwLnNNzeYGxTkHo0Yh5yGyr%2FVC2bIP5izzYmkZn1vEf0oJgi96xQtSvB74JdRxFC1oft18JXVeTeHJxCd5ShJ%2FOXTo4EpbizhpyyJRzwtLzP%2Bo4PW%2FwdCpo8w%3D%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: 9e73ff9849464c11-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 1 x 1","md5":"6f1d74c7168076c7666246504a8c03f2","sha1":"00656377deb1a4393e0cf0055385b08b2b81b46c","sha256":"8ac1703c1c34b2be426deda409d39258f82fae17f13e645f377f337a954aedde","sha512":"e502484faa0dc2a1f23c7f715879db654f29d0af1d6f616467d3d1fc578c2d16fccaacd76c4a5ecae8451dc912323473559d29edbd322fe85b8f1e83a7cdf2f3","ssdeep":"","tlshash":"53900447f1401103d135403007075340070c5030145403050071507ddc1d7553d07410","first_seen":"2025-03-07T21:51:05.009549Z","last_seen":"2026-08-10T13:37:39.74832Z","times_seen":218269,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":129,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.primecirclenet.com/tracker/tc_imp.gif?e=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\u0026cri=ABw8CiUCGl\u0026ts=244\u0026cb=1775344352154","fqdn":"obseu.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:32.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.primecirclenet.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 20 Mar 2026 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:01:86:31:C7:94:F2:00:69:DA:E6:84:28:8A:24:99:87:83:12:5E","sha256":"84:B7:2E:03:A4:57:90:2F:B2:0A:BB:A6:15:71:11:6B:05:6E:31:4E:5E:76:55:C2:DA:56:13:76:B0:85:E0:6F"}}},"request":{"raw":"GET /tracker/tc_imp.gif?e=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\u0026cri=ABw8CiUCGl\u0026ts=244\u0026cb=1775344352154 HTTP/1.1\r\nHost: obseu.primecirclenet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nCookie: cg_uuid=0a864cde3a787be97cb3392856db1131\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\ndate: Sat, 04 Apr 2026 23:12:32 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ncontent-length: 43\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"db04c7b378cb2db912c3ba8a5a774ee3","sha1":"dee34bd86c3484d31002182aa2b7caa4699126b8","sha256":"98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a","sha512":"826225fc21717d8861a05b9d2f959539aad2d2b131b2afed75d88fbca535e1b0d5a0da8ac69713a0876a0d467848a37a0a7f926aeafad8cf28201382d16466ab","ssdeep":"","tlshash":"6490000bca888002caa2c0302b8883022b88b0320228832e80bc30a8ee3b3a20c02000","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-10T13:25:32.225531Z","times_seen":413891,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"50gg.us/","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"103.224.212.210","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T23:12:25.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16254.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:33:26 GMT","end":"Thu, 11 Jun 2026 23:33:25 GMT"},"fingerprint":{"sha1":"C0:A8:C0:56:F9:42:3C:CA:54:7C:6F:92:51:C7:9B:6C:25:C3:DA:90","sha256":"22:06:BD:E0:68:A5:F1:6B:1E:11:AF:6A:7B:E4:AB:D3:75:0B:E3:57:FC:7C:EA:19:7D:36:0B:3B:AA:F0:1A:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sat, 04 Apr 2026 23:12:26 GMT\r\nserver: Apache\r\nset-cookie: __tad=1775344346.2667757; expires=Tue, 01 Apr 2036 23:12:26 GMT; Max-Age=315360000\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 564\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1032,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text","md5":"4a2be2e7289d81224337dde774092004","sha1":"84651ddec1e221426151eb45d7b1e521c7b4edf8","sha256":"79a939daf9a6edc5d3aff260f38ad92074b216766378619d847126e14281a36e","sha512":"4ad2aca296662acee1b7fa10553aa8e636bbb7910a22bf6529c8b91bdf6ab3d24363e69fe5f6b7b1ff15de0aa09f6ef80b2d918faf161535be79bebd050e4c17","ssdeep":"","tlshash":"cd110e04bdc29452b434168c8af1e20d807752c8819d88acd0d9fb389d44ba9d72d9aa","first_seen":"2026-04-04T23:12:54.708657Z","last_seen":"2026-04-04T23:12:54.708657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1264,"timings":{"blocked":535,"dns":201,"connect":157,"send":0,"wait":190,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"50gg.us/js/fingerprint/iife.min.js","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"103.224.212.210","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://50gg.us/","date":"2026-04-04T23:12:26.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"16254.icu","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 13 Mar 2026 23:33:26 GMT","end":"Thu, 11 Jun 2026 23:33:25 GMT"},"fingerprint":{"sha1":"C0:A8:C0:56:F9:42:3C:CA:54:7C:6F:92:51:C7:9B:6C:25:C3:DA:90","sha256":"22:06:BD:E0:68:A5:F1:6B:1E:11:AF:6A:7B:E4:AB:D3:75:0B:E3:57:FC:7C:EA:19:7D:36:0B:3B:AA:F0:1A:97"}}},"request":{"raw":"GET /js/fingerprint/iife.min.js HTTP/1.1\r\nHost: 50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://50gg.us/\r\nCookie: __tad=1775344346.2667757\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Sat, 04 Apr 2026 23:12:27 GMT\r\nserver: Apache\r\nlast-modified: Tue, 22 Oct 2024 03:26:38 GMT\r\netag: \"85c0-62508564b3780\"\r\naccept-ranges: bytes\r\ncontent-length: 34240\r\ncontent-type: text/javascript\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":34240,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33896), with CRLF line terminators","md5":"63f9fd621d1fbd53b7c5856e58c11ccd","sha1":"a46973c2fbdbfeb159e0d717a90f88307e274012","sha256":"c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089","sha512":"d4df433c7368ec078fbc473398a4ab21e6da20950ac4db34338623296887db40320b05b9bde6130e43d2b55c82b81a56b60bab0d6a4c97df54a0cb7a8f09325b","ssdeep":"384:XhQYTcHRx9vfQxcuK83ERxXYxMvtTpIBNwBUZXLew5gc+RW7+5ERNFaqE8E0QI+V:XSbHRTArOGSoyISuNwxJzZbPePKe9y","tlshash":"6cf207d8b2c3b02d227378ba497f6006b63abd55641c4803d57be5c178a4e5a813bfb8","first_seen":"2023-05-01T16:20:27Z","last_seen":"2026-08-10T13:37:39.751039Z","times_seen":71060,"resource_available":true,"data":null}},"time_used":981,"timings":{"blocked":333,"dns":1,"connect":156,"send":0,"wait":157,"receive":156,"ssl":171},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"50gg.us/?tr_uuid=20260405-0912-2642-908a-bd4da67e7528\u0026fp=faed01b113cfb270c624ee1aa793ad6c","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"103.224.212.210","port":80,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T23:12:27.636Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /?tr_uuid=20260405-0912-2642-908a-bd4da67e7528\u0026fp=faed01b113cfb270c624ee1aa793ad6c HTTP/1.1\r\nHost: 50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __tad=1775344346.2667757\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Sat, 04 Apr 2026 23:12:27 GMT\r\nserver: Apache\r\nlocation: http://ww38.50gg.us/\r\ncontent-length: 0\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":159,"dns":0,"connect":158,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/fonts/montserrat_regular/montserrat_regular.woff","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-04-04T23:12:32.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 17:23:40 GMT","end":"Fri, 26 Jun 2026 18:21:19 GMT"},"fingerprint":{"sha1":"14:40:6C:50:EB:72:8B:4F:5B:EB:47:42:A4:23:EB:35:15:51:12:E8","sha256":"BA:91:84:85:E2:31:BD:3E:58:6F:57:08:D1:C4:A3:1E:2F:8A:AE:6E:C6:E4:BC:C8:47:10:06:D6:9F:53:4E:4B"}}},"request":{"raw":"GET /__media__/fonts/montserrat_regular/montserrat_regular.woff HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://realtimesearchresults.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncontent-length: 24744\r\naccess-control-allow-origin: *\r\nedge-control: downstream-ttl=1d\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 23:12:32 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Mon, 16 May 2016 10:39:41 GMT\r\netag: \"60a8-532f33dedf540\"\r\ncontent-type: font/woff\r\nage: 210199\r\nx-cache-status: hit\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8BoSbX37Wmtw2q4oJt2xvFkB7HIHU56sxw6hWqcBCeZrClCNcxLkRn8PAYy9u8h6vTuQDrxZZnZKA5zdIpr14jNtSj8vueqUi5s%2FW8D1M8itwEYdWBfJ1UJcEx8wv7djdUXJ7cktw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e73ff9ddc2bb51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":24744,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 24744, version 1.0","md5":"987e102655eee6557d9e5de5eda2dbd7","sha1":"9cfb173085bc54a3e7a4f377e5184cba87ad7a67","sha256":"1354d1ffff7cde96f66dd463a7a9d9bc627c2ea55c1a12c7f0b5c63594622c3e","sha512":"bccd46bbc05dc333869797877f2702294f24f697bd5cf8c42210092d74ddb261b301fa1cb09f79ddc2fb1dc5a54acb3aabde5454920ab195fc906cfddf1be75a","ssdeep":"768:Vw0BKrqrg0KoirVY+RpyVvAfeiCONpPkIw31R:q0BKH0Koiu+Tyqfe1cCH31R","tlshash":"80b2d138a2776205f24c16f579030b361dda21ba925e47bb062360ae1db9a4cd18a24f","first_seen":"2025-04-10T23:48:29.909914Z","last_seen":"2026-08-10T13:37:39.74101Z","times_seen":196848,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bql.php?vgd_len=5963\u0026\u0026vgd_l2type=dmola\u0026fp=WPbDfI9ikSVoMkjOpW38Eor9F0sbw-06rWn-BmP37V71uC1jhtbyHV10oVsoWIvwtcIWg-jJMquk4oOsdRgL4Ejwvwp-0tJQMgCM2AaosndqEIeBBqQ96WZITwon8L0S\u0026cme=GQOPSU1TwFb9JQmCrrKvFoe4Ik-S29w_s6W2c-conwHo553D_qKWKKJIIMN7NXQ-19QCEmCaBhrfRq7IyJNyHJ_-wacCigUHFzX508a1d3FVEOiiouqivd6Oq6v_9A1nBUAt3QQrYgL1xT-0bpwuDjRbd4BWChe6ZfQfcfWaVtZv-yPh0-VBFuG8ITKMotCUft2egtHo_CZc6z5kz2fJDcyjw_s2oRAnaopHSfLbZZuwjtWe-DNrK8kf8kmigvm9eZSa_gfyjfE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRITkm3UYmqa2ZYjzrUmpKmuM%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7ClamrFe8-Z8zzAgmKSBQrLtW1OMiJWnSiPOBp3sqvsgCgNJEw-KCjV0wVtfE7rSyeeFmElkv6Pp88KMenaa-iYcJgkFKDILhmD9dGkVWL6chytf1JnXPF7yMgmbnGJIfvBQ34DkZoDrmVBSg_InxmFbhXCa321kIYiKy0OMpH8OLdmXEzQKUU5z7XYmRlDVVbL0R4BvQxQXEM1nyQ7z97PPFJx2VIfdAAjbRGCv-EmRW7jxJq0hPTQvsdQl26ItRkQ-v260EWD5tSBB1QCg6pszgb91PdDhZoN8hcaCMN3hMwPDTZSUWy0qa6rN8uhtumWYwTOJuGVkceQOVL3K7fpg1EDqLgt5VRsSHkF2r0U50DRzZYtO3Ky-pwNb9SLCpL-R6CUrne4xuaqFclNHMdjl6NN2rnC4wa3r5s59hk10GhpTOSBlnn5-8QI94GswE07V4ICk92JYF7DsNYF5LdbvYRAYzHRgtP7bR1tpXbdSAZ9rZlnDY7UCFcnV6D5lrbdZYaMNfTRm0C5oFRzogmbl0CJeXAUVrSBEeNpOM2BghtXk-dE0rpmUFi9G0LjjeeMio9q9Bx64DIIE-HsKTgzuZn44Bi8tvuRgWrnzMIkwSUAA962jUPUb6UrzI6ApT4arqPzlXhPqV4Q-OzR-TLC7QWG6AAmTVd2zlWEzhXtVNWdtXPyyiy4oUfFHgjRKb7iPZcCd-Ja4DHQYRIuo8nZQ9l9aOsB7Y0kVeolOgXvg1lLqmR-sZq0VAGOsdGl7b6SKpBv-3LXe8cyz_chC-8lgT1gY07XVM2mSuwpxdELOBrlKAK2zFMKm1DdXK-W39C%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Play+Browser+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=1\u0026kid[]=140762482\u0026kbc2[]=clid_serp%3D7105%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D5%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D1043.59%7C5%3D30%7C6%3D0%7C16%3D1%7C19%3D1043.59%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D4.3778%7C7%3D0.0287%7C8%3D040417%7C13%3D0.0219%7C14%3D040419%7Ckus%3D0.4076%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D219410%7Cclpr%3D0.850900%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228238072134818907325600512\u0026kwd[]=Interactive+Browser+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=2\u0026kid[]=1326076834\u0026kbc2[]=clid_serp%3D26036%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D3%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D2608.92%7C5%3D21%7C6%3D1%7C16%3D2%7C19%3D2608.92%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D1.1764%7C7%3D0.0157%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4036%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D134100%7Cclpr%3D0.905500%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228264045150474690374275840\u0026kwd[]=Play+Casual+Games+Online\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=3\u0026kid[]=324879774\u0026kbc2[]=clid_serp%3D-2%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D6%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D2084.74%7C5%3D17%7C6%3D1%7C16%3D2%7C19%3D2084.74%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D2.2403%7C7%3D0.0204%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4132%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D205789%7Cclpr%3D1.000000%7Ccllvl%3D3%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228264045150474690374275840\u0026kwd[]=Online+Casual+Browser+Games+Collection\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=4\u0026kid[]=2161976400\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D4%7C17%3D-1%7C18%3D451.11%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D3.1806%7C7%3D0.0216%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4071%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D205789%7Cclpr%3D0.874000%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228238072130315307698229504\u0026kwd[]=Discover+Fun+Online+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=5\u0026kid[]=1325932004\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D5076%7Cclid_serp%3D7105%7Cakp%3D8%7C17%3D-1%7C18%3D50.15%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D0.4188%7C7%3D0.0141%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4261%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D50308%7Cclpr%3D0.931500%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79440933458516512328309412096\u0026v=1\u0026gdpr=1\u0026geo=59.93%7C10.73\u0026lper=100\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763672\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1775344351569213879\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=1\u0026vgd_tsce=L1189-S1189\u0026vgd_l3_sc=03\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=64304\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=oslo\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22impl_type%22%3A%22skp%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgd_ifrmode=14\u0026sbdrId=\u0026verid=\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2152288995185836520\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3049\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=91.90.42.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_1024\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A1024\u0026vgd_sc=03\u0026hvsid=00001775344351857015326356483074\u0026rc=0\u0026rand=1775344352979\u0026acid=undefined\u0026matm=1775344352979\u0026vgde_ltimesrc=u\u0026vgde_ltime=u9u9\u0026vgde_rtime=iWu\u0026vgde_etm=AX\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AWFA%2C%22QNLLQ71L7%22%3AW9%2C%22QNLLLJzOJL%22%3AAW%2C%22QNLLJ-JN%22%3AFW%7D\u0026vgd_lhl=2343\u0026vgd_sbSup=1\u0026vgd_nrrs=64304\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-04-04T23:12:33.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 17:23:40 GMT","end":"Fri, 26 Jun 2026 18:21:19 GMT"},"fingerprint":{"sha1":"14:40:6C:50:EB:72:8B:4F:5B:EB:47:42:A4:23:EB:35:15:51:12:E8","sha256":"BA:91:84:85:E2:31:BD:3E:58:6F:57:08:D1:C4:A3:1E:2F:8A:AE:6E:C6:E4:BC:C8:47:10:06:D6:9F:53:4E:4B"}}},"request":{"raw":"GET /bql.php?vgd_len=5963\u0026\u0026vgd_l2type=dmola\u0026fp=WPbDfI9ikSVoMkjOpW38Eor9F0sbw-06rWn-BmP37V71uC1jhtbyHV10oVsoWIvwtcIWg-jJMquk4oOsdRgL4Ejwvwp-0tJQMgCM2AaosndqEIeBBqQ96WZITwon8L0S\u0026cme=GQOPSU1TwFb9JQmCrrKvFoe4Ik-S29w_s6W2c-conwHo553D_qKWKKJIIMN7NXQ-19QCEmCaBhrfRq7IyJNyHJ_-wacCigUHFzX508a1d3FVEOiiouqivd6Oq6v_9A1nBUAt3QQrYgL1xT-0bpwuDjRbd4BWChe6ZfQfcfWaVtZv-yPh0-VBFuG8ITKMotCUft2egtHo_CZc6z5kz2fJDcyjw_s2oRAnaopHSfLbZZuwjtWe-DNrK8kf8kmigvm9eZSa_gfyjfE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRITkm3UYmqa2ZYjzrUmpKmuM%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7ClamrFe8-Z8zzAgmKSBQrLtW1OMiJWnSiPOBp3sqvsgCgNJEw-KCjV0wVtfE7rSyeeFmElkv6Pp88KMenaa-iYcJgkFKDILhmD9dGkVWL6chytf1JnXPF7yMgmbnGJIfvBQ34DkZoDrmVBSg_InxmFbhXCa321kIYiKy0OMpH8OLdmXEzQKUU5z7XYmRlDVVbL0R4BvQxQXEM1nyQ7z97PPFJx2VIfdAAjbRGCv-EmRW7jxJq0hPTQvsdQl26ItRkQ-v260EWD5tSBB1QCg6pszgb91PdDhZoN8hcaCMN3hMwPDTZSUWy0qa6rN8uhtumWYwTOJuGVkceQOVL3K7fpg1EDqLgt5VRsSHkF2r0U50DRzZYtO3Ky-pwNb9SLCpL-R6CUrne4xuaqFclNHMdjl6NN2rnC4wa3r5s59hk10GhpTOSBlnn5-8QI94GswE07V4ICk92JYF7DsNYF5LdbvYRAYzHRgtP7bR1tpXbdSAZ9rZlnDY7UCFcnV6D5lrbdZYaMNfTRm0C5oFRzogmbl0CJeXAUVrSBEeNpOM2BghtXk-dE0rpmUFi9G0LjjeeMio9q9Bx64DIIE-HsKTgzuZn44Bi8tvuRgWrnzMIkwSUAA962jUPUb6UrzI6ApT4arqPzlXhPqV4Q-OzR-TLC7QWG6AAmTVd2zlWEzhXtVNWdtXPyyiy4oUfFHgjRKb7iPZcCd-Ja4DHQYRIuo8nZQ9l9aOsB7Y0kVeolOgXvg1lLqmR-sZq0VAGOsdGl7b6SKpBv-3LXe8cyz_chC-8lgT1gY07XVM2mSuwpxdELOBrlKAK2zFMKm1DdXK-W39C%7C\u0026ctst=Default\u0026ksu=360\u0026fdkt=658\u0026vgde_kbbh=fuoyxQBuGUBO\u0026kwd[]=Play+Browser+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=1\u0026kid[]=140762482\u0026kbc2[]=clid_serp%3D7105%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D5%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D1043.59%7C5%3D30%7C6%3D0%7C16%3D1%7C19%3D1043.59%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D4.3778%7C7%3D0.0287%7C8%3D040417%7C13%3D0.0219%7C14%3D040419%7Ckus%3D0.4076%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D219410%7Cclpr%3D0.850900%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228238072134818907325600512\u0026kwd[]=Interactive+Browser+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=2\u0026kid[]=1326076834\u0026kbc2[]=clid_serp%3D26036%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D3%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D2608.92%7C5%3D21%7C6%3D1%7C16%3D2%7C19%3D2608.92%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D1.1764%7C7%3D0.0157%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4036%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D134100%7Cclpr%3D0.905500%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228264045150474690374275840\u0026kwd[]=Play+Casual+Games+Online\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=3\u0026kid[]=324879774\u0026kbc2[]=clid_serp%3D-2%7Cclid_fz%3D-2%7Crla%3D73.60%7Clr%3D0.08%7Cakp%3D6%7Crlhp%3D70.00%7Cdmodel%3D2%7C17%3D-1%7C18%3D2084.74%7C5%3D17%7C6%3D1%7C16%3D2%7C19%3D2084.74%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D2.2403%7C7%3D0.0204%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4132%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D205789%7Cclpr%3D1.000000%7Ccllvl%3D3%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228264045150474690374275840\u0026kwd[]=Online+Casual+Browser+Games+Collection\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=4\u0026kid[]=2161976400\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D-2%7Cclid_serp%3D-2%7Cakp%3D4%7C17%3D-1%7C18%3D451.11%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D3.1806%7C7%3D0.0216%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4071%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D205789%7Cclpr%3D0.874000%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79228238072130315307698229504\u0026kwd[]=Discover+Fun+Online+Games\u0026kwt[]=658\u0026kbc[]=a789978d3e13b9ceaac59de84c4f1c16.d2s\u0026kwp[]=5\u0026kid[]=1325932004\u0026kbc2[]=dmodel%3D2%7Cclid_fz%3D5076%7Cclid_serp%3D7105%7Cakp%3D8%7C17%3D-1%7C18%3D50.15%7C5%3D-1%7C6%3D-1%7C16%3D-1%7C19%3D0.00%7C24%3D0%7C25%3D0%7C22%3D4.0505%7C23%3D0.4188%7C7%3D0.0141%7C8%3D040417%7C13%3D0.0196%7C14%3D040419%7Ckus%3D0.4261%7Ckucs%3D5.0000%7Ckcucs%3D5.0000%7Ckcucs2%3D5.0000%7Ckssks%3D5.0000%7Crcid%3D50308%7Cclpr%3D0.931500%7Ccllvl%3D5%7Cokt%3D658%7Cbdkt%3D658%7Cps%3D1.000%7Cps_id%3D2\u0026ktd[]=79440933458516512328309412096\u0026v=1\u0026gdpr=1\u0026geo=59.93%7C10.73\u0026lper=100\u0026lpid=\u0026tsid=1005\u0026hint=\u0026cc=NO\u0026wsip=170763672\u0026bca=0\u0026ugd=4\u0026vgde_setid=Nfu\u0026vgde_chost=LJ1j78YJQJ1LNwLJQxj7Q.NmY\u0026cid=8CU6073RK\u0026vi=1775344351569213879\u0026vsid=DefVid\u0026tdAdd[]=asnum%3D50304\u0026vgde_test_data_struct=%7B%22EO7E8O%22%3Au%7D\u0026vgd_adprefflag=00\u0026vgd_adpref_diff=1010\u0026vgd_fm_lang=EN\u0026vgd_implt=3\u0026vgd_cage=1\u0026vgd_tsce=L1189-S1189\u0026vgd_l3_sc=03\u0026vgd_pdtid=1\u0026vgd_oscar=1\u0026vgd_ctrlid=O_SERP\u0026vgd_nrrv=64304\u0026vgd_nrrmf=8301000480a\u0026vgd_nrrsf=scrr\u0026vgd_cty=oslo\u0026vgd_csovr=0\u0026vgd_intc_log=%7B%22impl_type%22%3A%22skp%22%2C%22xvip%22%3A%22208.91.196.46%22%7D\u0026vgd_ifrmode=14\u0026sbdrId=\u0026verid=\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g\u0026kbbq=%26asn%3D50304\u0026vgd_ppvi=2152288995185836520\u0026vgd_wlstp=0\u0026vgd_vstrid=DefVid\u0026vgd_scsver=3049\u0026vgd_himglg=K0P0-O0K0-S0\u0026vgd_cache_metadata=%7B%22kbb%22%3Afalse%7D\u0026vgd_cfud=251031\u0026vgd_optout=0\u0026vgd_l2shld=1\u0026vgd_akcip=91.90.42.0\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026vgd_och=0\u0026vgd_rensize=1280_1024\u0026vgd_scr_h=1024\u0026vgd_scr_w=1280\u0026vgd_col_sch=l\u0026vgd_be=0\u0026vgd_nmerr=1\u0026tdAdd[]=uiparams%3D%3Brend_w%3A1280%3Brend_h%3A1024\u0026vgd_sc=03\u0026hvsid=00001775344351857015326356483074\u0026rc=0\u0026rand=1775344352979\u0026acid=undefined\u0026matm=1775344352979\u0026vgde_ltimesrc=u\u0026vgde_ltime=u9u9\u0026vgde_rtime=iWu\u0026vgde_etm=AX\u0026vgde_timeObj=%7B%22juJ-JN%22%3Azxjj%2C%22jfjm1O%22%3AWFA%2C%22QNLLQ71L7%22%3AW9%2C%22QNLLLJzOJL%22%3AAW%2C%22QNLLJ-JN%22%3AFW%7D\u0026vgd_lhl=2343\u0026vgd_sbSup=1\u0026vgd_nrrs=64304\u0026vgde_cdeplbl=1E8Mzm7M1e18j1GjJ\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: text/javascript\r\nexpires: Fri, 03 Apr 2026 23:12:33 GMT\r\npragma: no-cache\r\ntiming-allow-origin: *\r\ndate: Sat, 04 Apr 2026 23:12:33 GMT\r\ncontent-length: 15\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2j0gD0UL0FbvFHzjsX9KpI6kcbSn0kdiX22gjEomYj9NgfG9XGz37so%2F6P5teVKNuzNBwuKYgxX3D8wA6KXZXbsjtg3n5wspkIYaYfI0Jh9luRY%2B%2FJDu76L0YVzy%2FAPhPQhOIeJbzg%3D%3D\"}]}\r\ncf-ray: 9e73ff9eac30b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-08-10T13:37:39.74151Z","times_seen":216643,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"obseu.primecirclenet.com/mon","fqdn":"obseu.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:33.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.primecirclenet.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 20 Mar 2026 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:01:86:31:C7:94:F2:00:69:DA:E6:84:28:8A:24:99:87:83:12:5E","sha256":"84:B7:2E:03:A4:57:90:2F:B2:0A:BB:A6:15:71:11:6B:05:6E:31:4E:5E:76:55:C2:DA:56:13:76:B0:85:E0:6F"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.primecirclenet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2641\r\nOrigin: http://ww38.50gg.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nCookie: cg_uuid=0a864cde3a787be97cb3392856db1131\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2641,"data":"e=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\u0026cri=ABw8CiUCGl\u0026sf=0\u0026dc=bmZiemodem1tN216bW16bRwxKjMzem0cbmZtem0cbGluaXptHGZtb3ptHGZmb3ptHGdnbHptHGZmb3ptHGdpZ3ptHG96bRxua3ptHG5vaW96bRxub2lvemobeWxuYnpoHXptbSh6bW16bB5uaG16bRx6bW03em1temwea216bRx6bW09AHptbXpsHmh6aBt5aG5iemgdem1tNjE8em1temwebnptHHptbT0Aem1temweb3poG3lua25iemgdem1tLHptbXpsHm56bRx6bW09AHptbXpsHm96aBt5bmpmYnpoHXptbTpvem1temweem1tKXE4OisdPisrOi0mem1vNix6bW8xMCt6bW8%2Bem1vOSoxPCs2MDF6bW16bRx6bW09AHptbXpsHm96aBt5bG1pYnpqHXpoHXptbT16bW16bB5vem0cem1tLHptbXpsHnptbW56bW16aBt6bRx6aB16bW09em1temweb3ptHHptbSx6bW16bB56bW1uem1temgbemobeWptb2J6aB16bW0vem1temweem1tCDYxbG16bW16bRx6bW0zem1temweemodem1tOjFyCgx6bW16bRx6bW06MXptbXpqG3ptHHptbTc8em1temwea2d6bRx6bW0oOCl6bW16bB56bW0SOiw%2Bem1tem0cem1tKDgtem1temweem1tMzMpMi82Lzp6bW16bRx6bW09AHptbXpsHmtoemgbeWdoa2J6aB16bW0sem1temweb3ptHHptbTp6bW16bB56bW0PKj0zNjwUOiYcLTo7OjErNj4zem1vNix6bW8xMCt6bW87Ojk2MTo7em1tem0cem1tPQB6bW16bB5vemgb\u0026cp=1\u0026gtm=-\u0026gac=-\u0026uvid=3fdd95063869056165ad570f0ebb51be8fe06c52\u0026tb=1\u0026ich=1\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=1018\u0026mo=0\u0026pn=2122\u0026spn=1104\u0026fp=432"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.50gg.us\r\ncontent-type: application/json\r\ndate: Sat, 04 Apr 2026 23:12:33 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.primecirclenet.com/mon","fqdn":"obseu.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:35.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.primecirclenet.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 20 Mar 2026 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:01:86:31:C7:94:F2:00:69:DA:E6:84:28:8A:24:99:87:83:12:5E","sha256":"84:B7:2E:03:A4:57:90:2F:B2:0A:BB:A6:15:71:11:6B:05:6E:31:4E:5E:76:55:C2:DA:56:13:76:B0:85:E0:6F"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.primecirclenet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1787\r\nOrigin: http://ww38.50gg.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nCookie: cg_uuid=0a864cde3a787be97cb3392856db1131\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1787,"data":"e=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\u0026cri=ABw8CiUCGl\u0026sf=0\u0026dc=\u0026cp=3\u0026gtm=-\u0026gac=-\u0026uvid=3fdd95063869056165ad570f0ebb51be8fe06c52\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=3023\u0026mo=0\u0026pn=4127\u0026spn=1104\u0026fp=432\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.50gg.us\r\ncontent-type: application/json\r\ndate: Sat, 04 Apr 2026 23:12:35 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"obseu.primecirclenet.com/mon","fqdn":"obseu.primecirclenet.com","domain":"primecirclenet.com","tld":"com"},"ip":{"addr":"54.75.69.192","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:37.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.primecirclenet.com","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Fri, 20 Mar 2026 00:00:00 GMT","end":"Thu, 18 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"00:01:86:31:C7:94:F2:00:69:DA:E6:84:28:8A:24:99:87:83:12:5E","sha256":"84:B7:2E:03:A4:57:90:2F:B2:0A:BB:A6:15:71:11:6B:05:6E:31:4E:5E:76:55:C2:DA:56:13:76:B0:85:E0:6F"}}},"request":{"raw":"POST /mon HTTP/1.1\r\nHost: obseu.primecirclenet.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 1787\r\nOrigin: http://ww38.50gg.us\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nCookie: cg_uuid=0a864cde3a787be97cb3392856db1131\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1787,"data":"e=37dfbd8ee84e00126debc431ee448f9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d57138d642f17071a10acf9f29f6749d38b8f037f6b4efd29700c80698a6bc0576206209a50085a33500dc7bf684e77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2e47230f5aa4882e667f03a6f24d7a85afa02ec1e853761b2aadf4f496c971e8cfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b06267b6951433b9c6be379014e354e6d10ac84ed7dd3d916976c9c735d26490d2eafb93fdb00b20e451c9a9e63b0326b6d17f82f113a14f421dc51f0fd38593d8c6ecc568886a9edeb48238b63c5832955e2c9a9fd30165dbcc63a80ee0d303d67bac69494e57da3db2019c9fee73f8c978c21fc681d7dc6b9872422da51e5b1330097ac78d6dbf42d8daac22e5c625b2d0629a92e7be25b6e3b50d3624c6bf100b80e55a084cbbb7b067a52687e35ceee232af75a030964fc91dd7a938db072ee4af977a223660022c17411eaae08b70cf03b54d525e2af0b353c29b1e08e2a5d9b8bc70dfeae5fd9ae5a8f04f5321fd4787db457cd7063c4fc5694f7072f77ca8731ac6efc2668b7e9578cef878c8f05eeb187942265606738edcf69879220188125794cdd8bcb7cf50019ab3b87c88b73b28bfa549390afccca62f60de47f24d8308a77ac246c9c201f9a433e59c8dd19c4361eae12515c00bd7d7ceee74d52b626005fd1d1142adb11dcfba06c0f2f6d4468fc3de2104375bac69fa41fb29edd238d26b1c7f236f2a26be049c8b3149ab3b95e5e73fd8cf4d8e7c6fbd51217d8de2d01648ae2ca0cc02d006310048b4273ec2f2957ac1572288da50f28ecff5805ec802167140b0652f4f95900d5ca62eb8bd926f9dd9ed0e5d7ca56a3c1a5d994242ec98f20a40d3707bd6978441cdc8a88d1d7bfc22b1592f0a9052312786c20e538fdef19b\u0026cri=ABw8CiUCGl\u0026sf=0\u0026dc=\u0026cp=5\u0026gtm=-\u0026gac=-\u0026uvid=3fdd95063869056165ad570f0ebb51be8fe06c52\u0026tb=1\u0026ich=0\u0026ws=1280x1024\u0026wos=1280x1024\u0026ver=13\u0026fi=\u0026ti=5028\u0026mo=0\u0026pn=6133\u0026spn=1104\u0026fp=432\u0026snt=1"}},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-origin: http://ww38.50gg.us\r\ncontent-type: application/json\r\ndate: Sat, 04 Apr 2026 23:12:37 GMT\r\ncontent-length: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"50gg.us/favicon.ico","fqdn":"50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://50gg.us/","date":"2026-04-04T23:12:27.317Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://50gg.us/\r\nCookie: __tad=1775344346.2667757\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T14:02:13.833701Z","times_seen":17818578,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":1,"connect":162,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"yfdpco4.com/sk-park.php?pid=9PO15V947\u0026dn=50gg.us\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Fww38.50gg.us%2F\u0026al=en-US%2Cen%3Bq%3D0.5","fqdn":"yfdpco4.com","domain":"yfdpco4.com","tld":"com"},"ip":{"addr":"208.91.196.46","port":80,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:31.603Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /sk-park.php?pid=9PO15V947\u0026dn=50gg.us\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Fww38.50gg.us%2F\u0026al=en-US%2Cen%3Bq%3D0.5 HTTP/1.1\r\nHost: yfdpco4.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww38.50gg.us/\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 04 Apr 2026 23:11:20 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nx-sc-h: 21-2zsm\r\nvia: 1.1 google\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":10781,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (10614)","md5":"6a960d53ffda5db3d041a049869b9306","sha1":"be50673ebf8d8280cb8bfde25f878961d70eefdb","sha256":"139258b7bde7ba1bbfae0e20ca42513b59d528fe9691640c00f80c667bb1c980","sha512":"73456306e4cd5d4130f856570351fe531f3612e2a410a51261880e6fa13a2707731ed3fc9896133ae79cd34bff2080e5b399238e15c3e804d517bc1cb976d043","ssdeep":"192:fbe7NwkLbD5Jev4XaZpwf7EDFmCRZOoP9LGAvPLbD5Jev4XaZpwf7EDFmCRZOoPq:Rkev4wvLyAvPev4wvpyL69wd","tlshash":"5022f85282374c2058da0482dd7e6fc731aa6d7f7dbc340d4ccc8991b06eb676e369a9","first_seen":"2026-04-04T23:12:54.711591Z","last_seen":"2026-04-04T23:12:54.711591Z","times_seen":1,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":131,"dns":1,"connect":131,"send":0,"wait":231,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"yfdpco4.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//bg1.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-04-04T23:12:32.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 17:23:40 GMT","end":"Fri, 26 Jun 2026 18:21:19 GMT"},"fingerprint":{"sha1":"14:40:6C:50:EB:72:8B:4F:5B:EB:47:42:A4:23:EB:35:15:51:12:E8","sha256":"BA:91:84:85:E2:31:BD:3E:58:6F:57:08:D1:C4:A3:1E:2F:8A:AE:6E:C6:E4:BC:C8:47:10:06:D6:9F:53:4E:4B"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//bg1.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\naccept-ranges: bytes\r\ncontent-length: 17986\r\nvia: 1.1 google\r\ndate: Sat, 04 Apr 2026 23:12:32 GMT\r\ncache-control: public, max-age=604800\r\nlast-modified: Thu, 06 Mar 2025 12:55:21 GMT\r\netag: \"4642-62fac04c7759a\"\r\ncontent-type: image/png\r\nage: 210560\r\nx-cache-status: revalidated\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zGsKcomROGsWRDe5o9KDE9H2tqgNGoVgbufk1WPGzC8feekdBhooUoHLX1XeTAPSCB22BbyE3twwo7AxnZY1o%2BpRLrf1wMCi%2BAkFcGg6h6wU1MPH%2B1DzxBfzzlKboktg7GbWPCrtsA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e73ff9dcc2ab51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":17986,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1730 x 988, 4-bit colormap, non-interlaced","md5":"825ccd29ac102fcadaf92b2343d5917b","sha1":"24472e766cfac5b82a73b219796556a0a3702bd6","sha256":"0878fb2875c0ad852de8fb3e8f443afdf3064890f1443b3feccc274382f913cd","sha512":"71b8e7c0813227f5efa4b4e0561978b13672f46ee441bc222ad77aa46a32f0f44a5dab3ef038bb3418190e69dced597a79e77566da01a259f1cd6b5298a08662","ssdeep":"384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N","tlshash":"8a82bef49ea4241cdde2dfbce09243d635e8fb03481a9c516bcb46c27459ea2782c71d","first_seen":"2023-04-06T22:32:28Z","last_seen":"2026-08-10T13:37:39.747839Z","times_seen":223932,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":8,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"l.cdn-fileserver.com/bqi.php?vgd_len=1762\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1189-S1189\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O3048\u0026vgd_cage=1\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026crid=848515096\u0026requrl=http%3A%2F%2F50gg.us\u0026vi=1775344351569213879\u0026ugd=4\u0026cc=NO\u0026sc=03\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001775344351857015326356483074\u0026cme=GQOPSU1TwFb9JQmCrrKvFoe4Ik-S29w_s6W2c-conwHo553D_qKWKKJIIMN7NXQ-19QCEmCaBhrfRq7IyJNyHJ_-wacCigUHFzX508a1d3FVEOiiouqivd6Oq6v_9A1nBUAt3QQrYgL1xT-0bpwuDjRbd4BWChe6ZfQfcfWaVtZv-yPh0-VBFuG8ITKMotCUft2egtHo_CZc6z5kz2fJDcyjw_s2oRAnaopHSfLbZZuwjtWe-DNrK8kf8kmigvm9eZSa_gfyjfE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRITkm3UYmqa2ZYjzrUmpKmuM%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7ClamrFe8-Z8zzAgmKSBQrLtW1OMiJWnSiPOBp3sqvsgCgNJEw-KCjV0wVtfE7rSyeeFmElkv6Pp88KMenaa-iYcJgkFKDILhmD9dGkVWL6chytf1JnXPF7yMgmbnGJIfvBQ34DkZoDrmVBSg_InxmFbhXCa321kIYiKy0OMpH8OLdmXEzQKUU5z7XYmRlDVVbL0R4BvQxQXEM1nyQ7z97PPFJx2VIfdAAjbRGCv-EmRW7jxJq0hPTQvsdQl26ItRkQ-v260EWD5tSBB1QCg6pszgb91PdDhZoN8hcaCMN3hMwPDTZSUWy0qa6rN8uhtumWYwTOJuGVkceQOVL3K7fpg1EDqLgt5VRsSHkF2r0U50DRzZYtO3Ky-pwNb9SLCpL-R6CUrne4xuaqFclNHMdjl6NN2rnC4wa3r5s59hk10GhpTOSBlnn5-8QI94GswE07V4ICk92JYF7DsNYF5LdbvYRAYzHRgtP7bR1tpXbdSAZ9rZlnDY7UCFcnV6D5lrbdZYaMNfTRm0C5oFRzogmbl0CJeXAUVrSBEeNpOM2BghtXk-dE0rpmUFi9G0LjjeeMio9q9Bx64DIIE-HsKTgzuZn44Bi8tvuRgWrnzMIkwSUAA962jUPUb6UrzI6ApT4arqPzlXhPqV4Q-OzR-TLC7QWG6AAmTVd2zlWEzhXtVNWdtXPyyiy4oUfFHgjRKb7iPZcCd-Ja4DHQYRIuo8nZQ9l9aOsB7Y0kVeolOgXvg1lLqmR-sZq0VAGOsdGl7b6SKpBv-3LXe8cyz_chC-8lgT1gY07XVM2mSuwpxdELOBrlKAK2zFMKm1DdXK-W39C%7C\u0026fp=WPbDfI9ikSVoMkjOpW38Eor9F0sbw-06rWn-BmP37V71uC1jhtbyHV10oVsoWIvwtcIWg-jJMquk4oOsdRgL4Ejwvwp-0tJQMgCM2AaosndqEIeBBqQ96WZITwon8L0S\u0026vgd_rensize=1280_1024\u0026vgd_end=1","fqdn":"l.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-04-04T23:12:34.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 17:23:40 GMT","end":"Fri, 26 Jun 2026 18:21:19 GMT"},"fingerprint":{"sha1":"14:40:6C:50:EB:72:8B:4F:5B:EB:47:42:A4:23:EB:35:15:51:12:E8","sha256":"BA:91:84:85:E2:31:BD:3E:58:6F:57:08:D1:C4:A3:1E:2F:8A:AE:6E:C6:E4:BC:C8:47:10:06:D6:9F:53:4E:4B"}}},"request":{"raw":"GET /bqi.php?vgd_len=1762\u0026\u0026vgd_aref=0\u0026vgd_tsce=L1189-S1189\u0026vgd_l2type=dmola\u0026vgd_ydspr=0\u0026vgd_cdv=O3048\u0026vgd_cage=1\u0026vgd_pgids=0\u0026vgd_pdtid=1\u0026vgd_oreqf=one\u0026vgd_oresf=one\u0026lf=3\u0026prid=8PR11258V\u0026cid=8CU6073RK\u0026crid=848515096\u0026requrl=http%3A%2F%2F50gg.us\u0026vi=1775344351569213879\u0026ugd=4\u0026cc=NO\u0026sc=03\u0026gdpr=1\u0026vgd_acid=undefined\u0026hvsid=00001775344351857015326356483074\u0026cme=GQOPSU1TwFb9JQmCrrKvFoe4Ik-S29w_s6W2c-conwHo553D_qKWKKJIIMN7NXQ-19QCEmCaBhrfRq7IyJNyHJ_-wacCigUHFzX508a1d3FVEOiiouqivd6Oq6v_9A1nBUAt3QQrYgL1xT-0bpwuDjRbd4BWChe6ZfQfcfWaVtZv-yPh0-VBFuG8ITKMotCUft2egtHo_CZc6z5kz2fJDcyjw_s2oRAnaopHSfLbZZuwjtWe-DNrK8kf8kmigvm9eZSa_gfyjfE%3D%7C%7CWOR44ZnjshyX0FEZj6c52uG8KGTsvju_%7CWtJPvijWHRsfBv4nOZN-Vs0s0qvvEfG0%7CxDcVMoSqRITkm3UYmqa2ZYjzrUmpKmuM%7Cb8KlCmE6kTENKxSBIehsQLbXBNKeHPZV%7ClamrFe8-Z8zzAgmKSBQrLtW1OMiJWnSiPOBp3sqvsgCgNJEw-KCjV0wVtfE7rSyeeFmElkv6Pp88KMenaa-iYcJgkFKDILhmD9dGkVWL6chytf1JnXPF7yMgmbnGJIfvBQ34DkZoDrmVBSg_InxmFbhXCa321kIYiKy0OMpH8OLdmXEzQKUU5z7XYmRlDVVbL0R4BvQxQXEM1nyQ7z97PPFJx2VIfdAAjbRGCv-EmRW7jxJq0hPTQvsdQl26ItRkQ-v260EWD5tSBB1QCg6pszgb91PdDhZoN8hcaCMN3hMwPDTZSUWy0qa6rN8uhtumWYwTOJuGVkceQOVL3K7fpg1EDqLgt5VRsSHkF2r0U50DRzZYtO3Ky-pwNb9SLCpL-R6CUrne4xuaqFclNHMdjl6NN2rnC4wa3r5s59hk10GhpTOSBlnn5-8QI94GswE07V4ICk92JYF7DsNYF5LdbvYRAYzHRgtP7bR1tpXbdSAZ9rZlnDY7UCFcnV6D5lrbdZYaMNfTRm0C5oFRzogmbl0CJeXAUVrSBEeNpOM2BghtXk-dE0rpmUFi9G0LjjeeMio9q9Bx64DIIE-HsKTgzuZn44Bi8tvuRgWrnzMIkwSUAA962jUPUb6UrzI6ApT4arqPzlXhPqV4Q-OzR-TLC7QWG6AAmTVd2zlWEzhXtVNWdtXPyyiy4oUfFHgjRKb7iPZcCd-Ja4DHQYRIuo8nZQ9l9aOsB7Y0kVeolOgXvg1lLqmR-sZq0VAGOsdGl7b6SKpBv-3LXe8cyz_chC-8lgT1gY07XVM2mSuwpxdELOBrlKAK2zFMKm1DdXK-W39C%7C\u0026fp=WPbDfI9ikSVoMkjOpW38Eor9F0sbw-06rWn-BmP37V71uC1jhtbyHV10oVsoWIvwtcIWg-jJMquk4oOsdRgL4Ejwvwp-0tJQMgCM2AaosndqEIeBBqQ96WZITwon8L0S\u0026vgd_rensize=1280_1024\u0026vgd_end=1 HTTP/1.1\r\nHost: l.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform-Version\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, no-cache, no-store\r\ncontent-type: text/javascript\r\nexpires: Fri, 03 Apr 2026 23:12:34 GMT\r\npragma: no-cache\r\ndate: Sat, 04 Apr 2026 23:12:34 GMT\r\ncontent-length: 15\r\nvia: 1.1 google\r\nstrict-transport-security: max-age=63072000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5PwzD%2B6DzX8z3eiEbs1fxmFhexNNhX39UG%2BWz6gifyKb2EqaHkFrEmRng9TSbsP31uJw43mJ2oJ3%2FhFTKMGEcwg6XZKLqxztCO6mdY7BFOni88IBme%2Bv2z31%2BwRdBfygfdc3G9w%2FQ%3D%3D\"}]}\r\ncf-ray: 9e73ffa4ac83b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"2ba5e95642c652c708881ad3c9d8443f","sha1":"5bfcc33bb9cc897546c600206b03d1307bd63a94","sha256":"c787e9dd6dc8ea3c935f5f0f30e3b9e4a3e066b4619bb244f569883f8e318a24","sha512":"8c157fc41fd03bbd47633269b18effb652644e58284f8f85465b0ffba9b5a06544a03ed0655706c96edfa09a64f4f164f6bbc573ac5045000cae03c8b36d046f","ssdeep":"","tlshash":"7e600000000cc030030f0c00c3000300303000c000000c33000f30cc000000c00fc303","first_seen":"2025-03-08T00:25:13.560069Z","last_seen":"2026-08-10T13:37:39.74151Z","times_seen":216643,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"l.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"185.53.179.200","port":80,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-04T23:12:31.068Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww38.50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 23:12:31 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile\r\nAccept-Ch-Lifetime: 30\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nVia: 0.0 Caddy\r\nX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_VGkEczkClzyj+qMGKd+dRCKEPd8mAv5xAtH3Qqqzu10lkiT5fw5z4q2HflhZjrY7wNVpWBpCjBjSTYjNOBsi3Q==\r\nX-Domain: 50gg.us\r\nX-Pcrew-Blocked-Reason: hosting network\r\nX-Pcrew-Ip-Organization: Blix Solutions\r\nX-Redirect: skenzo\r\nX-Subdomain: ww38\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15461,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (426)","md5":"c8fd42653967d12b4dbecb16df683f6d","sha1":"81306e2a0648743447e662ccb740953e136eb1dc","sha256":"64edf66fc39c476c13451b23b199441038ac87404bc98de9a4307174499744f5","sha512":"4d7869f4233fdc80f0de9cbb08845c27f07d5b69a9ccba89b3273539a22b59a6e1c1368072eafd75f92bf4f9a38301af6405d1b50f06a5f75f1d2c01727a795a","ssdeep":"192:YR8pKfsTxcYoHSiF57zA5GYJiGgOJdt+/eyrR0llY4w8YoHsfOBro2Tc/qqisy:YexcYoHSiF5MVno/uYoHsfO2/k","tlshash":"fc6297436be31519f11b80a98f9aa74532289107960fcdacfaec7668df4c1d461a3bdc","first_seen":"2026-04-04T23:12:54.713148Z","last_seen":"2026-04-04T23:12:54.713148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":98,"dns":0,"connect":102,"send":0,"wait":218,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"ww38.50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ww38.50gg.us/chronos?dune=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.CFUXf1sc0MmvS-NnvhnEjJWTlD-cmG1AX2GiibSOOfj3xWxeipqpuw.h1RyGJpnOVhq4TF2nax7Hw.E6oTgFpVjM6j5UiS7ss9qIp0TNY3WISYXQ-AtDKMxDrbHtPncY_CT7cyB8yJ0ilNBJ8j0vzsGjUM3tyl4fayas2h71qKri1lG2JKdOAz0FyL3LZuHTfxcOwHAfY2F6HkIrGpmapt96862N9FcMxLbNrRmXzFGLe3yLgV0x26rXwo28D9ryaVzJg3MuChJHLS.gHSKTGRNzE7ccXO9lci5Dg\u0026t=69d19adf\u0026token=3fdd95063869056165ad570f0ebb51be8fe06c52","fqdn":"ww38.50gg.us","domain":"50gg.us","tld":"us"},"ip":{"addr":"185.53.179.200","port":80,"asn":61969,"as":"Team Internet AG","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww38.50gg.us/","date":"2026-04-04T23:12:31.482Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /chronos?dune=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.CFUXf1sc0MmvS-NnvhnEjJWTlD-cmG1AX2GiibSOOfj3xWxeipqpuw.h1RyGJpnOVhq4TF2nax7Hw.E6oTgFpVjM6j5UiS7ss9qIp0TNY3WISYXQ-AtDKMxDrbHtPncY_CT7cyB8yJ0ilNBJ8j0vzsGjUM3tyl4fayas2h71qKri1lG2JKdOAz0FyL3LZuHTfxcOwHAfY2F6HkIrGpmapt96862N9FcMxLbNrRmXzFGLe3yLgV0x26rXwo28D9ryaVzJg3MuChJHLS.gHSKTGRNzE7ccXO9lci5Dg\u0026t=69d19adf\u0026token=3fdd95063869056165ad570f0ebb51be8fe06c52 HTTP/1.1\r\nHost: ww38.50gg.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww38.50gg.us/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nServer: nginx\r\nDate: Sat, 04 Apr 2026 23:12:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 146\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":146,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"9fe3cb2b7313dc79bb477bc8fde184a7","sha1":"4d7b3cb41e90618358d0ee066c45c76227a13747","sha256":"32f2fa940d4b4fe19aca1e53a24e5aac29c57b7c5ee78588325b87f1b649c864","sha512":"c54ad4f5292784e50b4830a8210b0d4d4ee08b803f4975c9859e637d483b3af38cb0436ac501dea0c73867b1a2c41b39ef2c27dc3fb20f3f27519b719ea743db","ssdeep":"","tlshash":"2cc08c26351e2c0c96a322b402c36a50d092c3304c5a19004600420371c31168ac3315","first_seen":"2023-04-05T07:27:09Z","last_seen":"2026-08-10T12:29:23.133801Z","times_seen":98650,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-04","alert":"Phishing Block","trigger":"ww38.50gg.us","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"ww38.50gg.us","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","fqdn":"realtimesearchresults.com","domain":"realtimesearchresults.com","tld":"com"},"ip":{"addr":"199.191.50.132","port":443,"asn":40034,"as":"CONFLUENCE-NETWORK-INC","country":"British Virgin Islands","country_code":"VG"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://yfdpco4.com/sk-park.php?pid=9PO15V947\u0026dn=50gg.us\u0026ua=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A134.0%29+Gecko%2F20100101+Firefox%2F134.0\u0026requrl=http%3A%2F%2Fww38.50gg.us%2F\u0026al=en-US%2Cen%3Bq%3D0.5","date":"2026-04-04T23:12:32.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_RSA_WITH_AES_256_CBC_SHA","key_group_name":"none","signature_name":"none","protocol":"TLSv1.2","cert":{"subject":{"commonName":"realtimesearchresults.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 22 Feb 2026 23:39:44 GMT","end":"Sat, 23 May 2026 23:39:43 GMT"},"fingerprint":{"sha1":"31:D9:5D:EC:85:73:9D:40:D2:96:E9:D9:97:7E:68:58:98:B1:2C:D1","sha256":"6B:C9:00:CD:5E:10:B4:46:69:E4:EA:A4:75:56:9C:28:40:9A:3C:DC:5A:45:C5:3D:63:B5:43:63:12:49:00:F0"}}},"request":{"raw":"GET /sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1 HTTP/1.1\r\nHost: realtimesearchresults.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://yfdpco4.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Sat, 04 Apr 2026 23:16:59 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\ncache-control: no-store, max-age=0\r\ncontent-encoding: gzip\r\nlink: \u003chttps://scripts.clarity.ms/0.8.54/clarity.js\u003e; rel=prefetch, \u003chttps://msadsscale.microsoft.com/bingads/telemetryJS.js\u003e; rel=prefetch, \u003chttps://www.clarity.ms\u003e; rel=dns-prefetch, \u003chttps://s.yimg.com/ds/scripts/selectTier-p1.1.0.js\u003e; rel=prefetch\r\nx-sc-h: 21-rxp5\r\nvia: 1.1 google\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":71269,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (43728), with CRLF, LF line terminators","md5":"ed3a53576c4140b1a44730551efb2ac0","sha1":"f77629d81007fe9e33c430493d477887989cd533","sha256":"0847b7109578ef7789a61e3ee67159515509d7ee40b69902167cf66f2af6023c","sha512":"87094292d6ab91dc4f2ecd225941791918bfea206c26632828d00e7353ea371ceefeec9330f6c1b7f05eef7d865d9362f4e7f1955273aef8f3ba15699bde3157","ssdeep":"1536:SuMvZqBkMgSH3MMQKAFQ9MfeAIIfLJnYPNE/PEE5Lom5JuvnDay7uXMcnQUYt3:SuzkMgSH3MMQKAFQ9MfeAIIfLJnaE/P+","tlshash":"f56339dc30827476177721a5513f3e0ef1aa25593a4d8c40e9f5e6a23d7ca9f8a23d0d","first_seen":"2026-04-04T23:12:54.714701Z","last_seen":"2026-04-04T23:12:54.714701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1310,"timings":{"blocked":399,"dns":0,"connect":132,"send":0,"wait":365,"receive":147,"ssl":264},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"realtimesearchresults.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.cdn-fileserver.com/__media__/pics/9000/09/593//arrrow.png","fqdn":"s.cdn-fileserver.com","domain":"cdn-fileserver.com","tld":"com"},"ip":{"addr":"104.21.31.250","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://realtimesearchresults.com/sr/754870121/SAFEFRAME.html?ule=815\u0026%28qWn=g\u0026%28qWnSpus=\u0026%29%28q=r\u0026%29uWdp7=Z\u00260ssWu=g\u00261kusW=Z\u00261u0W=Z\u00266Jd=\u00266Oq=\u00266OqYj=\u00266d=Z\u00266qn4q=\u00267u=\u002686Oq=\u0026J67k1Oq=Yj\u0026JSs=I545Jndd%2Fn7dJx%29Hdn%29xJw%2ARR79H%29JdJHw%29\u0026JWM%29=\u0026JqKiJOp=\u0026JqY=\u0026Jqsg=\u0026Jqsj=\u0026KOq=SyrSdwJV2ydJ62rJwS266rf2wSEj7J7wqy7o\u0026KkJ7=Kpd\u0026OpsSk=omD8.VyDQ%3A3LD%7C2doD%3A7EUBO%29B%29OCBNC\u0026OuOq=Z\u0026S0pij=KuYrXOpsS\u0026S0piw=EI-gyTErV\u0026SOq=oMLfZVwvA\u0026SS=9-\u0026SnOq=oroygyZEf\u0026SqY=-wZro\u0026SsWOq=\u0026WOq=\u0026YO=gVVywrrwygyfEjgwoVE\u0026a6pXSSXd%2AW=\u0026aWkW=\u0026aquWn=\u0026dSnOq=\u0026e1n7=\u0026eq=\u0026htmlsrc=1\u0026iuWJ=Z\u0026kjsaWd=qiKkJ\u0026kkdd=Ah%7Cu%7CA3%2AHn9\u0026ndH%29nk=0ssW%3A%2F%2FyZ%28%28B%29u\u0026pidnn=g\u0026psY=\u0026qdSiii=\u0026qin7=g\u0026suSd=hggoE\u0026tpid=\u0026u6qn4q=\u0026uORd=ggyr%2AfoE\u0026uS=Zw\u0026uukq=%7B%22uuSS%22%3A%229-%22%2C%22uuSsa%22%3A%22KukK%22%2C%22uuOW%22%3A%22%22%2C%22uuuS%22%3A%22Zw%22%7D\u0026eobd=\u0026eoac=RvYbkNvbY\u0026ure=1#vgd_sc=03\u0026acl=\u0026aclp=\u0026cl=\u0026clp=\u0026hvsid=00001775344351857015326356483074\u0026l2type=dmola\u0026lp=%7B%22ppvi%22%3A%222152288995185836520%22%2C%22wlstp%22%3A%220%22%7D\u0026matchstring=\u0026pvl=%7B%22nmerr%22%3A%221%22%7D\u0026pvlp=\u0026sbdrId=\u0026verid=\u0026acid=undefined\u0026mprpslog=sln-AUucF3gRRNthyejWJk24Fm9mKHpuieT9e0Hn7qGcqHw3z7GAcOLhHu3JHBywnfjp_gRSAh3JLhkF0n0JGnV9gEoYfW-gFgW7AI-z-FTPgHJsuBJKr6-y9HGvV5BUOIUgT238lR4CzWiGXTIJ4ZeavmjN1j0AWfrbbOOnxISk0zyymdIp4IV7RdZY4JWVOs2JZGw4w0g%3D\u0026tchkpts=%7B%22prel2%22%3A1775344352036%7D\u0026stime=1775344352036\u0026l3d=%257B%2522l2host%2522%253A%2522https%253A%252F%252Frealtimesearchresults.com%252Fsr%252F754870121%252FSAFEFRAME.html%253F%25252883fff%253D%2526%25252A%252528-f%25252AWe%253D%2526%25252A%252528.%252521%253D%2526%25252A%252528.~%253D%2526%25252A%2525287%253D%2526%25252A3.%253D%252529pap%25252AT88%25252FTO8%25252ARLQ8TLR%25252ANcwwOVQL%25252A8%25252AQNL%2526%25252ASOvhW%252528%253D7%252521%2526%25252AgGL%253D%2526-W%252528%253D3AE38N%25252Ao5A8%25252AS5E%25252AN35SSED5N3X%252521O%25252AON%252528AOJ%2526-v%25252AO%253D-e8%2526.938%253DP~~JX%25262%252528gT%253D~%25262%252528gT3e9.%253D%25263%2525287%253DINKEJ%25263.gW%252528%253D%252633%253DVI%25263Hef%252521%253D-97ElWe.3%25263HefN%253DX%252529I~AZXEo%25263TW%252528%253DJEJA~AKXD%25263W%252528%253DJGdDKoN1b%25267W%253D~ooANEENA~ADX%252521~NJoX%252683TW%252528%253D%252693%253DKN%252699v%252528%253D%25257B%2525229933%252522%25253A%252522VI%252522%25252C%252522993.n%252522%25253A%252522-9v-%252522%25252C%25252299Wg%252522%25253A%252522%252522%25252C%2525229993%252522%25253A%252522KN%252522%25257D%25269S%252528Ta%252528%253D%25269Ww8%253D~~AEcDJX%2526CSW%252528%253D%2526H..g9%253D~%2526L2%252528%253DE%2526L9g8eO%253DK%2526O9%253D%2526S%252528Ta%252528%253D%2526S%25252A8%253D%2526S8%253DK%2526SW%252528%253D%2526SW%2525287%252521%253D%2526T8QLTv%253DH..g%25253A%25252F%25252FAK226L9%2526W9W%252528%253DK%2526We.3v%253DJ_yCzoAyu%25253AUdy%25257C58Jy%25253AOXq6WL6LWk6sk%2526e.7%253D%2526ef8TT%253D~%2526f9g%25252A%253DK%2526gW%252528%253D%2526h9Hg%253DK%2526htmlsrc%253D1%2526hv9.g%253DK%2526j%252528%253D%2526jhTO%253D%2526kkdd%253D3H%25257CW%25257C9HunhA3%25252A%2526n%2525289gT%253D%2526nSel33l8cg%253D%2526ngvg%253D%2526tpid%253D%2526v%252521.ng8%253D%252528f-v%25252A%2522%252C%2522be%2522%253A%25220%2522%252C%2522nmerr%2522%253A%25221%2522%257D\u0026infr=1\u0026twna=1","date":"2026-04-04T23:12:32.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-fileserver.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 28 Mar 2026 17:23:40 GMT","end":"Fri, 26 Jun 2026 18:21:19 GMT"},"fingerprint":{"sha1":"14:40:6C:50:EB:72:8B:4F:5B:EB:47:42:A4:23:EB:35:15:51:12:E8","sha256":"BA:91:84:85:E2:31:BD:3E:58:6F:57:08:D1:C4:A3:1E:2F:8A:AE:6E:C6:E4:BC:C8:47:10:06:D6:9F:53:4E:4B"}}},"request":{"raw":"GET /__media__/pics/9000/09/593//arrrow.png HTTP/1.1\r\nHost: s.cdn-fileserver.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://realtimesearchresults.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 04 Apr 2026 23:12:32 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Mar 2025 13:05:37 GMT\r\naccept-ranges: bytes\r\ncontent-length: 283\r\ncache-control: public, max-age=604800\r\ncontent-type: image/png\r\nvia: 1.1 google\r\nx-cache-status: miss\r\nalt-svc: h3=\":443\"; ma=86400\r\netag: \"11b-62fac2985d568\"\r\nage: 247379\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EiwxydMezCYrZOFdyLU7AtMLQupg0AWdsHDo0lo%2BzfhFCCVM4mvAR8SeO%2BLz%2BD9TvfZCxf3RjzD%2Fk%2FUvkUiwjlQHMbNQAyVgHv1MI9lm3CRIJfhzTaxxW6Ox0b2Id4J3hCOfG0Qqrw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9e73ff9d9c26b51d-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 17 x 27, 8-bit colormap, non-interlaced","md5":"80d42c82a6c37da90210fd60a2f36128","sha1":"554ba7c84d2a27ecf3b1f29d03e62101936b54d8","sha256":"a1626e2d9160a0890a0a8d6e3af9e7095d68a24f9fb5ac8a166000c9a2581e10","sha512":"8ecb032c38176996ee637009833f3399f773b325e4f574fbbd26f93cdb82892c4143c5816543052b3a5123b89ef4b1aaca0407315aab879968085e61a20786b6","ssdeep":"","tlshash":"38d023cb5d512c3dd3615031445810799df2ad602c774182013eb4760f73545c658714","first_seen":"2023-04-06T17:33:21Z","last_seen":"2026-08-10T13:37:39.746817Z","times_seen":224327,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-04","alert":"Sinkholed","trigger":"s.cdn-fileserver.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}